./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2435718431 <...> Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. execve("./syz-executor2435718431", ["./syz-executor2435718431"], 0x7ffda805cf10 /* 10 vars */) = 0 brk(NULL) = 0x555556520000 brk(0x555556520d40) = 0x555556520d40 arch_prctl(ARCH_SET_FS, 0x5555565203c0) = 0 set_tid_address(0x555556520690) = 5055 set_robust_list(0x5555565206a0, 24) = 0 rseq(0x555556520ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2435718431", 4096) = 28 getrandom("\x62\xd7\x14\xd6\xc2\x17\x8d\x3f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556520d40 brk(0x555556541d40) = 0x555556541d40 brk(0x555556542000) = 0x555556542000 mprotect(0x7f91a5172000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5056 attached , child_tidptr=0x555556520690) = 5056 [pid 5055] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] set_robust_list(0x5555565206a0, 24) = 0 ./strace-static-x86_64: Process 5057 attached [pid 5057] set_robust_list(0x5555565206a0, 24 [pid 5055] <... clone resumed>, child_tidptr=0x555556520690) = 5057 [pid 5056] mkdir("./syzkaller.H3zMYa", 0700 [pid 5057] <... set_robust_list resumed>) = 0 [pid 5055] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] mkdir("./syzkaller.exVxpy", 0700 [pid 5056] <... mkdir resumed>) = 0 [pid 5057] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5058 attached [pid 5056] chmod("./syzkaller.H3zMYa", 0777 [pid 5055] <... clone resumed>, child_tidptr=0x555556520690) = 5058 [pid 5058] set_robust_list(0x5555565206a0, 24 [pid 5057] chmod("./syzkaller.exVxpy", 0777 [pid 5055] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] <... set_robust_list resumed>) = 0 [pid 5057] <... chmod resumed>) = 0 [pid 5056] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5059 attached [pid 5058] mkdir("./syzkaller.8Q7Sbj", 0700 [pid 5056] chdir("./syzkaller.H3zMYa") = 0 [pid 5055] <... clone resumed>, child_tidptr=0x555556520690) = 5059 [pid 5059] set_robust_list(0x5555565206a0, 24 [pid 5057] chdir("./syzkaller.exVxpy" [pid 5056] mkdir("./0", 0777 [pid 5058] <... mkdir resumed>) = 0 [pid 5055] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] chmod("./syzkaller.8Q7Sbj", 0777 [pid 5059] <... set_robust_list resumed>) = 0 [pid 5057] <... chdir resumed>) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5060 attached [pid 5059] mkdir("./syzkaller.HZL2FN", 0700 [pid 5058] <... chmod resumed>) = 0 [pid 5057] mkdir("./0", 0777 [pid 5060] set_robust_list(0x5555565206a0, 24 [pid 5058] chdir("./syzkaller.8Q7Sbj" [pid 5056] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5060] <... set_robust_list resumed>) = 0 [pid 5058] <... chdir resumed>) = 0 [pid 5060] mkdir("./syzkaller.VYF0ep", 0700 [pid 5058] mkdir("./0", 0777 [pid 5057] <... mkdir resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... mkdir resumed>) = 0 [pid 5058] <... mkdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] chmod("./syzkaller.VYF0ep", 0777 [pid 5058] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5061 attached [pid 5055] <... clone resumed>, child_tidptr=0x555556520690) = 5060 [pid 5060] <... chmod resumed>) = 0 [pid 5059] chmod("./syzkaller.HZL2FN", 0777 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5061 [pid 5061] set_robust_list(0x5555565206a0, 24 [pid 5060] chdir("./syzkaller.VYF0ep" [pid 5059] <... chmod resumed>) = 0 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5057] <... openat resumed>) = 3 [pid 5060] <... chdir resumed>) = 0 [pid 5055] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] mkdir("./0", 0777 [pid 5058] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5063 attached [pid 5061] <... set_robust_list resumed>) = 0 [pid 5059] chdir("./syzkaller.HZL2FN" [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5055] <... clone resumed>, child_tidptr=0x555556520690) = 5063 [pid 5063] set_robust_list(0x5555565206a0, 24 [pid 5061] chdir("./0" [pid 5060] <... mkdir resumed>) = 0 [pid 5058] close(3 [pid 5063] <... set_robust_list resumed>) = 0 [pid 5061] <... chdir resumed>) = 0 [pid 5059] <... chdir resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5057] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] mkdir("./syzkaller.rpwP6Q", 0700 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] setpgid(0, 0 [pid 5059] mkdir("./0", 0777 [pid 5061] <... setpgid resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5057] close(3 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5057] <... close resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5064 attached [pid 5061] write(3, "1000", 4 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] set_robust_list(0x5555565206a0, 24 [pid 5063] chmod("./syzkaller.rpwP6Q", 0777 [pid 5061] <... write resumed>) = 4 [pid 5064] <... set_robust_list resumed>) = 0 [pid 5063] <... chmod resumed>) = 0 [pid 5061] close(3 [pid 5060] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 5063] chdir("./syzkaller.rpwP6Q" [pid 5061] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... chdir resumed>) = 0 [pid 5061] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5065 attached [pid 5064] chdir("./0" [pid 5063] mkdir("./0", 0777 [pid 5061] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5065 [pid 5065] set_robust_list(0x5555565206a0, 24 [pid 5064] <... chdir resumed>) = 0 [pid 5065] <... set_robust_list resumed>) = 0 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] chdir("./0" [pid 5064] <... prctl resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5060] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5064 [pid 5065] <... chdir resumed>) = 0 [pid 5064] setpgid(0, 0 [pid 5061] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5060] close(3 [pid 5059] <... openat resumed>) = 3 [pid 5065] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... setpgid resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5065] <... prctl resumed>) = 0 [pid 5065] setpgid(0, 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5061] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... setpgid resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5061] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5061] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5066 attached [pid 5065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... openat resumed>) = 3 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5066 [pid 5059] close(3 [pid 5061] <... mmap resumed>) = 0x7f91a5087000 [pid 5065] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5066] set_robust_list(0x5555565206a0, 24 [pid 5065] write(3, "1000", 4 [pid 5064] write(3, "1000", 4 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5061] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... close resumed>) = 0 [pid 5066] <... set_robust_list resumed>) = 0 [pid 5065] <... write resumed>) = 4 [pid 5064] <... write resumed>) = 4 [pid 5066] chdir("./0" [pid 5065] close(3 [pid 5064] close(3 [pid 5063] close(3 [pid 5061] <... mprotect resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5067 attached [pid 5066] <... chdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] set_robust_list(0x5555565206a0, 24 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] symlink("/dev/binderfs", "./binderfs" [pid 5064] symlink("/dev/binderfs", "./binderfs" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... set_robust_list resumed>) = 0 [pid 5066] <... prctl resumed>) = 0 [pid 5067] chdir("./0" [pid 5066] setpgid(0, 0 [pid 5065] <... symlink resumed>) = 0 [pid 5064] <... symlink resumed>) = 0 [pid 5061] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5067 [pid 5067] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5068 attached [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... setpgid resumed>) = 0 [pid 5065] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5068 [pid 5061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5068] set_robust_list(0x5555565206a0, 24 [pid 5067] <... prctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5068] <... set_robust_list resumed>) = 0 [pid 5065] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5064] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5065] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5064] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5064] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5065] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5067] setpgid(0, 0 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] chdir("./0") = 0 [pid 5067] <... setpgid resumed>) = 0 [pid 5066] write(3, "1000", 4 [pid 5065] <... mmap resumed>) = 0x7f91a5087000 [pid 5064] <... mmap resumed>) = 0x7f91a5087000 [pid 5066] <... write resumed>) = 4 [pid 5065] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5061] <... clone3 resumed> => {parent_tid=[5069]}, 88) = 5069 [pid 5065] <... mprotect resumed>) = 0 [pid 5066] close(3 [pid 5065] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5069 attached [pid 5068] <... prctl resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5064] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5069] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5068] setpgid(0, 0 [pid 5065] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5069] <... rseq resumed>) = 0 [pid 5064] <... mprotect resumed>) = 0 [pid 5068] <... setpgid resumed>) = 0 [pid 5069] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5064] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] <... futex resumed>) = 0 [pid 5069] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] memfd_create("syzkaller", 0 [pid 5064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5069] <... memfd_create resumed>) = 3 [pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... clone3 resumed> => {parent_tid=[5070]}, 88) = 5070 [pid 5069] <... mmap resumed>) = 0x7f919cc00000 ./strace-static-x86_64: Process 5071 attached ./strace-static-x86_64: Process 5070 attached [pid 5071] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5070] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5071] <... rseq resumed>) = 0 [pid 5070] <... rseq resumed>) = 0 [pid 5071] set_robust_list(0x7f91a50a79a0, 24 [pid 5070] set_robust_list(0x7f91a50a79a0, 24 [pid 5071] <... set_robust_list resumed>) = 0 [pid 5070] <... set_robust_list resumed>) = 0 [pid 5071] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... symlink resumed>) = 0 [pid 5067] write(3, "1000", 4) = 4 [pid 5065] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] close(3 [pid 5065] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5064] <... clone3 resumed> => {parent_tid=[5071]}, 88) = 5071 [pid 5065] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5066] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = 1 [pid 5064] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] memfd_create("syzkaller", 0 [pid 5068] write(3, "1000", 4 [pid 5067] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... futex resumed>) = 0 [pid 5065] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5064] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... futex resumed>) = 0 [pid 5070] <... memfd_create resumed>) = 3 [pid 5068] <... write resumed>) = 4 [pid 5067] <... symlink resumed>) = 0 [pid 5066] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5064] <... futex resumed>) = 1 [pid 5071] memfd_create("syzkaller", 0 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5071] <... memfd_create resumed>) = 3 [pid 5070] <... mmap resumed>) = 0x7f919cc00000 [pid 5068] close(3 [pid 5067] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... close resumed>) = 0 [pid 5066] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5067] <... futex resumed>) = 0 [pid 5071] <... mmap resumed>) = 0x7f919cc00000 [pid 5067] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5068] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... symlink resumed>) = 0 [pid 5067] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... futex resumed>) = 0 [pid 5068] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5066] <... mmap resumed>) = 0x7f91a5087000 [pid 5068] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5066] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5067] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5066] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5067] <... clone3 resumed> => {parent_tid=[5072]}, 88) = 5072 ./strace-static-x86_64: Process 5072 attached [pid 5067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5067] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5073 attached [pid 5072] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5072] <... rseq resumed>) = 0 [pid 5068] <... mmap resumed>) = 0x7f91a5087000 [pid 5066] <... clone3 resumed> => {parent_tid=[5073]}, 88) = 5073 [pid 5066] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... rseq resumed>) = 0 [pid 5072] set_robust_list(0x7f91a50a79a0, 24 [pid 5068] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] set_robust_list(0x7f91a50a79a0, 24 [pid 5072] <... set_robust_list resumed>) = 0 [pid 5068] <... mprotect resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5072] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5072] memfd_create("syzkaller", 0 [pid 5073] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] <... memfd_create resumed>) = 3 [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... clone3 resumed> => {parent_tid=[5076]}, 88) = 5076 [pid 5072] <... mmap resumed>) = 0x7f919cc00000 [pid 5068] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] memfd_create("syzkaller", 0) = 3 [pid 5068] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5068] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5076 attached [pid 5076] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5076] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5076] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5076] memfd_create("syzkaller", 0) = 3 [pid 5076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5069] <... write resumed>) = 16777216 [pid 5071] <... write resumed>) = 16777216 [pid 5076] <... write resumed>) = 16777216 [pid 5073] <... write resumed>) = 16777216 [pid 5072] <... write resumed>) = 16777216 [pid 5071] munmap(0x7f919cc00000, 138412032 [pid 5070] <... write resumed>) = 16777216 [pid 5069] munmap(0x7f919cc00000, 138412032 [pid 5076] munmap(0x7f919cc00000, 138412032 [pid 5073] munmap(0x7f919cc00000, 138412032 [pid 5072] munmap(0x7f919cc00000, 138412032 [pid 5070] munmap(0x7f919cc00000, 138412032 [pid 5073] <... munmap resumed>) = 0 [pid 5069] <... munmap resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5069] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... munmap resumed>) = 0 [pid 5070] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... openat resumed>) = 4 [pid 5070] <... openat resumed>) = 4 [pid 5069] <... ioctl resumed>) = 0 [pid 5076] <... munmap resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... munmap resumed>) = 0 [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5069] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5069] close(4 [pid 5076] ioctl(4, LOOP_SET_FD, 3 [pid 5069] <... close resumed>) = 0 [ 45.547692][ T5069] loop0: detected capacity change from 0 to 32768 [ 45.567056][ T5072] loop3: detected capacity change from 0 to 32768 [ 45.571998][ T5076] loop5: detected capacity change from 0 to 32768 [ 45.573937][ T5070] loop2: detected capacity change from 0 to 32768 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5070] <... ioctl resumed>) = 0 [pid 5069] mkdir("./file2", 0777 [pid 5076] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] close(3 [pid 5071] <... openat resumed>) = 4 [pid 5070] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] close(4 [pid 5073] close(3 [pid 5072] <... close resumed>) = 0 [pid 5071] ioctl(4, LOOP_SET_FD, 3 [pid 5069] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5076] <... close resumed>) = 0 [pid 5072] close(4 [pid 5076] mkdir("./file2", 0777 [pid 5070] <... close resumed>) = 0 [pid 5070] close(4) = 0 [pid 5070] mkdir("./file2", 0777) = 0 [pid 5070] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5076] <... mkdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5070] <... mount resumed>) = 0 [pid 5072] mkdir("./file2", 0777 [pid 5070] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5070] chdir("./file2") = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5070] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5065] <... futex resumed>) = 0 [pid 5070] rename("./file2", "./file1" [pid 5065] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... mkdir resumed>) = 0 [pid 5076] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5073] <... close resumed>) = 0 [pid 5072] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5073] close(4 [pid 5071] <... ioctl resumed>) = 0 [pid 5065] <... futex resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5065] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] mkdir("./file2", 0777 [pid 5071] close(3) = 0 [pid 5071] close(4 [pid 5073] <... mkdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] mkdir("./file2", 0777 [pid 5076] <... mount resumed>) = 0 [pid 5073] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5071] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5072] <... mount resumed>) = 0 [pid 5071] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5069] <... mount resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5072] chdir("./file2") = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5072] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5069] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5072] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5072] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... futex resumed>) = 0 [pid 5067] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 3 [ 45.591770][ T5073] loop4: detected capacity change from 0 to 32768 [ 45.608076][ T5071] loop1: detected capacity change from 0 to 32768 [ 45.618144][ T5070] ERROR: (device loop2): diWrite: ixpxd invalid [ 45.618144][ T5070] [ 45.627541][ T5070] ERROR: (device loop2): remounting filesystem as read-only [ 45.636170][ T5070] ERROR: (device loop2): txAbort: [ 45.636170][ T5070] [pid 5076] chdir("./file2") = 0 [pid 5073] <... mount resumed>) = 0 [pid 5072] <... futex resumed>) = 0 [pid 5071] <... mount resumed>) = 0 [pid 5070] <... rename resumed>) = -1 EIO (Input/output error) [pid 5069] chdir("./file2" [pid 5067] <... futex resumed>) = 1 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5069] <... chdir resumed>) = 0 [pid 5072] rename("./file2", "./file1" [pid 5067] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5065] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5065] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5070] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5071] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5070] <... futex resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5070] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... clone3 resumed> => {parent_tid=[5077]}, 88) = 5077 [pid 5071] chdir("./file2" [pid 5065] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] <... chdir resumed>) = 0 [pid 5065] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... futex resumed>) = 0 [pid 5071] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5077 attached [pid 5071] <... futex resumed>) = 1 [pid 5077] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5071] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5077] <... rseq resumed>) = 0 [pid 5077] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5077] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5077] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5077] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5076] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] chdir("./file2" [pid 5069] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... futex resumed>) = 0 [pid 5073] <... chdir resumed>) = 0 [pid 5064] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 1 [pid 5073] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5069] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 1 [pid 5077] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... futex resumed>) = 0 [pid 5068] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] <... futex resumed>) = 1 [pid 5073] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] rename("./file2", "./file1" [pid 5069] <... futex resumed>) = 1 [pid 5068] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = 0 [pid 5064] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [ 45.675963][ T5072] ERROR: (device loop3): diWrite: ixpxd invalid [ 45.675963][ T5072] [ 45.688865][ T5072] ERROR: (device loop3): remounting filesystem as read-only [ 45.698875][ T5071] ERROR: (device loop1): diWrite: ixpxd invalid [ 45.698875][ T5071] [ 45.708983][ T5069] ERROR: (device loop0): diWrite: ixpxd invalid [ 45.708983][ T5069] [ 45.710850][ T5072] ERROR: (device loop3): txAbort: [ 45.710850][ T5072] [pid 5077] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] rename("./file2", "./file1" [pid 5073] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rename("./file2", "./file1" [pid 5068] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] exit_group(0 [pid 5061] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5077] <... futex resumed>) = ? [pid 5065] <... exit_group resumed>) = ? [pid 5061] <... futex resumed>) = 0 [pid 5077] +++ exited with 0 +++ [pid 5070] <... futex resumed>) = ? [pid 5061] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] +++ exited with 0 +++ [pid 5065] +++ exited with 0 +++ [pid 5066] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] rename("./file2", "./file1" [pid 5066] <... futex resumed>) = 0 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5065, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5058] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5067] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5067] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5067] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5079]}, 88) = 5079 [pid 5067] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5067] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5079 attached [pid 5066] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... restart_syscall resumed>) = 0 [pid 5079] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5061] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5079] <... rseq resumed>) = 0 [pid 5068] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5064] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... mmap resumed>) = 0x7f91a5066000 [pid 5058] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5061] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 0 [pid 5079] set_robust_list(0x7f91a50869a0, 24 [pid 5068] <... futex resumed>) = 0 [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5058] <... openat resumed>) = 3 [pid 5061] <... clone3 resumed> => {parent_tid=[5080]}, 88) = 5080 [pid 5064] <... mmap resumed>) = 0x7f91a5066000 [pid 5068] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5064] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5079] <... set_robust_list resumed>) = 0 [pid 5058] newfstatat(3, "", [pid 5068] <... mmap resumed>) = 0x7f91a5066000 [pid 5061] rt_sigprocmask(SIG_SETMASK, [], [pid 5064] <... mprotect resumed>) = 0 [pid 5061] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5061] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5058] getdents64(3, [pid 5064] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5061] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] <... mprotect resumed>) = 0 [pid 5079] rt_sigprocmask(SIG_SETMASK, [], [pid 5064] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [ 45.718186][ T5076] ERROR: (device loop5): diWrite: ixpxd invalid [ 45.718186][ T5076] [ 45.736434][ T5071] ERROR: (device loop1): remounting filesystem as read-only [ 45.737924][ T5073] ERROR: (device loop4): diWrite: ixpxd invalid [ 45.737924][ T5073] [ 45.752787][ T5069] ERROR: (device loop0): remounting filesystem as read-only [ 45.761272][ T5069] ERROR: (device loop0): txAbort: [ 45.761272][ T5069] [ 45.768735][ T5076] ERROR: (device loop5): remounting filesystem as read-only ./strace-static-x86_64: Process 5081 attached [pid 5079] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5080 attached [pid 5080] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5081] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5080] set_robust_list(0x7f91a50869a0, 24 [pid 5079] mkdir(".", 0777 [pid 5068] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5064] <... clone3 resumed> => {parent_tid=[5081]}, 88) = 5081 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... rseq resumed>) = 0 [pid 5079] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5076] <... rename resumed>) = -1 EIO (Input/output error) [pid 5069] <... rename resumed>) = -1 EIO (Input/output error) [pid 5068] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5064] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5064] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] unlink("./0/binderfs" [pid 5080] <... set_robust_list resumed>) = 0 [pid 5080] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5080] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5080] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5066] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5082 attached [pid 5079] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5068] <... clone3 resumed> => {parent_tid=[5082]}, 88) = 5082 [pid 5066] <... futex resumed>) = 0 [pid 5081] set_robust_list(0x7f91a50869a0, 24 [pid 5064] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5064] <... futex resumed>) = 0 [pid 5069] <... futex resumed>) = 0 [pid 5082] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5081] <... set_robust_list resumed>) = 0 [pid 5080] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5079] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5076] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... rename resumed>) = -1 EIO (Input/output error) [pid 5072] <... rename resumed>) = -1 EIO (Input/output error) [pid 5071] <... rename resumed>) = -1 EIO (Input/output error) [pid 5069] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... mmap resumed>) = 0x7f91a5066000 [pid 5064] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] <... rseq resumed>) = 0 [pid 5081] rt_sigprocmask(SIG_SETMASK, [], [pid 5080] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5079] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... futex resumed>) = 0 [pid 5073] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5058] <... umount2 resumed>) = 0 [pid 5082] set_robust_list(0x7f91a50869a0, 24 [pid 5081] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5080] <... futex resumed>) = 1 [pid 5079] <... futex resumed>) = 1 [pid 5076] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... futex resumed>) = 0 [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = 0 [pid 5068] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... futex resumed>) = 0 [pid 5066] <... mprotect resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [pid 5058] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5082] <... set_robust_list resumed>) = 0 [pid 5081] mkdir(".", 0777 [pid 5080] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... futex resumed>) = 0 [pid 5067] exit_group(0 [pid 5066] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5061] exit_group(0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5080] <... futex resumed>) = ? [pid 5079] <... futex resumed>) = ? [pid 5072] <... futex resumed>) = ? [pid 5069] <... futex resumed>) = ? [pid 5068] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5067] <... exit_group resumed>) = ? [pid 5066] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5061] <... exit_group resumed>) = ? [pid 5058] newfstatat(AT_FDCWD, "./0/file2", [pid 5082] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5080] +++ exited with 0 +++ [pid 5079] +++ exited with 0 +++ [pid 5072] +++ exited with 0 +++ [pid 5069] +++ exited with 0 +++ [pid 5066] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5083 attached [pid 5082] mkdir(".", 0777 [pid 5081] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5061] +++ exited with 0 +++ [pid 5058] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5082] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5081] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] +++ exited with 0 +++ [pid 5066] <... clone3 resumed> => {parent_tid=[5083]}, 88) = 5083 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=15 /* 0.15 s */} --- [pid 5083] <... rseq resumed>) = 0 [pid 5082] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5081] <... futex resumed>) = 1 [pid 5066] rt_sigprocmask(SIG_SETMASK, [], [pid 5064] <... futex resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5083] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5083] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5064] exit_group(0 [pid 5058] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... futex resumed>) = ? [pid 5066] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... exit_group resumed>) = ? [pid 5058] <... openat resumed>) = 4 [pid 5056] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... futex resumed>) = 0 [pid 5082] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] +++ exited with 0 +++ [pid 5066] <... futex resumed>) = 1 [pid 5058] newfstatat(4, "", [pid 5083] mkdir(".", 0777 [pid 5071] +++ exited with 0 +++ [pid 5066] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] <... futex resumed>) = 0 [pid 5064] +++ exited with 0 +++ [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5082] <... futex resumed>) = 1 [pid 5068] exit_group(0 [ 45.779338][ T5076] ERROR: (device loop5): txAbort: [ 45.779338][ T5076] [ 45.781681][ T5071] ERROR: (device loop1): txAbort: [ 45.781681][ T5071] [ 45.787473][ T5073] ERROR: (device loop4): remounting filesystem as read-only [ 45.802600][ T5073] ERROR: (device loop4): txAbort: [ 45.802600][ T5073] [ 45.812743][ T5072] ERROR: (device loop3): remounting filesystem as read-only [pid 5059] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] getdents64(4, [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5064, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5056] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5076] <... futex resumed>) = ? [pid 5068] <... exit_group resumed>) = ? [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5083] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5082] +++ exited with 0 +++ [pid 5076] +++ exited with 0 +++ [pid 5059] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] getdents64(4, [pid 5056] <... openat resumed>) = 3 [pid 5083] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] newfstatat(3, "", [pid 5083] <... futex resumed>) = 1 [pid 5066] <... futex resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5058] close(4 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] +++ exited with 0 +++ [pid 5066] exit_group(0 [pid 5059] newfstatat(3, "", [pid 5058] <... close resumed>) = 0 [pid 5056] getdents64(3, [pid 5058] rmdir("./0/file2" [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... rmdir resumed>) = 0 [pid 5057] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 5083] <... futex resumed>) = ? [pid 5073] <... futex resumed>) = ? [pid 5066] <... exit_group resumed>) = ? [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5058] getdents64(3, [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5083] +++ exited with 0 +++ [pid 5073] +++ exited with 0 +++ [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] close(3 [pid 5057] <... openat resumed>) = 3 [pid 5056] unlink("./0/binderfs" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... close resumed>) = 0 [pid 5057] newfstatat(3, "", [pid 5056] <... unlink resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5058] rmdir("./0" [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] +++ exited with 0 +++ [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5057] getdents64(3, [pid 5058] mkdir("./1", 0777 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5059] unlink("./0/binderfs" [pid 5058] <... mkdir resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... unlink resumed>) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... openat resumed>) = 3 [pid 5057] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = 0 [pid 5063] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 5057] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] newfstatat(3, "", [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] newfstatat(AT_FDCWD, "./0/file2", [pid 5063] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] unlink("./0/binderfs" [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(3, "", [pid 5060] getdents64(3, [pid 5057] <... unlink resumed>) = 0 [pid 5056] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5060] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... openat resumed>) = 4 [pid 5056] newfstatat(4, "", [pid 5063] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] getdents64(4, [pid 5060] unlink("./0/binderfs" [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5063] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5060] <... unlink resumed>) = 0 [pid 5056] rmdir("./0/file2" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... rmdir resumed>) = 0 [pid 5063] unlink("./0/binderfs" [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./0" [pid 5063] <... unlink resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5056] mkdir("./1", 0777 [pid 5063] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... mkdir resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./0/file2", [pid 5060] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] newfstatat(AT_FDCWD, "./0/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 4 [pid 5060] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(4, "", [pid 5059] getdents64(4, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5059] getdents64(4, [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5059] close(4 [pid 5060] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5060] rmdir("./0/file2" [pid 5059] rmdir("./0/file2" [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(3, [pid 5059] close(3 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] <... close resumed>) = 0 [pid 5060] close(3 [pid 5059] rmdir("./0" [pid 5060] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5060] rmdir("./0" [pid 5059] mkdir("./1", 0777 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5060] mkdir("./1", 0777 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5084 attached , child_tidptr=0x555556520690) = 5084 [pid 5056] <... ioctl resumed>) = 0 [pid 5084] set_robust_list(0x5555565206a0, 24 [pid 5056] close(3) = 0 [pid 5084] <... set_robust_list resumed>) = 0 [pid 5084] chdir("./1" [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5085 attached [pid 5084] <... chdir resumed>) = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] setpgid(0, 0) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5084] write(3, "1000", 4 [pid 5085] set_robust_list(0x5555565206a0, 24 [pid 5084] <... write resumed>) = 4 [pid 5085] <... set_robust_list resumed>) = 0 [pid 5084] close(3 [pid 5085] chdir("./1" [pid 5084] <... close resumed>) = 0 [pid 5085] <... chdir resumed>) = 0 [pid 5084] symlink("/dev/binderfs", "./binderfs" [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... symlink resumed>) = 0 [pid 5085] <... prctl resumed>) = 0 [pid 5084] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] setpgid(0, 0 [pid 5084] <... futex resumed>) = 0 [pid 5085] <... setpgid resumed>) = 0 [pid 5084] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5084] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5085] write(3, "1000", 4 [pid 5084] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5085 [pid 5085] <... write resumed>) = 4 [pid 5084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] close(3 [pid 5084] <... mmap resumed>) = 0x7f91a5087000 [pid 5085] <... close resumed>) = 0 [pid 5084] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5085] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... mprotect resumed>) = 0 [pid 5085] <... symlink resumed>) = 0 [pid 5084] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5084] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5085] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... clone3 resumed> => {parent_tid=[5086]}, 88) = 5086 [pid 5085] <... futex resumed>) = 0 [pid 5084] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5084] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5084] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] <... futex resumed>) = 0 [pid 5085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5085] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 5086 attached [pid 5085] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5086] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5086] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5086] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5086] memfd_create("syzkaller", 0) = 3 [pid 5085] <... clone3 resumed> => {parent_tid=[5087]}, 88) = 5087 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5087 attached ) = 0x7f919cc00000 [pid 5085] rt_sigprocmask(SIG_SETMASK, [], [pid 5087] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5085] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] <... rseq resumed>) = 0 [pid 5085] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] set_robust_list(0x7f91a50a79a0, 24 [pid 5085] <... futex resumed>) = 0 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5087] memfd_create("syzkaller", 0 [pid 5085] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5087] <... memfd_create resumed>) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./0/file2", [pid 5063] <... umount2 resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./0/file2", [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] <... openat resumed>) = 4 [pid 5063] umount2("./0/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] getdents64(4, [pid 5063] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4 [pid 5063] <... openat resumed>) = 4 [pid 5057] <... close resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5057] rmdir("./0/file2" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5057] getdents64(3, [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5057] close(3 [pid 5063] <... close resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5057] rmdir("./0" [pid 5063] rmdir("./0/file2" [pid 5059] <... ioctl resumed>) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5057] mkdir("./1", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 5057] <... mkdir resumed>) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] getdents64(3, [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5059] close(3 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./0" [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5060] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5089 ./strace-static-x86_64: Process 5088 attached [pid 5063] mkdir("./1", 0777./strace-static-x86_64: Process 5089 attached [pid 5089] set_robust_list(0x5555565206a0, 24 [pid 5088] set_robust_list(0x5555565206a0, 24 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5089] chdir("./1") = 0 [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5088] <... set_robust_list resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5088 [pid 5089] <... prctl resumed>) = 0 [pid 5088] chdir("./1" [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5089] setpgid(0, 0) = 0 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1000", 4) = 4 [pid 5089] close(3 [pid 5088] <... chdir resumed>) = 0 [pid 5089] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] symlink("/dev/binderfs", "./binderfs" [pid 5088] <... prctl resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5089] <... symlink resumed>) = 0 [pid 5088] setpgid(0, 0 [pid 5089] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... setpgid resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5089] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5089] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] <... mmap resumed>) = 0x7f91a5087000 [pid 5089] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5089] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5089] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5090]}, 88) = 5090 [pid 5089] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5089] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5089] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5090 attached [pid 5090] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5090] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5090] memfd_create("syzkaller", 0) = 3 [pid 5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5088] <... openat resumed>) = 3 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs" [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5088] <... symlink resumed>) = 0 [pid 5088] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5088] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5088] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5088] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5088] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5091 attached [pid 5091] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5088] <... clone3 resumed> => {parent_tid=[5091]}, 88) = 5091 [pid 5091] <... rseq resumed>) = 0 [pid 5088] rt_sigprocmask(SIG_SETMASK, [], [pid 5091] set_robust_list(0x7f91a50a79a0, 24 [pid 5088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5088] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] rt_sigprocmask(SIG_SETMASK, [], [pid 5088] <... futex resumed>) = 0 [pid 5091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5088] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5091] memfd_create("syzkaller", 0) = 3 [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] <... ioctl resumed>) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3 [pid 5063] close(3 [pid 5057] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5092 ./strace-static-x86_64: Process 5092 attached ./strace-static-x86_64: Process 5093 attached [pid 5092] set_robust_list(0x5555565206a0, 24 [pid 5093] set_robust_list(0x5555565206a0, 24 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5093 [pid 5093] <... set_robust_list resumed>) = 0 [pid 5092] chdir("./1" [pid 5093] chdir("./1" [pid 5092] <... chdir resumed>) = 0 [pid 5093] <... chdir resumed>) = 0 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5092] <... prctl resumed>) = 0 [pid 5093] <... prctl resumed>) = 0 [pid 5092] setpgid(0, 0) = 0 [pid 5093] setpgid(0, 0 [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5093] <... setpgid resumed>) = 0 [pid 5092] <... openat resumed>) = 3 [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5092] write(3, "1000", 4) = 4 [pid 5092] close(3) = 0 [pid 5092] symlink("/dev/binderfs", "./binderfs" [pid 5093] <... openat resumed>) = 3 [pid 5092] <... symlink resumed>) = 0 [pid 5092] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5092] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5093] write(3, "1000", 4 [pid 5092] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5093] <... write resumed>) = 4 [pid 5092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5093] close(3 [pid 5092] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5087] <... write resumed>) = 16777216 [pid 5092] <... mmap resumed>) = 0x7f91a5087000 [pid 5092] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5093] <... close resumed>) = 0 [pid 5093] symlink("/dev/binderfs", "./binderfs" [pid 5092] <... mprotect resumed>) = 0 [pid 5092] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5093] <... symlink resumed>) = 0 [pid 5092] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5092] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5094 attached => {parent_tid=[5094]}, 88) = 5094 [pid 5094] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5092] rt_sigprocmask(SIG_SETMASK, [], [pid 5094] <... rseq resumed>) = 0 [pid 5092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5094] set_robust_list(0x7f91a50a79a0, 24 [pid 5092] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... set_robust_list resumed>) = 0 [pid 5093] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... futex resumed>) = 0 [pid 5094] rt_sigprocmask(SIG_SETMASK, [], [pid 5093] <... futex resumed>) = 0 [pid 5092] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5094] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5093] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5094] memfd_create("syzkaller", 0 [pid 5093] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5094] <... memfd_create resumed>) = 3 [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5093] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5093] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5087] munmap(0x7f919cc00000, 138412032 [pid 5093] <... mprotect resumed>) = 0 [pid 5087] <... munmap resumed>) = 0 [pid 5086] <... write resumed>) = 16777216 [pid 5093] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5086] munmap(0x7f919cc00000, 138412032 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5093] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5087] <... ioctl resumed>) = 0 [pid 5087] close(3) = 0 [pid 5087] close(4) = 0 [pid 5087] mkdir("./file2", 0777) = 0 [pid 5087] mount("/dev/loop0", "./file2", "jfs", 0, ""./strace-static-x86_64: Process 5095 attached [pid 5095] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5095] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5095] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5095] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] <... clone3 resumed> => {parent_tid=[5095]}, 88) = 5095 [pid 5093] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5093] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = 0 [pid 5093] <... futex resumed>) = 1 [pid 5086] <... munmap resumed>) = 0 [pid 5095] memfd_create("syzkaller", 0 [pid 5093] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5095] <... memfd_create resumed>) = 3 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5086] <... openat resumed>) = 4 [pid 5086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5086] close(3) = 0 [pid 5086] close(4) = 0 [pid 5086] mkdir("./file2", 0777 [pid 5087] <... mount resumed>) = 0 [pid 5086] <... mkdir resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5087] chdir("./file2" [pid 5086] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5087] <... chdir resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5087] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 46.623453][ T5087] loop0: detected capacity change from 0 to 32768 [ 46.661859][ T5086] loop2: detected capacity change from 0 to 32768 [pid 5087] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5086] <... mount resumed>) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5086] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5085] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] chdir("./file2" [pid 5087] <... futex resumed>) = 0 [pid 5085] <... futex resumed>) = 1 [pid 5087] rename("./file2", "./file1" [pid 5085] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5086] <... chdir resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5086] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5086] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... futex resumed>) = 0 [pid 5084] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5084] <... futex resumed>) = 1 [pid 5086] rename("./file2", "./file1" [ 46.723101][ T5087] ERROR: (device loop0): diWrite: ixpxd invalid [ 46.723101][ T5087] [ 46.745221][ T5086] ERROR: (device loop2): diWrite: ixpxd invalid [ 46.745221][ T5086] [ 46.745325][ T5087] ERROR: (device loop0): remounting filesystem as read-only [pid 5084] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] <... mmap resumed>) = 0x7f91a5066000 [pid 5084] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... futex resumed>) = 0 [pid 5085] <... mprotect resumed>) = 0 [pid 5084] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5086] <... rename resumed>) = -1 EIO (Input/output error) [pid 5085] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] <... mmap resumed>) = 0x7f91a5066000 [pid 5086] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5084] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5087] <... rename resumed>) = -1 EIO (Input/output error) [pid 5086] <... futex resumed>) = 0 [pid 5085] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5084] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5096 attached [pid 5086] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... clone3 resumed> => {parent_tid=[5096]}, 88) = 5096 [pid 5084] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5096] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5090] <... write resumed>) = 16777216 [pid 5087] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5096] <... rseq resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5085] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 46.781193][ T5086] ERROR: (device loop2): remounting filesystem as read-only [ 46.788485][ T5086] ERROR: (device loop2): txAbort: [ 46.788485][ T5086] [ 46.791577][ T5087] ERROR: (device loop0): txAbort: [ 46.791577][ T5087] [pid 5096] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5087] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5097 attached [pid 5096] rt_sigprocmask(SIG_SETMASK, [], [pid 5090] munmap(0x7f919cc00000, 138412032 [pid 5097] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... futex resumed>) = 0 [pid 5084] <... clone3 resumed> => {parent_tid=[5097]}, 88) = 5097 [pid 5096] mkdir(".", 0777 [pid 5097] <... rseq resumed>) = 0 [pid 5085] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] rt_sigprocmask(SIG_SETMASK, [], [pid 5097] set_robust_list(0x7f91a50869a0, 24 [pid 5096] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5097] <... set_robust_list resumed>) = 0 [pid 5096] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5084] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5097] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5096] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5096] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5097] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] <... futex resumed>) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5097] mkdir(".", 0777 [pid 5096] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] exit_group(0 [pid 5097] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5096] <... futex resumed>) = ? [pid 5087] <... futex resumed>) = ? [pid 5085] <... exit_group resumed>) = ? [pid 5096] +++ exited with 0 +++ [pid 5087] +++ exited with 0 +++ [pid 5085] +++ exited with 0 +++ [pid 5097] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=14 /* 0.14 s */} --- [pid 5097] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5097] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5084] <... futex resumed>) = 0 [pid 5056] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5097] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] exit_group(0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5097] <... futex resumed>) = ? [pid 5086] <... futex resumed>) = ? [pid 5084] <... exit_group resumed>) = ? [pid 5056] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5097] +++ exited with 0 +++ [pid 5056] <... openat resumed>) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5086] +++ exited with 0 +++ [pid 5084] +++ exited with 0 +++ [pid 5056] getdents64(3, [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] restart_syscall(<... resuming interrupted clone ...> [pid 5056] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... restart_syscall resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./1/binderfs" [pid 5058] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... unlink resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] <... openat resumed>) = 3 [pid 5058] newfstatat(3, "", [pid 5056] <... umount2 resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] getdents64(3, [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] newfstatat(AT_FDCWD, "./1/file2", [pid 5058] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5056] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] unlink("./1/binderfs" [pid 5056] openat(AT_FDCWD, "./1/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5090] <... munmap resumed>) = 0 [pid 5058] <... unlink resumed>) = 0 [pid 5058] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5056] <... openat resumed>) = 4 [pid 5090] <... openat resumed>) = 4 [pid 5090] ioctl(4, LOOP_SET_FD, 3 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./1/file2" [pid 5091] <... write resumed>) = 16777216 [pid 5090] <... ioctl resumed>) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5091] munmap(0x7f919cc00000, 138412032 [pid 5090] close(3 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3 [pid 5090] <... close resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5090] close(4 [pid 5056] rmdir("./1") = 0 [pid 5056] mkdir("./2", 0777 [pid 5090] <... close resumed>) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5090] mkdir("./file2", 0777) = 0 [pid 5090] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5058] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./1/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./1/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4 [pid 5090] <... mount resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5090] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] rmdir("./1/file2" [pid 5090] <... openat resumed>) = 3 [pid 5058] <... rmdir resumed>) = 0 [pid 5090] chdir("./file2" [pid 5058] getdents64(3, [pid 5090] <... chdir resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5090] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5058] close(3 [pid 5090] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5058] <... close resumed>) = 0 [pid 5090] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] rmdir("./1" [pid 5090] <... futex resumed>) = 1 [pid 5089] <... futex resumed>) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5090] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] mkdir("./2", 0777 [pid 5090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] <... futex resumed>) = 0 [pid 5058] <... mkdir resumed>) = 0 [pid 5091] <... munmap resumed>) = 0 [ 46.875220][ T5090] loop4: detected capacity change from 0 to 32768 [pid 5090] rename("./file2", "./file1" [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5089] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... openat resumed>) = 3 [pid 5091] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5091] <... openat resumed>) = 4 [pid 5091] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5091] close(3) = 0 [pid 5091] close(4) = 0 [pid 5091] mkdir("./file2", 0777) = 0 [pid 5091] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5089] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5089] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5089] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5089] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 46.921897][ T5090] ERROR: (device loop4): diWrite: ixpxd invalid [ 46.921897][ T5090] [ 46.931670][ T5091] loop3: detected capacity change from 0 to 32768 [ 46.955139][ T5090] ERROR: (device loop4): remounting filesystem as read-only [pid 5089] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5098]}, 88) = 5098 [pid 5089] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5098 attached [pid 5091] <... mount resumed>) = 0 [pid 5089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5089] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5091] <... openat resumed>) = 3 [pid 5089] <... futex resumed>) = 0 [pid 5091] chdir("./file2" [pid 5098] set_robust_list(0x7f91a50869a0, 24 [pid 5091] <... chdir resumed>) = 0 [pid 5089] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5091] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5098] <... set_robust_list resumed>) = 0 [pid 5091] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5091] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5088] <... futex resumed>) = 0 [pid 5091] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] rt_sigprocmask(SIG_SETMASK, [], [pid 5091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5088] <... futex resumed>) = 0 [pid 5098] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] rename("./file2", "./file1" [pid 5088] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5098] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5090] <... rename resumed>) = -1 EIO (Input/output error) [pid 5090] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5098] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5089] <... futex resumed>) = 0 [ 47.001757][ T5090] ERROR: (device loop4): txAbort: [ 47.001757][ T5090] [ 47.022258][ T5091] ERROR: (device loop3): diWrite: ixpxd invalid [ 47.022258][ T5091] [ 47.031947][ T5091] ERROR: (device loop3): remounting filesystem as read-only [pid 5089] exit_group(0) = ? [pid 5088] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5098] +++ exited with 0 +++ [pid 5088] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5090] <... futex resumed>) = ? [pid 5088] <... mmap resumed>) = 0x7f91a5066000 [pid 5090] +++ exited with 0 +++ [pid 5089] +++ exited with 0 +++ [pid 5088] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5088] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5088] <... clone3 resumed> => {parent_tid=[5099]}, 88) = 5099 [pid 5088] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5088] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5099 attached ) = -1 EINVAL (Invalid argument) [pid 5099] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5060] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5099] <... rseq resumed>) = 0 [pid 5099] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5099] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] newfstatat(3, "", [pid 5099] mkdir(".", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5099] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5099] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5091] <... rename resumed>) = -1 EIO (Input/output error) [pid 5099] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5099] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5088] <... futex resumed>) = 0 [pid 5099] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5091] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] <... futex resumed>) = 0 [pid 5091] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] exit_group(0 [pid 5091] <... futex resumed>) = ? [pid 5088] <... exit_group resumed>) = ? [pid 5091] +++ exited with 0 +++ [pid 5099] <... futex resumed>) = ? [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] +++ exited with 0 +++ [pid 5088] +++ exited with 0 +++ [pid 5060] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=14 /* 0.14 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... restart_syscall resumed>) = 0 [pid 5059] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] unlink("./1/binderfs" [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./1/binderfs") = 0 [ 47.071696][ T5091] ERROR: (device loop3): txAbort: [ 47.071696][ T5091] [pid 5059] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5094] <... write resumed>) = 16777216 [pid 5094] munmap(0x7f919cc00000, 138412032) = 0 [pid 5094] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5094] ioctl(4, LOOP_SET_FD, 3 [pid 5095] <... write resumed>) = 16777216 [pid 5094] <... ioctl resumed>) = 0 [pid 5094] close(3 [pid 5095] munmap(0x7f919cc00000, 138412032 [pid 5094] <... close resumed>) = 0 [pid 5094] close(4) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5094] mkdir("./file2", 0777 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5100 ./strace-static-x86_64: Process 5100 attached [pid 5094] <... mkdir resumed>) = 0 [pid 5100] set_robust_list(0x5555565206a0, 24) = 0 [pid 5100] chdir("./2") = 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5100] setpgid(0, 0) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5094] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5100] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5100] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5100] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5100] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5100] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5101 attached => {parent_tid=[5101]}, 88) = 5101 [pid 5101] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5100] rt_sigprocmask(SIG_SETMASK, [], [pid 5101] <... rseq resumed>) = 0 [pid 5100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5101] set_robust_list(0x7f91a50a79a0, 24 [pid 5100] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... set_robust_list resumed>) = 0 [pid 5100] <... futex resumed>) = 0 [pid 5101] rt_sigprocmask(SIG_SETMASK, [], [pid 5100] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5101] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5101] memfd_create("syzkaller", 0 [pid 5095] <... munmap resumed>) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5101] <... memfd_create resumed>) = 3 [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [ 47.160748][ T5094] loop1: detected capacity change from 0 to 32768 [pid 5095] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5102 attached [pid 5095] <... openat resumed>) = 4 [pid 5094] <... mount resumed>) = 0 [pid 5102] set_robust_list(0x5555565206a0, 24 [pid 5095] ioctl(4, LOOP_SET_FD, 3 [pid 5094] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5102 [pid 5094] <... openat resumed>) = 3 [pid 5094] chdir("./file2") = 0 [pid 5102] <... set_robust_list resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5094] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] chdir("./2") = 0 [pid 5095] <... ioctl resumed>) = 0 [pid 5094] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5095] close(3 [pid 5094] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... prctl resumed>) = 0 [pid 5095] <... close resumed>) = 0 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] <... futex resumed>) = 0 [pid 5102] setpgid(0, 0 [pid 5092] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... setpgid resumed>) = 0 [pid 5095] close(4 [pid 5094] rename("./file2", "./file1" [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] <... close resumed>) = 0 [pid 5102] write(3, "1000", 4) = 4 [pid 5095] mkdir("./file2", 0777 [pid 5102] close(3 [pid 5095] <... mkdir resumed>) = 0 [pid 5102] <... close resumed>) = 0 [pid 5095] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5102] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5102] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5095] <... mount resumed>) = 0 [pid 5094] <... rename resumed>) = -1 EIO (Input/output error) [pid 5102] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5095] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5094] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5095] <... openat resumed>) = 3 [pid 5094] <... futex resumed>) = 0 [pid 5092] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5095] chdir("./file2" [pid 5094] mkdir(".", 0777 [pid 5092] <... futex resumed>) = 0 [pid 5102] <... mmap resumed>) = 0x7f91a5087000 [pid 5095] <... chdir resumed>) = 0 [pid 5094] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5092] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5102] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5095] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5094] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5102] <... mprotect resumed>) = 0 [pid 5095] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5102] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5095] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5095] <... futex resumed>) = 1 [pid 5094] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5093] <... futex resumed>) = 0 [pid 5102] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5095] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5103 attached [pid 5095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5094] <... futex resumed>) = 1 [pid 5092] <... futex resumed>) = 0 [pid 5103] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5102] <... clone3 resumed> => {parent_tid=[5103]}, 88) = 5103 [ 47.251259][ T5095] loop5: detected capacity change from 0 to 32768 [ 47.260279][ T5094] ERROR: (device loop1): diWrite: ixpxd invalid [ 47.260279][ T5094] [ 47.279603][ T5094] ERROR: (device loop1): remounting filesystem as read-only [ 47.287982][ T5094] ERROR: (device loop1): txAbort: [ 47.287982][ T5094] [pid 5095] rename("./file2", "./file1" [pid 5094] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] exit_group(0 [pid 5103] <... rseq resumed>) = 0 [pid 5102] rt_sigprocmask(SIG_SETMASK, [], [pid 5094] <... futex resumed>) = ? [pid 5093] <... futex resumed>) = 0 [pid 5092] <... exit_group resumed>) = ? [pid 5102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5094] +++ exited with 0 +++ [pid 5093] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] +++ exited with 0 +++ [pid 5103] set_robust_list(0x7f91a50a79a0, 24 [pid 5102] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... set_robust_list resumed>) = 0 [pid 5102] <... futex resumed>) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5092, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=19 /* 0.19 s */} --- [pid 5103] rt_sigprocmask(SIG_SETMASK, [], [pid 5102] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5103] memfd_create("syzkaller", 0 [pid 5057] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5103] <... memfd_create resumed>) = 3 [pid 5057] <... openat resumed>) = 3 [pid 5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5057] newfstatat(3, "", [pid 5103] <... mmap resumed>) = 0x7f919cc00000 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./1/binderfs") = 0 [pid 5057] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5095] <... rename resumed>) = -1 EIO (Input/output error) [pid 5095] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5093] <... futex resumed>) = 0 [pid 5057] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] mkdir(".", 0777 [pid 5093] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5095] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5093] <... futex resumed>) = 0 [pid 5057] newfstatat(AT_FDCWD, "./1/file2", [pid 5093] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5095] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5095] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./1/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5095] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5095] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] <... futex resumed>) = 0 [pid 5057] <... openat resumed>) = 4 [pid 5093] exit_group(0 [pid 5057] newfstatat(4, "", [pid 5093] <... exit_group resumed>) = ? [pid 5095] <... futex resumed>) = ? [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5095] +++ exited with 0 +++ [pid 5093] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5063] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5057] getdents64(4, [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4 [pid 5063] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5057] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] rmdir("./1/file2") = 0 [pid 5063] unlink("./1/binderfs" [pid 5059] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] getdents64(3, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(AT_FDCWD, "./1/file2", [pid 5063] <... unlink resumed>) = 0 [pid 5057] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] rmdir("./1" [pid 5063] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "./1/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./1/file2" [pid 5057] <... rmdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5057] mkdir("./2", 0777 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] <... mkdir resumed>) = 0 [pid 5059] close(3) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] rmdir("./1" [pid 5057] <... openat resumed>) = 3 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./2", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5060] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./1/file2", [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 47.318492][ T5095] ERROR: (device loop5): diWrite: ixpxd invalid [ 47.318492][ T5095] [ 47.344234][ T5095] ERROR: (device loop5): remounting filesystem as read-only [ 47.354794][ T5095] ERROR: (device loop5): txAbort: [ 47.354794][ T5095] [pid 5063] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./1/file2", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "./1/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./1/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(4, "", [pid 5063] openat(AT_FDCWD, "./1/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5060] getdents64(4, [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5063] getdents64(4, [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5063] close(4) = 0 [pid 5063] rmdir("./1/file2" [pid 5060] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5060] rmdir("./1/file2") = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5060] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] rmdir("./1" [pid 5060] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./1" [pid 5063] mkdir("./2", 0777 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./2", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5104 ./strace-static-x86_64: Process 5104 attached [pid 5104] set_robust_list(0x5555565206a0, 24) = 0 [pid 5104] chdir("./2") = 0 [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5104] setpgid(0, 0) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5104] write(3, "1000", 4) = 4 [pid 5104] close(3) = 0 [pid 5104] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5104] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5104] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5104] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5104] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5104] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5104] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5104] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5105 attached [pid 5101] <... write resumed>) = 16777216 [pid 5057] <... ioctl resumed>) = 0 [pid 5101] munmap(0x7f919cc00000, 138412032 [pid 5105] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5104] <... clone3 resumed> => {parent_tid=[5105]}, 88) = 5105 [pid 5101] <... munmap resumed>) = 0 [pid 5105] <... rseq resumed>) = 0 [pid 5104] rt_sigprocmask(SIG_SETMASK, [], [pid 5105] set_robust_list(0x7f91a50a79a0, 24 [pid 5104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5105] <... set_robust_list resumed>) = 0 [pid 5104] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] rt_sigprocmask(SIG_SETMASK, [], [pid 5104] <... futex resumed>) = 0 [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5104] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5105] memfd_create("syzkaller", 0) = 3 [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5101] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5106 ./strace-static-x86_64: Process 5106 attached [pid 5106] set_robust_list(0x5555565206a0, 24) = 0 [pid 5106] chdir("./2") = 0 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5106] setpgid(0, 0) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [pid 5106] close(3) = 0 [pid 5106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5106] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5106] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5106] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5101] close(3 [pid 5106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5101] <... close resumed>) = 0 [pid 5101] close(4 [pid 5106] <... clone3 resumed> => {parent_tid=[5107]}, 88) = 5107 [pid 5101] <... close resumed>) = 0 [pid 5106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5101] mkdir("./file2", 0777 [pid 5106] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... mkdir resumed>) = 0 [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5101] mount("/dev/loop0", "./file2", "jfs", 0, ""./strace-static-x86_64: Process 5107 attached ) = 0 [pid 5101] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5101] chdir("./file2") = 0 [pid 5101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5101] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5101] <... futex resumed>) = 1 [pid 5100] <... futex resumed>) = 0 [pid 5101] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5107] <... rseq resumed>) = 0 [pid 5100] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] set_robust_list(0x7f91a50a79a0, 24 [pid 5101] <... futex resumed>) = 0 [pid 5100] <... futex resumed>) = 1 [ 47.683485][ T5101] loop0: detected capacity change from 0 to 32768 [pid 5107] <... set_robust_list resumed>) = 0 [pid 5101] rename("./file2", "./file1" [pid 5100] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5107] memfd_create("syzkaller", 0) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5101] <... rename resumed>) = -1 EIO (Input/output error) [pid 5101] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5100] <... futex resumed>) = 0 [pid 5101] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5100] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] <... futex resumed>) = 0 [pid 5100] <... futex resumed>) = 1 [pid 5101] mkdir(".", 0777 [pid 5100] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5101] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5101] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5101] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5100] <... futex resumed>) = 0 [pid 5101] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5100] exit_group(0 [pid 5101] <... futex resumed>) = ? [pid 5100] <... exit_group resumed>) = ? [pid 5101] +++ exited with 0 +++ [pid 5100] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5056] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./2/binderfs") = 0 [ 47.742220][ T5101] ERROR: (device loop0): diWrite: ixpxd invalid [ 47.742220][ T5101] [ 47.767555][ T5101] ERROR: (device loop0): remounting filesystem as read-only [ 47.777886][ T5101] ERROR: (device loop0): txAbort: [ 47.777886][ T5101] [pid 5056] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] <... write resumed>) = 16777216 [pid 5056] <... umount2 resumed>) = 0 [pid 5056] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./2/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./2/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./2/file2" [pid 5103] munmap(0x7f919cc00000, 138412032 [pid 5056] <... rmdir resumed>) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./2") = 0 [pid 5056] mkdir("./3", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5103] <... munmap resumed>) = 0 [pid 5103] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5103] <... openat resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 5103] ioctl(4, LOOP_SET_FD, 3 [pid 5063] close(3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5108 ./strace-static-x86_64: Process 5108 attached [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5108] set_robust_list(0x5555565206a0, 24) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5109 [pid 5108] chdir("./2") = 0 [pid 5103] <... ioctl resumed>) = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5103] close(3 [pid 5108] <... prctl resumed>) = 0 [pid 5103] <... close resumed>) = 0 [pid 5108] setpgid(0, 0 [pid 5103] close(4 [pid 5108] <... setpgid resumed>) = 0 [pid 5103] <... close resumed>) = 0 ./strace-static-x86_64: Process 5109 attached [pid 5103] mkdir("./file2", 0777 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5103] <... mkdir resumed>) = 0 [pid 5109] set_robust_list(0x5555565206a0, 24) = 0 [pid 5109] chdir("./2") = 0 [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5109] setpgid(0, 0) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5109] <... openat resumed>) = 3 [pid 5109] write(3, "1000", 4) = 4 [pid 5109] close(3) = 0 [pid 5109] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5109] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5109] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5109] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5109] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5109] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5110]}, 88) = 5110 [pid 5109] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5109] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5110 attached [pid 5110] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5108] <... openat resumed>) = 3 [pid 5103] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5110] <... rseq resumed>) = 0 [pid 5108] write(3, "1000", 4 [pid 5103] <... mount resumed>) = 0 [pid 5108] <... write resumed>) = 4 [pid 5103] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5108] close(3 [pid 5103] <... openat resumed>) = 3 [pid 5108] <... close resumed>) = 0 [pid 5110] set_robust_list(0x7f91a50a79a0, 24 [pid 5108] symlink("/dev/binderfs", "./binderfs" [pid 5110] <... set_robust_list resumed>) = 0 [pid 5110] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5108] <... symlink resumed>) = 0 [ 47.882132][ T5103] loop2: detected capacity change from 0 to 32768 [pid 5110] memfd_create("syzkaller", 0 [pid 5108] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5103] chdir("./file2" [pid 5108] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5103] <... chdir resumed>) = 0 [pid 5108] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5103] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5110] <... memfd_create resumed>) = 3 [pid 5108] <... mmap resumed>) = 0x7f91a5087000 [pid 5103] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5108] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5103] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... mprotect resumed>) = 0 [pid 5103] <... futex resumed>) = 1 [pid 5102] <... futex resumed>) = 0 [pid 5102] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] rename("./file2", "./file1" [pid 5102] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5111 attached [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5108] <... clone3 resumed> => {parent_tid=[5111]}, 88) = 5111 [pid 5111] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5108] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5111] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5108] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5108] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5111] memfd_create("syzkaller", 0 [pid 5103] <... rename resumed>) = -1 EIO (Input/output error) [pid 5111] <... memfd_create resumed>) = 3 [pid 5103] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5103] <... futex resumed>) = 0 [pid 5102] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] mkdir(".", 0777 [pid 5102] <... futex resumed>) = 0 [pid 5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5103] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5102] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5111] <... mmap resumed>) = 0x7f919cc00000 [pid 5103] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5103] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5102] <... futex resumed>) = 0 [pid 5103] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] exit_group(0) = ? [pid 5103] <... futex resumed>) = ? [pid 5103] +++ exited with 0 +++ [ 47.967628][ T5103] ERROR: (device loop2): diWrite: ixpxd invalid [ 47.967628][ T5103] [ 47.991199][ T5103] ERROR: (device loop2): remounting filesystem as read-only [ 47.998490][ T5103] ERROR: (device loop2): txAbort: [ 47.998490][ T5103] [pid 5102] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5058] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./2/binderfs") = 0 [pid 5058] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5112 ./strace-static-x86_64: Process 5112 attached [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5112] set_robust_list(0x5555565206a0, 24) = 0 [pid 5112] chdir("./3") = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5112] write(3, "1000", 4) = 4 [pid 5112] close(3) = 0 [pid 5112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5112] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5112] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5112] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5112] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5112] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5113 attached [pid 5113] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5112] <... clone3 resumed> => {parent_tid=[5113]}, 88) = 5113 [pid 5113] <... rseq resumed>) = 0 [pid 5112] rt_sigprocmask(SIG_SETMASK, [], [pid 5113] set_robust_list(0x7f91a50a79a0, 24 [pid 5112] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5113] <... set_robust_list resumed>) = 0 [pid 5112] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] rt_sigprocmask(SIG_SETMASK, [], [pid 5112] <... futex resumed>) = 0 [pid 5113] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5113] memfd_create("syzkaller", 0 [pid 5112] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5113] <... memfd_create resumed>) = 3 [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5105] <... write resumed>) = 16777216 [pid 5107] <... write resumed>) = 16777216 [pid 5105] munmap(0x7f919cc00000, 138412032 [pid 5107] munmap(0x7f919cc00000, 138412032 [pid 5105] <... munmap resumed>) = 0 [pid 5105] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5107] <... munmap resumed>) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5105] <... openat resumed>) = 4 [pid 5105] ioctl(4, LOOP_SET_FD, 3 [pid 5107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5107] close(3) = 0 [pid 5107] close(4) = 0 [pid 5107] mkdir("./file2", 0777 [pid 5105] <... ioctl resumed>) = 0 [pid 5107] <... mkdir resumed>) = 0 [pid 5105] close(3) = 0 [pid 5105] close(4) = 0 [pid 5105] mkdir("./file2", 0777) = 0 [pid 5105] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5107] mount("/dev/loop1", "./file2", "jfs", 0, "") = 0 [pid 5105] <... mount resumed>) = 0 [pid 5107] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5105] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5105] chdir("./file2" [pid 5107] chdir("./file2" [pid 5105] <... chdir resumed>) = 0 [pid 5105] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5107] <... chdir resumed>) = 0 [pid 5105] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5105] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5104] <... futex resumed>) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5104] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] rename("./file2", "./file1" [pid 5104] <... futex resumed>) = 0 [pid 5107] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5104] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5107] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = 0 [pid 5106] <... futex resumed>) = 1 [pid 5107] rename("./file2", "./file1" [ 48.296571][ T5105] loop3: detected capacity change from 0 to 32768 [ 48.303623][ T5107] loop1: detected capacity change from 0 to 32768 [ 48.334880][ T5105] ERROR: (device loop3): diWrite: ixpxd invalid [ 48.334880][ T5105] [pid 5106] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./2/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./2/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5104] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] <... openat resumed>) = 4 [pid 5104] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5104] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5104] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5058] newfstatat(4, "", [pid 5104] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5106] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 48.359227][ T5107] ERROR: (device loop1): diWrite: ixpxd invalid [ 48.359227][ T5107] [ 48.367815][ T5105] ERROR: (device loop3): remounting filesystem as read-only [ 48.392288][ T5105] ERROR: (device loop3): txAbort: [ 48.392288][ T5105] [pid 5106] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5106] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5114]}, 88) = 5114 [pid 5106] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5106] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5104] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5058] getdents64(4, [pid 5106] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5104] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5115 attached [pid 5058] getdents64(4, ./strace-static-x86_64: Process 5114 attached [pid 5115] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5104] <... clone3 resumed> => {parent_tid=[5115]}, 88) = 5115 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5114] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5114] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5114] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5114] mkdir(".", 0777 [pid 5105] <... rename resumed>) = -1 EIO (Input/output error) [pid 5114] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5114] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5114] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5106] <... futex resumed>) = 0 [pid 5105] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] <... futex resumed>) = 0 [pid 5105] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] close(4 [pid 5115] <... rseq resumed>) = 0 [pid 5104] rt_sigprocmask(SIG_SETMASK, [], [pid 5115] set_robust_list(0x7f91a50869a0, 24 [pid 5104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] <... close resumed>) = 0 [pid 5115] <... set_robust_list resumed>) = 0 [pid 5115] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] rmdir("./2/file2" [pid 5115] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5104] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... rmdir resumed>) = 0 [pid 5058] getdents64(3, [pid 5115] mkdir(".", 0777 [pid 5104] <... futex resumed>) = 0 [pid 5115] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5104] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5115] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5058] close(3) = 0 [pid 5058] rmdir("./2") = 0 [pid 5115] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5058] mkdir("./3", 0777 [pid 5115] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... mkdir resumed>) = 0 [pid 5115] <... futex resumed>) = 1 [pid 5104] <... futex resumed>) = 0 [pid 5115] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5104] exit_group(0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5115] <... futex resumed>) = ? [pid 5104] <... exit_group resumed>) = ? [pid 5115] +++ exited with 0 +++ [pid 5105] <... futex resumed>) = ? [pid 5058] <... openat resumed>) = 3 [pid 5105] +++ exited with 0 +++ [pid 5104] +++ exited with 0 +++ [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5104, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=15 /* 0.15 s */} --- [pid 5059] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./2/binderfs") = 0 [pid 5059] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5107] <... rename resumed>) = -1 EIO (Input/output error) [pid 5107] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5107] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] exit_group(0 [pid 5107] <... futex resumed>) = ? [pid 5106] <... exit_group resumed>) = ? [pid 5107] +++ exited with 0 +++ [pid 5114] <... futex resumed>) = ? [pid 5114] +++ exited with 0 +++ [pid 5106] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5106, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- [pid 5057] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./2/binderfs") = 0 [pid 5057] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5057] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./2/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 48.409569][ T5107] ERROR: (device loop1): remounting filesystem as read-only [ 48.421733][ T5107] ERROR: (device loop1): txAbort: [ 48.421733][ T5107] [ 48.430507][ T5107] ERROR: (device loop1): remounting filesystem as read-only [pid 5057] openat(AT_FDCWD, "./2/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", [pid 5110] <... write resumed>) = 16777216 [pid 5110] munmap(0x7f919cc00000, 138412032 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, [pid 5110] <... munmap resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4 [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5057] <... close resumed>) = 0 [pid 5057] rmdir("./2/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5110] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5110] ioctl(4, LOOP_SET_FD, 3 [pid 5057] close(3) = 0 [pid 5057] rmdir("./2") = 0 [pid 5057] mkdir("./3", 0777) = 0 [pid 5110] <... ioctl resumed>) = 0 [pid 5110] close(3) = 0 [pid 5110] close(4) = 0 [pid 5110] mkdir("./file2", 0777) = 0 [pid 5110] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5110] <... mount resumed>) = 0 [pid 5110] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5111] <... write resumed>) = 16777216 [pid 5110] <... openat resumed>) = 3 [pid 5110] chdir("./file2") = 0 [pid 5111] munmap(0x7f919cc00000, 138412032 [pid 5110] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5110] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5110] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 48.540628][ T5110] loop5: detected capacity change from 0 to 32768 [pid 5109] <... futex resumed>) = 0 [pid 5110] rename("./file2", "./file1" [pid 5109] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5111] <... munmap resumed>) = 0 [pid 5111] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5111] ioctl(4, LOOP_SET_FD, 3 [pid 5110] <... rename resumed>) = -1 EIO (Input/output error) [pid 5110] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = 0 [pid 5109] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5110] <... futex resumed>) = 1 [pid 5110] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5110] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5110] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5110] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] exit_group(0 [pid 5110] <... futex resumed>) = ? [pid 5109] <... exit_group resumed>) = ? [pid 5111] <... ioctl resumed>) = 0 [pid 5110] +++ exited with 0 +++ [pid 5109] +++ exited with 0 +++ [pid 5058] <... ioctl resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5109, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5111] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5058] close(3 [pid 5111] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5111] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./2/binderfs") = 0 [ 48.596902][ T5110] ERROR: (device loop5): diWrite: ixpxd invalid [ 48.596902][ T5110] [ 48.621570][ T5110] ERROR: (device loop5): remounting filesystem as read-only [ 48.628984][ T5110] ERROR: (device loop5): txAbort: [ 48.628984][ T5110] [ 48.637190][ T5111] loop4: detected capacity change from 0 to 32768 [pid 5063] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5111] <... close resumed>) = 0 [pid 5111] mkdir("./file2", 0777 [pid 5058] <... close resumed>) = 0 [pid 5111] <... mkdir resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5111] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5116 ./strace-static-x86_64: Process 5116 attached [pid 5116] set_robust_list(0x5555565206a0, 24) = 0 [pid 5111] <... mount resumed>) = 0 [pid 5111] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5116] chdir("./3" [pid 5111] <... openat resumed>) = 3 [pid 5116] <... chdir resumed>) = 0 [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5111] chdir("./file2" [pid 5116] <... prctl resumed>) = 0 [pid 5116] setpgid(0, 0 [pid 5111] <... chdir resumed>) = 0 [pid 5116] <... setpgid resumed>) = 0 [pid 5111] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5111] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = 0 [pid 5111] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... openat resumed>) = 3 [pid 5111] <... futex resumed>) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5116] write(3, "1000", 4 [pid 5111] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] <... write resumed>) = 4 [pid 5108] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5116] close(3 [pid 5108] <... futex resumed>) = 0 [pid 5111] rename("./file2", "./file1" [pid 5116] <... close resumed>) = 0 [pid 5108] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./2/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./2/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./2/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5116] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./2" [pid 5116] <... futex resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./3", 0777 [pid 5116] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5113] <... write resumed>) = 16777216 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5116] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5113] munmap(0x7f919cc00000, 138412032 [pid 5116] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5111] <... rename resumed>) = -1 EIO (Input/output error) [pid 5116] <... mmap resumed>) = 0x7f91a5087000 [pid 5111] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5113] <... munmap resumed>) = 0 [pid 5111] <... futex resumed>) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5111] mkdir(".", 0777 [pid 5108] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... mprotect resumed>) = 0 [pid 5108] <... futex resumed>) = 0 [pid 5111] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5108] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5111] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5116] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5111] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5116] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5111] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5113] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5111] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5117 attached [pid 5117] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5116] <... clone3 resumed> => {parent_tid=[5117]}, 88) = 5117 [pid 5113] <... openat resumed>) = 4 [pid 5117] <... rseq resumed>) = 0 [pid 5116] rt_sigprocmask(SIG_SETMASK, [], [pid 5108] exit_group(0 [ 48.708687][ T5111] ERROR: (device loop4): diWrite: ixpxd invalid [ 48.708687][ T5111] [ 48.719811][ T5111] ERROR: (device loop4): remounting filesystem as read-only [ 48.731672][ T5111] ERROR: (device loop4): txAbort: [ 48.731672][ T5111] [pid 5059] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5117] set_robust_list(0x7f91a50a79a0, 24 [pid 5116] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5113] ioctl(4, LOOP_SET_FD, 3 [pid 5111] <... futex resumed>) = ? [pid 5108] <... exit_group resumed>) = ? [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5117] <... set_robust_list resumed>) = 0 [pid 5116] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] +++ exited with 0 +++ [pid 5117] rt_sigprocmask(SIG_SETMASK, [], [pid 5116] <... futex resumed>) = 0 [pid 5117] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5116] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5117] memfd_create("syzkaller", 0) = 3 [pid 5113] <... ioctl resumed>) = 0 [pid 5108] +++ exited with 0 +++ [pid 5059] newfstatat(AT_FDCWD, "./2/file2", [pid 5057] <... ioctl resumed>) = 0 [pid 5117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5113] close(3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] close(3 [pid 5117] <... mmap resumed>) = 0x7f919cc00000 [pid 5113] <... close resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=21 /* 0.21 s */} --- [pid 5059] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5113] close(4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5113] <... close resumed>) = 0 [pid 5060] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] mkdir("./file2", 0777 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] openat(AT_FDCWD, "./2/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 5113] <... mkdir resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./2/binderfs") = 0 [pid 5060] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5113] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5057] <... close resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5118 attached [ 48.765165][ T5113] loop0: detected capacity change from 0 to 32768 [pid 5113] <... mount resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5118 [pid 5113] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5113] chdir("./file2" [pid 5059] getdents64(4, [pid 5113] <... chdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5118] set_robust_list(0x5555565206a0, 24) = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5118] chdir("./3" [pid 5113] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] close(4 [pid 5113] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... chdir resumed>) = 0 [pid 5113] <... futex resumed>) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] rename("./file2", "./file1" [pid 5112] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] setpgid(0, 0) = 0 [pid 5112] <... futex resumed>) = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [pid 5118] close(3) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5118] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5118] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5118] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5112] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./2/file2" [pid 5118] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5119 attached [pid 5119] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5118] <... clone3 resumed> => {parent_tid=[5119]}, 88) = 5119 [pid 5119] <... rseq resumed>) = 0 [pid 5119] set_robust_list(0x7f91a50a79a0, 24 [pid 5118] rt_sigprocmask(SIG_SETMASK, [], [pid 5119] <... set_robust_list resumed>) = 0 [pid 5118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5119] rt_sigprocmask(SIG_SETMASK, [], [pid 5118] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5119] memfd_create("syzkaller", 0) = 3 [pid 5060] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(3, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5119] <... mmap resumed>) = 0x7f919cc00000 [pid 5059] close(3) = 0 [ 48.834221][ T5113] ERROR: (device loop0): diWrite: ixpxd invalid [ 48.834221][ T5113] [ 48.872292][ T5113] ERROR: (device loop0): remounting filesystem as read-only [pid 5060] newfstatat(AT_FDCWD, "./2/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] rmdir("./2" [pid 5060] umount2("./2/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] mkdir("./3", 0777 [pid 5060] openat(AT_FDCWD, "./2/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] <... mkdir resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5112] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] getdents64(4, [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5113] <... rename resumed>) = -1 EIO (Input/output error) [pid 5112] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5113] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 5113] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5060] rmdir("./2/file2" [pid 5112] <... mmap resumed>) = 0x7f91a5066000 [pid 5063] close(3 [pid 5112] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... rmdir resumed>) = 0 [pid 5117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5112] <... mprotect resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] getdents64(3, [pid 5112] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [ 48.883138][ T5113] ERROR: (device loop0): txAbort: [ 48.883138][ T5113] [pid 5112] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5060] close(3./strace-static-x86_64: Process 5120 attached [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... close resumed>) = 0 ./strace-static-x86_64: Process 5121 attached [pid 5120] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5112] <... clone3 resumed> => {parent_tid=[5120]}, 88) = 5120 [pid 5112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5112] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5121] set_robust_list(0x5555565206a0, 24 [pid 5120] <... rseq resumed>) = 0 [pid 5112] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5121 [pid 5121] <... set_robust_list resumed>) = 0 [pid 5120] set_robust_list(0x7f91a50869a0, 24 [pid 5060] rmdir("./2" [pid 5120] <... set_robust_list resumed>) = 0 [pid 5121] chdir("./3" [pid 5120] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... rmdir resumed>) = 0 [pid 5121] <... chdir resumed>) = 0 [pid 5120] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] mkdir("./3", 0777 [pid 5120] mkdir(".", 0777 [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5120] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5060] <... mkdir resumed>) = 0 [pid 5121] <... prctl resumed>) = 0 [pid 5120] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5120] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5121] setpgid(0, 0) = 0 [pid 5120] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5120] <... futex resumed>) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5120] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] exit_group(0) = ? [pid 5120] <... futex resumed>) = ? [pid 5120] +++ exited with 0 +++ [pid 5113] <... futex resumed>) = ? [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5113] +++ exited with 0 +++ [pid 5112] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5056] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, [pid 5121] <... openat resumed>) = 3 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./3/binderfs" [pid 5121] write(3, "1000", 4 [pid 5056] <... unlink resumed>) = 0 [pid 5121] <... write resumed>) = 4 [pid 5056] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5121] close(3) = 0 [pid 5121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5121] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5121] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5121] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5121] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5121] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5121] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5122 attached => {parent_tid=[5122]}, 88) = 5122 [pid 5122] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5122] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5122] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5121] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = 1 [pid 5122] memfd_create("syzkaller", 0 [pid 5121] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5122] <... memfd_create resumed>) = 3 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5123 ./strace-static-x86_64: Process 5123 attached [pid 5123] set_robust_list(0x5555565206a0, 24) = 0 [pid 5123] chdir("./3") = 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5123] setpgid(0, 0) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5123] write(3, "1000", 4) = 4 [pid 5123] close(3) = 0 [pid 5123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5123] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5123] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5123] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5124 attached [pid 5124] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5124] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5123] <... clone3 resumed> => {parent_tid=[5124]}, 88) = 5124 [pid 5124] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5123] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = 1 [pid 5124] memfd_create("syzkaller", 0 [pid 5123] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5124] <... memfd_create resumed>) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5125 attached [pid 5125] set_robust_list(0x5555565206a0, 24) = 0 [pid 5125] chdir("./3") = 0 [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5125] setpgid(0, 0) = 0 [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5117] <... write resumed>) = 16777216 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5125 [pid 5125] write(3, "1000", 4) = 4 [pid 5125] close(3) = 0 [pid 5125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5125] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5125] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5117] munmap(0x7f919cc00000, 138412032 [pid 5125] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5125] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5125] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5125] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5126]}, 88) = 5126 ./strace-static-x86_64: Process 5126 attached [pid 5125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5125] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5125] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5126] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5126] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5126] memfd_create("syzkaller", 0) = 3 [pid 5126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5117] <... munmap resumed>) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5056] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./3/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./3/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5117] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5117] ioctl(4, LOOP_SET_FD, 3 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] rmdir("./3/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./3") = 0 [pid 5056] mkdir("./4", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5117] <... ioctl resumed>) = 0 [pid 5117] close(3) = 0 [pid 5117] close(4) = 0 [ 49.281024][ T5117] loop2: detected capacity change from 0 to 32768 [pid 5117] mkdir("./file2", 0777) = 0 [pid 5117] mount("/dev/loop2", "./file2", "jfs", 0, "") = 0 [pid 5117] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5117] chdir("./file2") = 0 [pid 5117] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5117] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5116] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5117] rename("./file2", "./file1" [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5116] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5116] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5116] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5116] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 49.392142][ T5117] ERROR: (device loop2): diWrite: ixpxd invalid [ 49.392142][ T5117] [pid 5116] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5127]}, 88) = 5127 [pid 5119] <... write resumed>) = 16777216 [pid 5116] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5127 attached [pid 5127] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5127] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5127] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5127] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5116] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5127] <... futex resumed>) = 0 [pid 5119] munmap(0x7f919cc00000, 138412032 [pid 5116] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5127] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5127] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5127] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5127] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] <... futex resumed>) = 0 [pid 5119] <... munmap resumed>) = 0 [ 49.437536][ T5117] ERROR: (device loop2): remounting filesystem as read-only [ 49.445301][ T5117] ERROR: (device loop2): txAbort: [ 49.445301][ T5117] [ 49.465073][ T5117] ERROR: (device loop2): remounting filesystem as read-only [pid 5119] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5117] <... rename resumed>) = -1 EIO (Input/output error) [pid 5117] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] ioctl(4, LOOP_SET_FD, 3 [pid 5117] <... futex resumed>) = 0 [pid 5117] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] exit_group(0) = ? [pid 5117] <... futex resumed>) = ? [pid 5127] <... futex resumed>) = ? [pid 5117] +++ exited with 0 +++ [pid 5127] +++ exited with 0 +++ [pid 5116] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=18 /* 0.18 s */} --- [pid 5058] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", [pid 5119] <... ioctl resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5119] close(3 [pid 5126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5119] <... close resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] close(4 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] <... close resumed>) = 0 [pid 5058] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5056] <... ioctl resumed>) = 0 [pid 5119] mkdir("./file2", 0777 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5119] <... mkdir resumed>) = 0 [ 49.501984][ T5119] loop1: detected capacity change from 0 to 32768 [pid 5058] unlink("./3/binderfs" [pid 5056] close(3 [pid 5119] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5058] <... unlink resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5058] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5128 attached [pid 5119] <... mount resumed>) = 0 [pid 5058] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./file2" [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5119] <... chdir resumed>) = 0 [pid 5128] set_robust_list(0x5555565206a0, 24 [pid 5058] newfstatat(AT_FDCWD, "./3/file2", [pid 5119] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5128] <... set_robust_list resumed>) = 0 [pid 5119] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5128 [pid 5128] chdir("./4" [pid 5119] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] <... futex resumed>) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5119] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5128] <... chdir resumed>) = 0 [pid 5119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5118] <... futex resumed>) = 0 [pid 5058] openat(AT_FDCWD, "./3/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5128] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5119] rename("./file2", "./file1" [pid 5118] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... prctl resumed>) = 0 [pid 5058] <... openat resumed>) = 4 [pid 5058] newfstatat(4, "", [pid 5128] setpgid(0, 0) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5058] getdents64(4, [pid 5128] <... openat resumed>) = 3 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5128] write(3, "1000", 4 [pid 5058] rmdir("./3/file2" [pid 5128] <... write resumed>) = 4 [pid 5058] <... rmdir resumed>) = 0 [pid 5128] close(3 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5128] <... close resumed>) = 0 [pid 5058] close(3 [pid 5128] symlink("/dev/binderfs", "./binderfs" [pid 5058] <... close resumed>) = 0 [pid 5128] <... symlink resumed>) = 0 [pid 5058] rmdir("./3") = 0 [pid 5128] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] mkdir("./4", 0777 [pid 5128] <... futex resumed>) = 0 [pid 5124] <... write resumed>) = 16777216 [pid 5128] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5124] munmap(0x7f919cc00000, 138412032 [pid 5122] <... write resumed>) = 16777216 [pid 5058] <... mkdir resumed>) = 0 [pid 5128] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5128] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5122] munmap(0x7f919cc00000, 138412032 [pid 5058] <... openat resumed>) = 3 [pid 5128] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5119] <... rename resumed>) = -1 EIO (Input/output error) [pid 5128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5124] <... munmap resumed>) = 0 [pid 5122] <... munmap resumed>) = 0 [pid 5119] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5128] <... mmap resumed>) = 0x7f91a5087000 [pid 5119] <... futex resumed>) = 0 [pid 5118] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] mkdir(".", 0777 [pid 5118] <... futex resumed>) = 0 [pid 5119] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5118] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5128] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [ 49.604157][ T5119] ERROR: (device loop1): diWrite: ixpxd invalid [ 49.604157][ T5119] [ 49.631300][ T5119] ERROR: (device loop1): remounting filesystem as read-only [ 49.638635][ T5119] ERROR: (device loop1): txAbort: [ 49.638635][ T5119] [pid 5124] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5128] <... mprotect resumed>) = 0 [pid 5124] <... openat resumed>) = 4 [pid 5128] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5124] ioctl(4, LOOP_SET_FD, 3 [pid 5119] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5128] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5119] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5119] <... futex resumed>) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5119] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] exit_group(0./strace-static-x86_64: Process 5129 attached [pid 5128] <... clone3 resumed> => {parent_tid=[5129]}, 88) = 5129 [pid 5119] <... futex resumed>) = ? [pid 5118] <... exit_group resumed>) = ? [pid 5129] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5119] +++ exited with 0 +++ [pid 5128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5128] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5124] <... ioctl resumed>) = 0 [pid 5124] close(3) = 0 [pid 5129] <... rseq resumed>) = 0 [pid 5124] close(4 [pid 5118] +++ exited with 0 +++ [pid 5124] <... close resumed>) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5124] mkdir("./file2", 0777) = 0 [pid 5124] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5129] set_robust_list(0x7f91a50a79a0, 24 [pid 5122] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5122] ioctl(4, LOOP_SET_FD, 3 [pid 5129] <... set_robust_list resumed>) = 0 [pid 5057] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5129] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] newfstatat(3, "", [pid 5129] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5129] memfd_create("syzkaller", 0 [pid 5126] <... write resumed>) = 16777216 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5129] <... memfd_create resumed>) = 3 [pid 5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5057] getdents64(3, [pid 5129] <... mmap resumed>) = 0x7f919cc00000 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5122] <... ioctl resumed>) = 0 [pid 5122] close(3) = 0 [pid 5122] close(4) = 0 [pid 5122] mkdir("./file2", 0777) = 0 [pid 5057] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./3/binderfs") = 0 [pid 5057] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5124] <... mount resumed>) = 0 [pid 5124] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5122] <... mount resumed>) = 0 [pid 5124] chdir("./file2" [pid 5122] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5124] <... chdir resumed>) = 0 [pid 5122] <... openat resumed>) = 3 [pid 5124] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5122] chdir("./file2" [pid 5124] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5122] <... chdir resumed>) = 0 [pid 5124] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5124] <... futex resumed>) = 1 [pid 5122] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 49.664874][ T5124] loop3: detected capacity change from 0 to 32768 [ 49.691254][ T5122] loop5: detected capacity change from 0 to 32768 [pid 5124] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5121] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = 0 [pid 5122] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = 1 [pid 5122] rename("./file2", "./file1" [pid 5121] <... futex resumed>) = 0 [pid 5124] rename("./file2", "./file1" [pid 5123] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 49.723944][ T5122] ERROR: (device loop5): diWrite: ixpxd invalid [ 49.723944][ T5122] [ 49.733321][ T5124] ERROR: (device loop3): diWrite: ixpxd invalid [ 49.733321][ T5124] [pid 5126] munmap(0x7f919cc00000, 138412032) = 0 [pid 5126] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5122] <... rename resumed>) = -1 EIO (Input/output error) [pid 5121] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] <... umount2 resumed>) = 0 [pid 5126] <... openat resumed>) = 4 [pid 5123] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] ioctl(4, LOOP_SET_FD, 3 [pid 5123] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5121] <... mmap resumed>) = 0x7f91a5066000 [pid 5123] <... mmap resumed>) = 0x7f91a5066000 [pid 5121] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5123] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5122] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] <... mprotect resumed>) = 0 [pid 5124] <... rename resumed>) = -1 EIO (Input/output error) [pid 5124] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... mprotect resumed>) = 0 [pid 5121] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5124] <... futex resumed>) = 0 [pid 5123] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5121] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5121] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5057] newfstatat(AT_FDCWD, "./3/file2", [pid 5123] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5121] <... clone3 resumed> => {parent_tid=[5130]}, 88) = 5130 [pid 5123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5130 attached [pid 5130] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5121] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] <... rseq resumed>) = 0 [pid 5123] <... clone3 resumed> => {parent_tid=[5131]}, 88) = 5131 [pid 5121] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5123] rt_sigprocmask(SIG_SETMASK, [], [pid 5130] set_robust_list(0x7f91a50869a0, 24 [pid 5123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5121] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] openat(AT_FDCWD, "./3/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5123] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5131 attached [pid 5124] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5123] <... futex resumed>) = 0 [pid 5057] <... openat resumed>) = 4 [pid 5121] <... futex resumed>) = 0 [pid 5131] <... rseq resumed>) = 0 [pid 5130] <... set_robust_list resumed>) = 0 [pid 5123] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5131] set_robust_list(0x7f91a50869a0, 24 [pid 5130] rt_sigprocmask(SIG_SETMASK, [], [pid 5121] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] newfstatat(4, "", [pid 5131] <... set_robust_list resumed>) = 0 [pid 5130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5131] rt_sigprocmask(SIG_SETMASK, [], [pid 5130] mkdir(".", 0777 [pid 5131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5131] mkdir(".", 0777 [pid 5130] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5131] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5131] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5130] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5131] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5131] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... ioctl resumed>) = 0 [pid 5131] <... futex resumed>) = 0 [pid 5126] close(3 [pid 5131] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5126] <... close resumed>) = 0 [pid 5126] close(4) = 0 [pid 5126] mkdir("./file2", 0777) = 0 [pid 5130] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5123] exit_group(0 [pid 5126] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5131] <... futex resumed>) = ? [pid 5130] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = ? [pid 5123] <... exit_group resumed>) = ? [pid 5057] getdents64(4, [pid 5131] +++ exited with 0 +++ [pid 5130] <... futex resumed>) = 1 [pid 5124] +++ exited with 0 +++ [pid 5121] <... futex resumed>) = 0 [pid 5121] exit_group(0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5123] +++ exited with 0 +++ [pid 5122] <... futex resumed>) = ? [pid 5121] <... exit_group resumed>) = ? [pid 5057] getdents64(4, [pid 5130] +++ exited with 0 +++ [pid 5122] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5121] +++ exited with 0 +++ [pid 5057] close(4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5121, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5059] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... close resumed>) = 0 [pid 5063] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] rmdir("./3/file2" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5059] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] getdents64(3, [pid 5063] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5059] <... openat resumed>) = 3 [pid 5057] close(3 [pid 5126] <... mount resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 49.772444][ T5122] ERROR: (device loop5): remounting filesystem as read-only [ 49.777599][ T5124] ERROR: (device loop3): remounting filesystem as read-only [ 49.791458][ T5122] ERROR: (device loop5): txAbort: [ 49.791458][ T5122] [ 49.798864][ T5124] ERROR: (device loop3): txAbort: [ 49.798864][ T5124] [ 49.808232][ T5126] loop4: detected capacity change from 0 to 32768 [pid 5059] newfstatat(3, "", [pid 5057] <... close resumed>) = 0 [pid 5063] unlink("./3/binderfs") = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] rmdir("./3" [pid 5063] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] getdents64(3, [pid 5057] <... rmdir resumed>) = 0 [pid 5057] mkdir("./4", 0777 [pid 5126] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] <... mkdir resumed>) = 0 [pid 5059] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5126] chdir("./file2" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... openat resumed>) = 3 [pid 5126] <... chdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5126] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./3/binderfs" [pid 5126] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5126] <... futex resumed>) = 1 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5126] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] newfstatat(AT_FDCWD, "./3/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... unlink resumed>) = 0 [pid 5125] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "./3/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5126] <... futex resumed>) = 0 [pid 5125] <... futex resumed>) = 1 [pid 5059] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5126] rename("./file2", "./file1" [pid 5125] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./3/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./3") = 0 [pid 5063] mkdir("./4", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5132 ./strace-static-x86_64: Process 5132 attached [pid 5132] set_robust_list(0x5555565206a0, 24) = 0 [pid 5132] chdir("./4") = 0 [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5132] setpgid(0, 0) = 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5132] write(3, "1000", 4) = 4 [pid 5132] close(3) = 0 [pid 5132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5132] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5132] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5132] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5132] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5132] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5133 attached [pid 5125] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5125] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] <... clone3 resumed> => {parent_tid=[5133]}, 88) = 5133 [pid 5132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5132] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5132] <... futex resumed>) = 0 [pid 5133] <... rseq resumed>) = 0 [pid 5132] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5133] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5133] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5133] memfd_create("syzkaller", 0 [pid 5125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5133] <... memfd_create resumed>) = 3 [pid 5125] <... mmap resumed>) = 0x7f91a5066000 [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5125] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5133] <... mmap resumed>) = 0x7f919cc00000 [pid 5125] <... mprotect resumed>) = 0 [pid 5129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5126] <... rename resumed>) = -1 EIO (Input/output error) [pid 5125] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5126] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... rt_sigprocmask resumed>[], 8) = 0 [ 49.877748][ T5126] ERROR: (device loop4): diWrite: ixpxd invalid [ 49.877748][ T5126] [ 49.912496][ T5126] ERROR: (device loop4): remounting filesystem as read-only [ 49.920226][ T5126] ERROR: (device loop4): txAbort: [ 49.920226][ T5126] [pid 5126] <... futex resumed>) = 0 [pid 5125] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5134 attached [pid 5126] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] <... clone3 resumed> => {parent_tid=[5134]}, 88) = 5134 [pid 5125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5134] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5125] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... rseq resumed>) = 0 [pid 5125] <... futex resumed>) = 0 [pid 5134] set_robust_list(0x7f91a50869a0, 24 [pid 5125] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5134] <... set_robust_list resumed>) = 0 [pid 5134] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5134] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5134] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5134] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5125] exit_group(0 [pid 5126] <... futex resumed>) = ? [pid 5125] <... exit_group resumed>) = ? [pid 5126] +++ exited with 0 +++ [pid 5134] +++ exited with 0 +++ [pid 5125] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5125, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5060] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./3/binderfs") = 0 [pid 5060] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./3/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./3/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./3/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./3") = 0 [pid 5060] mkdir("./4", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5057] <... ioctl resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5135 attached , child_tidptr=0x555556520690) = 5135 [pid 5135] set_robust_list(0x5555565206a0, 24) = 0 [pid 5135] chdir("./4") = 0 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5135] setpgid(0, 0) = 0 [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5135] write(3, "1000", 4) = 4 [pid 5135] close(3) = 0 [pid 5135] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5135] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... ioctl resumed>) = 0 [pid 5133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5135] <... futex resumed>) = 0 [pid 5135] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5135] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] close(3 [pid 5135] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5135] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5135] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5135] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5136 [pid 5135] <... clone3 resumed> => {parent_tid=[5137]}, 88) = 5137 ./strace-static-x86_64: Process 5137 attached [pid 5135] rt_sigprocmask(SIG_SETMASK, [], [pid 5137] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5137] set_robust_list(0x7f91a50a79a0, 24 [pid 5135] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5137] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5136 attached [pid 5137] rt_sigprocmask(SIG_SETMASK, [], [pid 5135] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5135] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5136] set_robust_list(0x5555565206a0, 24) = 0 [pid 5136] chdir("./4" [pid 5137] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5137] memfd_create("syzkaller", 0) = 3 [pid 5137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5136] <... chdir resumed>) = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] setpgid(0, 0) = 0 [pid 5137] <... mmap resumed>) = 0x7f919cc00000 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5136] write(3, "1000", 4) = 4 [pid 5136] close(3) = 0 [pid 5136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5136] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5136] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5136] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5136] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5059] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5138 attached [pid 5138] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5138] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5138] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5138] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] <... clone3 resumed> => {parent_tid=[5138]}, 88) = 5138 [pid 5136] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5059] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... futex resumed>) = 0 [pid 5136] <... futex resumed>) = 1 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5138] memfd_create("syzkaller", 0 [pid 5136] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] newfstatat(AT_FDCWD, "./3/file2", [pid 5138] <... memfd_create resumed>) = 3 [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./3/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./3/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5129] <... write resumed>) = 16777216 [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", [pid 5129] munmap(0x7f919cc00000, 138412032 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./3/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5129] <... munmap resumed>) = 0 [pid 5059] rmdir("./3" [pid 5129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5129] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./4", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5129] <... ioctl resumed>) = 0 [pid 5129] close(3) = 0 [pid 5129] close(4) = 0 [pid 5129] mkdir("./file2", 0777) = 0 [pid 5129] mount("/dev/loop0", "./file2", "jfs", 0, "") = 0 [pid 5129] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] <... ioctl resumed>) = 0 [pid 5129] chdir("./file2") = 0 [pid 5129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5129] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = 0 [pid 5128] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 50.282286][ T5129] loop0: detected capacity change from 0 to 32768 [pid 5128] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5129] <... futex resumed>) = 1 [pid 5060] close(3 [pid 5129] rename("./file2", "./file1" [pid 5060] <... close resumed>) = 0 [pid 5128] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5128] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5128] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5128] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5128] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5139]}, 88) = 5139 [pid 5128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5128] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5139 attached [pid 5139] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5139] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5139] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5139] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5139] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [ 50.342202][ T5129] ERROR: (device loop0): diWrite: ixpxd invalid [ 50.342202][ T5129] [ 50.377914][ T5129] ERROR: (device loop0): remounting filesystem as read-only [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5140 attached , child_tidptr=0x555556520690) = 5140 [pid 5140] set_robust_list(0x5555565206a0, 24) = 0 [pid 5140] chdir("./4") = 0 [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5140] setpgid(0, 0) = 0 [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5140] write(3, "1000", 4) = 4 [pid 5140] close(3) = 0 [pid 5140] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5140] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5140] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5140] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5140] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5140] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5141 attached => {parent_tid=[5141]}, 88) = 5141 [pid 5140] rt_sigprocmask(SIG_SETMASK, [], [pid 5141] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5140] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5141] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5141] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5141] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = 1 [pid 5141] memfd_create("syzkaller", 0 [pid 5140] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5133] <... write resumed>) = 16777216 [pid 5141] <... memfd_create resumed>) = 3 [pid 5133] munmap(0x7f919cc00000, 138412032 [pid 5141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5139] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5129] <... rename resumed>) = -1 EIO (Input/output error) [pid 5139] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5128] <... futex resumed>) = 0 [pid 5139] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5129] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5128] exit_group(0 [pid 5139] <... futex resumed>) = ? [pid 5128] <... exit_group resumed>) = ? [pid 5139] +++ exited with 0 +++ [pid 5129] +++ exited with 0 +++ [pid 5128] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5128, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=19 /* 0.19 s */} --- [pid 5056] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./4/binderfs") = 0 [ 50.406838][ T5129] ERROR: (device loop0): txAbort: [ 50.406838][ T5129] [pid 5056] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5056] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./4/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./4/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", [pid 5133] <... munmap resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./4/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./4" [pid 5133] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] <... rmdir resumed>) = 0 [pid 5056] mkdir("./5", 0777 [pid 5133] <... openat resumed>) = 4 [pid 5133] ioctl(4, LOOP_SET_FD, 3 [pid 5056] <... mkdir resumed>) = 0 [pid 5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 50.477802][ T5133] loop2: detected capacity change from 0 to 32768 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5133] <... ioctl resumed>) = 0 [pid 5133] close(3) = 0 [pid 5133] close(4) = 0 [pid 5133] mkdir("./file2", 0777) = 0 [pid 5133] mount("/dev/loop2", "./file2", "jfs", 0, "") = 0 [pid 5133] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5133] chdir("./file2") = 0 [pid 5133] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5133] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] <... futex resumed>) = 0 [pid 5132] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5132] <... futex resumed>) = 1 [pid 5133] rename("./file2", "./file1" [ 50.518736][ T5133] ERROR: (device loop2): diWrite: ixpxd invalid [ 50.518736][ T5133] [ 50.551563][ T5133] ERROR: (device loop2): remounting filesystem as read-only [pid 5132] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5059] <... ioctl resumed>) = 0 [pid 5132] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5059] close(3 [pid 5132] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... close resumed>) = 0 [pid 5132] <... mprotect resumed>) = 0 [pid 5132] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5132] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5142]}, 88) = 5142 [pid 5132] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5132] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5132] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5132] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5142 attached [pid 5142] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5143 [pid 5142] <... rseq resumed>) = 0 [pid 5142] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5142] rt_sigprocmask(SIG_SETMASK, [], [pid 5133] <... rename resumed>) = -1 EIO (Input/output error) [pid 5142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5133] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] mkdir(".", 0777 [pid 5133] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5143 attached [pid 5142] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5133] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5143] set_robust_list(0x5555565206a0, 24) = 0 [pid 5143] chdir("./4" [pid 5142] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5143] <... chdir resumed>) = 0 [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5143] setpgid(0, 0) = 0 [pid 5142] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5132] <... futex resumed>) = 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5142] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] exit_group(0 [pid 5133] <... futex resumed>) = ? [pid 5132] <... exit_group resumed>) = ? [pid 5133] +++ exited with 0 +++ [ 50.571425][ T5133] ERROR: (device loop2): txAbort: [ 50.571425][ T5133] [pid 5143] <... openat resumed>) = 3 [pid 5142] <... futex resumed>) = ? [pid 5143] write(3, "1000", 4 [pid 5142] +++ exited with 0 +++ [pid 5132] +++ exited with 0 +++ [pid 5143] <... write resumed>) = 4 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=15 /* 0.15 s */} --- [pid 5058] restart_syscall(<... resuming interrupted clone ...> [pid 5143] close(3 [pid 5058] <... restart_syscall resumed>) = 0 [pid 5143] <... close resumed>) = 0 [pid 5143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5058] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5143] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] getdents64(3, [pid 5143] <... futex resumed>) = 0 [pid 5143] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5143] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5143] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5058] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5144 attached => {parent_tid=[5144]}, 88) = 5144 [pid 5144] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5143] rt_sigprocmask(SIG_SETMASK, [], [pid 5144] set_robust_list(0x7f91a50a79a0, 24 [pid 5143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... set_robust_list resumed>) = 0 [pid 5144] rt_sigprocmask(SIG_SETMASK, [], [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5144] memfd_create("syzkaller", 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./4/binderfs") = 0 [pid 5144] <... memfd_create resumed>) = 3 [pid 5058] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5137] <... write resumed>) = 16777216 [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./4/file2", [pid 5137] munmap(0x7f919cc00000, 138412032 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./4/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5137] <... munmap resumed>) = 0 [pid 5058] <... openat resumed>) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, [pid 5137] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5138] <... write resumed>) = 16777216 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] <... ioctl resumed>) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5137] <... openat resumed>) = 4 [pid 5137] ioctl(4, LOOP_SET_FD, 3 [pid 5058] rmdir("./4/file2" [pid 5138] munmap(0x7f919cc00000, 138412032 [pid 5058] <... rmdir resumed>) = 0 [pid 5056] close(3 [pid 5058] getdents64(3, [pid 5056] <... close resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3 [pid 5138] <... munmap resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] rmdir("./4") = 0 ./strace-static-x86_64: Process 5145 attached [pid 5145] set_robust_list(0x5555565206a0, 24 [pid 5058] mkdir("./5", 0777 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5145 [pid 5145] <... set_robust_list resumed>) = 0 [pid 5145] chdir("./5") = 0 [pid 5145] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5058] <... mkdir resumed>) = 0 [pid 5145] <... prctl resumed>) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5145] setpgid(0, 0 [pid 5058] <... openat resumed>) = 3 [pid 5145] <... setpgid resumed>) = 0 [pid 5145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5137] <... ioctl resumed>) = 0 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5137] close(3) = 0 [pid 5145] <... openat resumed>) = 3 [pid 5145] write(3, "1000", 4) = 4 [pid 5137] close(4) = 0 [pid 5137] mkdir("./file2", 0777 [pid 5145] close(3 [pid 5137] <... mkdir resumed>) = 0 [pid 5145] <... close resumed>) = 0 [pid 5137] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5145] symlink("/dev/binderfs", "./binderfs" [pid 5137] <... mount resumed>) = 0 [pid 5137] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5145] <... symlink resumed>) = 0 [pid 5137] <... openat resumed>) = 3 [pid 5145] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] chdir("./file2" [pid 5145] <... futex resumed>) = 0 [pid 5137] <... chdir resumed>) = 0 [pid 5145] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5137] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5138] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5145] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5137] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 50.772340][ T5137] loop1: detected capacity change from 0 to 32768 [pid 5145] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5138] <... openat resumed>) = 4 [pid 5137] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5138] ioctl(4, LOOP_SET_FD, 3 [pid 5137] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5137] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] <... ioctl resumed>) = 0 [pid 5145] <... mmap resumed>) = 0x7f91a5087000 [pid 5145] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5135] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... mprotect resumed>) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = 1 [pid 5137] rename("./file2", "./file1" [pid 5145] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5138] close(3 [pid 5135] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5138] <... close resumed>) = 0 [pid 5145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5138] close(4) = 0 [pid 5138] mkdir("./file2", 0777./strace-static-x86_64: Process 5146 attached [pid 5141] <... write resumed>) = 16777216 [pid 5138] <... mkdir resumed>) = 0 [pid 5146] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5145] <... clone3 resumed> => {parent_tid=[5146]}, 88) = 5146 [pid 5146] <... rseq resumed>) = 0 [pid 5145] rt_sigprocmask(SIG_SETMASK, [], [pid 5146] set_robust_list(0x7f91a50a79a0, 24 [pid 5145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5145] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5138] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5146] <... set_robust_list resumed>) = 0 [pid 5146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5141] munmap(0x7f919cc00000, 138412032 [pid 5146] memfd_create("syzkaller", 0) = 3 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5138] <... mount resumed>) = 0 [pid 5141] <... munmap resumed>) = 0 [pid 5138] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5138] chdir("./file2") = 0 [pid 5138] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5138] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 50.842684][ T5138] loop5: detected capacity change from 0 to 32768 [ 50.850483][ T5137] ERROR: (device loop1): diWrite: ixpxd invalid [ 50.850483][ T5137] [ 50.868382][ T5137] ERROR: (device loop1): remounting filesystem as read-only [ 50.885581][ T5137] ERROR: (device loop1): txAbort: [ 50.885581][ T5137] [pid 5138] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... rename resumed>) = -1 EIO (Input/output error) [pid 5136] <... futex resumed>) = 0 [pid 5135] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5136] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... futex resumed>) = 0 [pid 5136] <... futex resumed>) = 1 [pid 5135] <... futex resumed>) = 0 [pid 5138] rename("./file2", "./file1" [pid 5136] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5141] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5137] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5137] <... futex resumed>) = 0 [pid 5137] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] <... openat resumed>) = 4 [pid 5135] <... mprotect resumed>) = 0 [pid 5135] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5141] ioctl(4, LOOP_SET_FD, 3 [pid 5135] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5135] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5147 attached [pid 5147] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5147] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5147] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] <... clone3 resumed> => {parent_tid=[5147]}, 88) = 5147 [pid 5135] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5135] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... rename resumed>) = -1 EIO (Input/output error) [pid 5147] <... futex resumed>) = 0 [pid 5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5141] <... ioctl resumed>) = 0 [pid 5135] <... futex resumed>) = 1 [pid 5135] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5147] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5147] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5141] close(3 [pid 5138] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... close resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5136] <... futex resumed>) = 0 [pid 5141] close(4 [pid 5136] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... close resumed>) = 0 [pid 5136] <... futex resumed>) = 0 [pid 5147] <... futex resumed>) = 1 [pid 5136] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5135] <... futex resumed>) = 0 [pid 5147] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5135] exit_group(0 [pid 5141] mkdir("./file2", 0777 [pid 5147] <... futex resumed>) = ? [pid 5141] <... mkdir resumed>) = 0 [pid 5138] mkdir(".", 0777 [pid 5137] <... futex resumed>) = ? [pid 5135] <... exit_group resumed>) = ? [pid 5147] +++ exited with 0 +++ [pid 5138] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5137] +++ exited with 0 +++ [pid 5135] +++ exited with 0 +++ [ 50.919168][ T5138] ERROR: (device loop5): diWrite: ixpxd invalid [ 50.919168][ T5138] [ 50.928824][ T5138] ERROR: (device loop5): remounting filesystem as read-only [ 50.937066][ T5141] loop4: detected capacity change from 0 to 32768 [ 50.953470][ T5138] ERROR: (device loop5): txAbort: [ 50.953470][ T5138] [pid 5141] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5138] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5057] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./4/binderfs") = 0 [pid 5057] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5141] <... mount resumed>) = 0 [pid 5141] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5141] chdir("./file2") = 0 [pid 5138] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./4/file2", [pid 5141] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5138] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5138] <... futex resumed>) = 1 [pid 5136] <... futex resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5141] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] exit_group(0 [pid 5057] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5141] <... futex resumed>) = 1 [pid 5138] <... futex resumed>) = ? [pid 5136] <... exit_group resumed>) = ? [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5141] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] +++ exited with 0 +++ [pid 5057] openat(AT_FDCWD, "./4/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5140] <... futex resumed>) = 0 [pid 5136] +++ exited with 0 +++ [pid 5057] <... openat resumed>) = 4 [pid 5140] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5057] newfstatat(4, "", [pid 5141] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = 1 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5141] rename("./file2", "./file1" [pid 5140] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./4/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./4" [pid 5063] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] mkdir("./5", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5058] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5148 attached [pid 5148] set_robust_list(0x5555565206a0, 24) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5148 [pid 5148] chdir("./5") = 0 [pid 5148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5148] setpgid(0, 0) = 0 [pid 5148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5148] write(3, "1000", 4) = 4 [pid 5148] close(3) = 0 [pid 5148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5148] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5140] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5148] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5148] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5140] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5140] <... futex resumed>) = 0 [pid 5148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5141] <... rename resumed>) = -1 EIO (Input/output error) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5141] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] unlink("./4/binderfs" [pid 5141] <... futex resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5141] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5148] <... mmap resumed>) = 0x7f91a5087000 [pid 5148] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5140] <... mmap resumed>) = 0x7f91a5066000 [pid 5148] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5140] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5063] newfstatat(AT_FDCWD, "./4/file2", [pid 5148] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5140] <... mprotect resumed>) = 0 [pid 5148] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5140] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5148] <... clone3 resumed> => {parent_tid=[5149]}, 88) = 5149 [pid 5140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5148] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5148] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... clone3 resumed> => {parent_tid=[5150]}, 88) = 5150 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5150 attached [pid 5148] <... futex resumed>) = 0 [pid 5140] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5150] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5148] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5140] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5150] <... rseq resumed>) = 0 [pid 5140] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "./4/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5149 attached [pid 5150] set_robust_list(0x7f91a50869a0, 24 [pid 5140] <... futex resumed>) = 0 [pid 5149] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5140] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5150] <... set_robust_list resumed>) = 0 [pid 5149] <... rseq resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5149] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5149] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 51.042406][ T5141] ERROR: (device loop4): diWrite: ixpxd invalid [ 51.042406][ T5141] [ 51.061131][ T5141] ERROR: (device loop4): remounting filesystem as read-only [ 51.069534][ T5141] ERROR: (device loop4): txAbort: [ 51.069534][ T5141] [pid 5149] memfd_create("syzkaller", 0) = 3 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5150] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] newfstatat(4, "", [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5150] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5150] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5150] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5150] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5150] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] exit_group(0 [pid 5150] <... futex resumed>) = ? [pid 5141] <... futex resumed>) = ? [pid 5140] <... exit_group resumed>) = ? [pid 5150] +++ exited with 0 +++ [pid 5141] +++ exited with 0 +++ [pid 5140] +++ exited with 0 +++ [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5063] close(4) = 0 [pid 5063] rmdir("./4/file2" [pid 5060] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5060] newfstatat(3, "", [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] close(3 [pid 5060] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] rmdir("./4" [pid 5060] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./5", 0777 [pid 5060] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] unlink("./4/binderfs" [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5060] <... unlink resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5144] <... write resumed>) = 16777216 [pid 5144] munmap(0x7f919cc00000, 138412032) = 0 [pid 5144] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5144] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5144] close(3) = 0 [pid 5144] close(4) = 0 [pid 5144] mkdir("./file2", 0777) = 0 [ 51.220739][ T5144] loop3: detected capacity change from 0 to 32768 [pid 5144] mount("/dev/loop3", "./file2", "jfs", 0, "") = 0 [pid 5144] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5144] chdir("./file2") = 0 [pid 5144] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5144] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5144] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 1 [pid 5144] rename("./file2", "./file1" [pid 5143] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 5151 attached [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5151 [pid 5151] set_robust_list(0x5555565206a0, 24) = 0 [pid 5143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5151] chdir("./5" [pid 5143] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... chdir resumed>) = 0 [pid 5143] <... futex resumed>) = 0 [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5143] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5143] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5151] <... prctl resumed>) = 0 [pid 5143] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5151] setpgid(0, 0 [pid 5143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5152 attached [pid 5152] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5143] <... clone3 resumed> => {parent_tid=[5152]}, 88) = 5152 [pid 5152] <... rseq resumed>) = 0 [pid 5143] rt_sigprocmask(SIG_SETMASK, [], [pid 5152] set_robust_list(0x7f91a50869a0, 24 [pid 5143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5152] <... set_robust_list resumed>) = 0 [pid 5143] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] rt_sigprocmask(SIG_SETMASK, [], [pid 5143] <... futex resumed>) = 0 [pid 5152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5152] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5152] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5151] <... setpgid resumed>) = 0 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5152] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] write(3, "1000", 4 [pid 5152] <... futex resumed>) = 1 [pid 5151] <... write resumed>) = 4 [pid 5143] <... futex resumed>) = 0 [pid 5151] close(3) = 0 [pid 5151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5151] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5151] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5152] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5151] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5151] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 51.325227][ T5144] ERROR: (device loop3): diWrite: ixpxd invalid [ 51.325227][ T5144] [ 51.341188][ T5144] ERROR: (device loop3): remounting filesystem as read-only [ 51.348481][ T5144] ERROR: (device loop3): txAbort: [ 51.348481][ T5144] [pid 5151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5153]}, 88) = 5153 [pid 5151] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5151] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5144] <... rename resumed>) = -1 EIO (Input/output error) ./strace-static-x86_64: Process 5153 attached [pid 5153] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5153] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5144] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] rt_sigprocmask(SIG_SETMASK, [], [pid 5146] <... write resumed>) = 16777216 [pid 5144] <... futex resumed>) = 0 [pid 5153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] exit_group(0 [pid 5144] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] <... futex resumed>) = ? [pid 5143] <... exit_group resumed>) = ? [pid 5153] memfd_create("syzkaller", 0 [pid 5152] +++ exited with 0 +++ [pid 5144] <... futex resumed>) = ? [pid 5153] <... memfd_create resumed>) = 3 [pid 5146] munmap(0x7f919cc00000, 138412032 [pid 5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5144] +++ exited with 0 +++ [pid 5143] +++ exited with 0 +++ [pid 5153] <... mmap resumed>) = 0x7f919cc00000 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [ 51.391262][ T5144] ERROR: (device loop3): remounting filesystem as read-only [pid 5063] <... ioctl resumed>) = 0 [pid 5059] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./4/binderfs") = 0 [pid 5059] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5154 attached [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5154 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] set_robust_list(0x5555565206a0, 24 [pid 5060] newfstatat(AT_FDCWD, "./4/file2", [pid 5146] <... munmap resumed>) = 0 [pid 5154] <... set_robust_list resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5154] chdir("./5" [pid 5146] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] <... chdir resumed>) = 0 [pid 5146] <... openat resumed>) = 4 [pid 5146] ioctl(4, LOOP_SET_FD, 3 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] <... prctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./4/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] <... openat resumed>) = 3 [pid 5060] newfstatat(4, "", [pid 5059] newfstatat(AT_FDCWD, "./4/file2", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5154] write(3, "1000", 4 [pid 5060] getdents64(4, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./4/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5154] <... write resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] close(3 [pid 5060] getdents64(4, [pid 5059] openat(AT_FDCWD, "./4/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5154] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5154] symlink("/dev/binderfs", "./binderfs" [pid 5060] close(4 [pid 5059] newfstatat(4, "", [pid 5060] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5154] <... symlink resumed>) = 0 [pid 5060] rmdir("./4/file2" [pid 5059] getdents64(4, [pid 5154] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5154] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5059] getdents64(4, [pid 5154] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5154] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] close(4 [pid 5154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5146] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5146] close(3 [pid 5154] <... mmap resumed>) = 0x7f91a5087000 [pid 5059] rmdir("./4/file2" [pid 5154] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5146] <... close resumed>) = 0 [pid 5060] getdents64(3, [pid 5146] close(4) = 0 [pid 5146] mkdir("./file2", 0777 [pid 5059] <... rmdir resumed>) = 0 [pid 5154] <... mprotect resumed>) = 0 [pid 5146] <... mkdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5146] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5154] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5154] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] close(3 [pid 5059] <... close resumed>) = 0 [pid 5154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5060] <... close resumed>) = 0 [pid 5059] rmdir("./4"./strace-static-x86_64: Process 5155 attached [pid 5060] rmdir("./4" [pid 5059] <... rmdir resumed>) = 0 [pid 5155] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5154] <... clone3 resumed> => {parent_tid=[5155]}, 88) = 5155 [pid 5154] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... rmdir resumed>) = 0 [pid 5059] mkdir("./5", 0777 [pid 5155] <... rseq resumed>) = 0 [pid 5154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] mkdir("./5", 0777 [pid 5059] <... mkdir resumed>) = 0 [pid 5155] set_robust_list(0x7f91a50a79a0, 24 [pid 5154] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5154] <... futex resumed>) = 0 [pid 5155] <... set_robust_list resumed>) = 0 [pid 5154] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] <... openat resumed>) = 3 [pid 5155] rt_sigprocmask(SIG_SETMASK, [], [pid 5146] <... mount resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5146] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5155] memfd_create("syzkaller", 0 [pid 5146] <... openat resumed>) = 3 [ 51.492637][ T5146] loop0: detected capacity change from 0 to 32768 [pid 5155] <... memfd_create resumed>) = 3 [pid 5146] chdir("./file2" [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5146] <... chdir resumed>) = 0 [pid 5146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5146] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5145] <... futex resumed>) = 0 [pid 5146] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5145] <... futex resumed>) = 0 [pid 5146] rename("./file2", "./file1" [pid 5145] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5145] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5145] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5145] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5145] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5145] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5156]}, 88) = 5156 [ 51.556376][ T5146] ERROR: (device loop0): diWrite: ixpxd invalid [ 51.556376][ T5146] [ 51.574424][ T5146] ERROR: (device loop0): remounting filesystem as read-only [ 51.591410][ T5146] ERROR: (device loop0): txAbort: [ 51.591410][ T5146] [pid 5145] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5156 attached [pid 5153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5146] <... rename resumed>) = -1 EIO (Input/output error) [pid 5145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5156] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5145] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... rseq resumed>) = 0 [pid 5145] <... futex resumed>) = 0 [pid 5156] set_robust_list(0x7f91a50869a0, 24 [pid 5145] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5156] <... set_robust_list resumed>) = 0 [pid 5156] rt_sigprocmask(SIG_SETMASK, [], [pid 5146] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5146] <... futex resumed>) = 0 [pid 5156] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5156] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5146] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5145] <... futex resumed>) = 0 [pid 5145] exit_group(0) = ? [pid 5146] <... futex resumed>) = ? [pid 5146] +++ exited with 0 +++ [pid 5156] +++ exited with 0 +++ [pid 5145] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5145, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} --- [pid 5056] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5056] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./5/binderfs") = 0 [pid 5056] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5149] <... write resumed>) = 16777216 [pid 5149] munmap(0x7f919cc00000, 138412032) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5149] close(3) = 0 [pid 5149] close(4) = 0 [pid 5149] mkdir("./file2", 0777) = 0 [pid 5149] mount("/dev/loop2", "./file2", "jfs", 0, "") = 0 [pid 5149] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 51.702469][ T5149] loop2: detected capacity change from 0 to 32768 [pid 5149] chdir("./file2") = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5149] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5149] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5148] <... futex resumed>) = 0 [pid 5148] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... futex resumed>) = 0 [pid 5148] <... futex resumed>) = 1 [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5149] rename("./file2", "./file1" [pid 5148] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... ioctl resumed>) = 0 [pid 5148] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5148] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5148] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5148] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5148] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5157 attached [pid 5149] <... rename resumed>) = -1 EIO (Input/output error) [pid 5059] close(3 [pid 5148] <... clone3 resumed> => {parent_tid=[5157]}, 88) = 5157 [pid 5148] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5148] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... close resumed>) = 0 [pid 5149] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5157] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5157] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5157] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5149] <... futex resumed>) = 0 [pid 5157] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5149] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5157] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5157] <... futex resumed>) = 1 [pid 5148] <... futex resumed>) = 0 [pid 5157] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5148] exit_group(0) = ? [pid 5157] <... futex resumed>) = ? [pid 5149] <... futex resumed>) = ? [pid 5149] +++ exited with 0 +++ [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5158 ./strace-static-x86_64: Process 5158 attached [pid 5158] set_robust_list(0x5555565206a0, 24) = 0 [pid 5158] chdir("./5") = 0 [pid 5157] +++ exited with 0 +++ [pid 5148] +++ exited with 0 +++ ./strace-static-x86_64: Process 5159 attached [pid 5158] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5148, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5158] <... prctl resumed>) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5159 [pid 5058] restart_syscall(<... resuming interrupted clone ...> [pid 5158] setpgid(0, 0 [pid 5058] <... restart_syscall resumed>) = 0 [pid 5158] <... setpgid resumed>) = 0 [pid 5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5058] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5158] <... openat resumed>) = 3 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 51.791334][ T5149] ERROR: (device loop2): diWrite: ixpxd invalid [ 51.791334][ T5149] [ 51.809432][ T5149] ERROR: (device loop2): remounting filesystem as read-only [ 51.823739][ T5149] ERROR: (device loop2): txAbort: [ 51.823739][ T5149] [pid 5159] set_robust_list(0x5555565206a0, 24 [pid 5158] write(3, "1000", 4 [pid 5058] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5159] <... set_robust_list resumed>) = 0 [pid 5158] <... write resumed>) = 4 [pid 5058] <... openat resumed>) = 3 [pid 5158] close(3 [pid 5058] newfstatat(3, "", [pid 5159] chdir("./5" [pid 5158] <... close resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5159] <... chdir resumed>) = 0 [pid 5158] symlink("/dev/binderfs", "./binderfs" [pid 5058] getdents64(3, [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] <... prctl resumed>) = 0 [pid 5158] <... symlink resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5159] setpgid(0, 0 [pid 5158] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5159] <... setpgid resumed>) = 0 [pid 5158] <... futex resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5158] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5058] unlink("./5/binderfs" [pid 5159] <... openat resumed>) = 3 [pid 5158] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5058] <... unlink resumed>) = 0 [pid 5159] write(3, "1000", 4 [pid 5158] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5058] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] <... write resumed>) = 4 [pid 5158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] close(3 [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5159] <... close resumed>) = 0 [pid 5159] symlink("/dev/binderfs", "./binderfs" [pid 5158] <... mmap resumed>) = 0x7f91a5087000 [pid 5058] <... umount2 resumed>) = 0 [pid 5159] <... symlink resumed>) = 0 [pid 5158] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5159] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... mprotect resumed>) = 0 [pid 5159] <... futex resumed>) = 0 [pid 5159] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5158] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5158] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5159] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5159] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5160 attached [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5160] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5159] <... mmap resumed>) = 0x7f91a5087000 [pid 5158] <... clone3 resumed> => {parent_tid=[5160]}, 88) = 5160 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] <... rseq resumed>) = 0 [pid 5159] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5158] rt_sigprocmask(SIG_SETMASK, [], [pid 5160] set_robust_list(0x7f91a50a79a0, 24 [pid 5158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5160] <... set_robust_list resumed>) = 0 [pid 5159] <... mprotect resumed>) = 0 [pid 5158] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] newfstatat(AT_FDCWD, "./5/file2", [pid 5160] rt_sigprocmask(SIG_SETMASK, [], [pid 5159] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5158] <... futex resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5160] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5158] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] memfd_create("syzkaller", 0 [pid 5159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5160] <... memfd_create resumed>) = 3 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5159] <... clone3 resumed> => {parent_tid=[5161]}, 88) = 5161 [pid 5160] <... mmap resumed>) = 0x7f919cc00000 [pid 5159] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./5/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, [pid 5159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5159] <... futex resumed>) = 0 [pid 5159] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5161 attached [pid 5153] <... write resumed>) = 16777216 [pid 5058] getdents64(4, [pid 5161] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5161] <... rseq resumed>) = 0 [pid 5058] close(4 [pid 5161] set_robust_list(0x7f91a50a79a0, 24 [pid 5153] munmap(0x7f919cc00000, 138412032 [pid 5058] <... close resumed>) = 0 [pid 5161] <... set_robust_list resumed>) = 0 [pid 5161] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] rmdir("./5/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5153] <... munmap resumed>) = 0 [pid 5058] rmdir("./5" [pid 5056] <... umount2 resumed>) = 0 [pid 5161] memfd_create("syzkaller", 0 [pid 5153] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5058] <... rmdir resumed>) = 0 [pid 5056] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5161] <... memfd_create resumed>) = 3 [pid 5153] <... openat resumed>) = 4 [pid 5058] mkdir("./6", 0777 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5153] ioctl(4, LOOP_SET_FD, 3 [pid 5058] <... mkdir resumed>) = 0 [pid 5056] newfstatat(AT_FDCWD, "./5/file2", [pid 5161] <... mmap resumed>) = 0x7f919cc00000 [pid 5155] <... write resumed>) = 16777216 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5155] munmap(0x7f919cc00000, 138412032 [pid 5058] <... openat resumed>) = 3 [pid 5056] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./5/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./5/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5155] <... munmap resumed>) = 0 [pid 5153] <... ioctl resumed>) = 0 [pid 5056] rmdir("./5" [pid 5153] close(3 [pid 5155] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5153] <... close resumed>) = 0 [pid 5155] <... openat resumed>) = 4 [pid 5155] ioctl(4, LOOP_SET_FD, 3 [pid 5153] close(4 [pid 5056] <... rmdir resumed>) = 0 [pid 5153] <... close resumed>) = 0 [pid 5153] mkdir("./file2", 0777 [pid 5056] mkdir("./6", 0777 [pid 5153] <... mkdir resumed>) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5155] <... ioctl resumed>) = 0 [pid 5155] close(3) = 0 [pid 5155] close(4) = 0 [pid 5155] mkdir("./file2", 0777) = 0 [pid 5155] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5153] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5153] <... mount resumed>) = 0 [pid 5153] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5153] chdir("./file2") = 0 [pid 5153] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5153] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5153] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 1 [ 51.965112][ T5153] loop1: detected capacity change from 0 to 32768 [ 52.002062][ T5155] loop5: detected capacity change from 0 to 32768 [pid 5155] <... mount resumed>) = 0 [pid 5153] rename("./file2", "./file1" [pid 5151] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5155] chdir("./file2") = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5155] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5154] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] rename("./file2", "./file1" [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5154] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5154] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5162 attached [pid 5162] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5162] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5162] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5154] <... clone3 resumed> => {parent_tid=[5162]}, 88) = 5162 [pid 5162] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5154] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = 1 [pid 5162] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5154] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5162] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5151] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [ 52.071767][ T5153] ERROR: (device loop1): diWrite: ixpxd invalid [ 52.071767][ T5153] [ 52.073918][ T5155] ERROR: (device loop5): diWrite: ixpxd invalid [ 52.073918][ T5155] [ 52.107406][ T5153] ERROR: (device loop1): remounting filesystem as read-only [pid 5151] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5151] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5163 attached [pid 5153] <... rename resumed>) = -1 EIO (Input/output error) [pid 5151] <... clone3 resumed> => {parent_tid=[5163]}, 88) = 5163 [pid 5163] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5153] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] rt_sigprocmask(SIG_SETMASK, [], [pid 5163] <... rseq resumed>) = 0 [pid 5151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5153] <... futex resumed>) = 0 [pid 5163] set_robust_list(0x7f91a50869a0, 24 [pid 5153] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] <... set_robust_list resumed>) = 0 [pid 5151] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5163] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5155] <... rename resumed>) = -1 EIO (Input/output error) [pid 5163] mkdir(".", 0777 [pid 5162] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5162] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5162] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5162] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5155] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] exit_group(0 [pid 5162] <... futex resumed>) = ? [pid 5155] <... futex resumed>) = ? [pid 5154] <... exit_group resumed>) = ? [pid 5162] +++ exited with 0 +++ [pid 5155] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=14 /* 0.14 s */} --- [pid 5063] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5163] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./5/binderfs" [pid 5163] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... unlink resumed>) = 0 [pid 5163] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] <... futex resumed>) = 1 [pid 5163] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] <... futex resumed>) = 0 [pid 5151] exit_group(0) = ? [pid 5163] <... futex resumed>) = ? [pid 5153] <... futex resumed>) = ? [pid 5163] +++ exited with 0 +++ [pid 5153] +++ exited with 0 +++ [pid 5151] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=23 /* 0.23 s */} --- [pid 5057] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5057] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5057] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./5/binderfs") = 0 [ 52.151601][ T5155] ERROR: (device loop5): remounting filesystem as read-only [ 52.161646][ T5153] ERROR: (device loop1): txAbort: [ 52.161646][ T5153] [ 52.177212][ T5155] ERROR: (device loop5): txAbort: [ 52.177212][ T5155] [pid 5057] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./5/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./5/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./5/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./5/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./5") = 0 [pid 5057] mkdir("./6", 0777) = 0 [pid 5063] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./5/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./5/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./5") = 0 [pid 5063] mkdir("./6", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5058] <... ioctl resumed>) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5164 attached [pid 5164] set_robust_list(0x5555565206a0, 24 [pid 5160] <... write resumed>) = 16777216 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5164 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5165 attached [pid 5165] set_robust_list(0x5555565206a0, 24) = 0 [pid 5164] <... set_robust_list resumed>) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5165 [pid 5165] chdir("./6" [pid 5164] chdir("./6" [pid 5165] <... chdir resumed>) = 0 [pid 5164] <... chdir resumed>) = 0 [pid 5165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5165] setpgid(0, 0) = 0 [pid 5164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5160] munmap(0x7f919cc00000, 138412032 [pid 5164] <... prctl resumed>) = 0 [pid 5165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5164] setpgid(0, 0 [pid 5160] <... munmap resumed>) = 0 [pid 5165] <... openat resumed>) = 3 [pid 5165] write(3, "1000", 4) = 4 [pid 5164] <... setpgid resumed>) = 0 [pid 5165] close(3) = 0 [pid 5165] symlink("/dev/binderfs", "./binderfs" [pid 5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5165] <... symlink resumed>) = 0 [pid 5165] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5165] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5165] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5165] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5165] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5165] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5165] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5166]}, 88) = 5166 [pid 5165] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5165] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5165] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5160] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5166 attached [pid 5166] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5160] <... openat resumed>) = 4 [pid 5166] <... rseq resumed>) = 0 [pid 5166] set_robust_list(0x7f91a50a79a0, 24 [pid 5164] <... openat resumed>) = 3 [pid 5166] <... set_robust_list resumed>) = 0 [pid 5166] rt_sigprocmask(SIG_SETMASK, [], [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5164] write(3, "1000", 4) = 4 [pid 5164] close(3 [pid 5166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5166] memfd_create("syzkaller", 0 [pid 5164] <... close resumed>) = 0 [pid 5164] symlink("/dev/binderfs", "./binderfs" [pid 5166] <... memfd_create resumed>) = 3 [pid 5166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5164] <... symlink resumed>) = 0 [pid 5164] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5164] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5160] <... ioctl resumed>) = 0 [pid 5160] close(3) = 0 [pid 5160] close(4) = 0 [pid 5160] mkdir("./file2", 0777 [pid 5164] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5160] <... mkdir resumed>) = 0 [pid 5160] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5167]}, 88) = 5167 ./strace-static-x86_64: Process 5167 attached [pid 5164] rt_sigprocmask(SIG_SETMASK, [], [pid 5167] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5164] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5167] <... rseq resumed>) = 0 [pid 5164] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] set_robust_list(0x7f91a50a79a0, 24 [pid 5164] <... futex resumed>) = 0 [pid 5167] <... set_robust_list resumed>) = 0 [pid 5167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5160] <... mount resumed>) = 0 [ 52.370949][ T5160] loop4: detected capacity change from 0 to 32768 [pid 5167] memfd_create("syzkaller", 0) = 3 [pid 5164] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5160] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5160] <... openat resumed>) = 3 [pid 5160] chdir("./file2" [pid 5167] <... mmap resumed>) = 0x7f919cc00000 [pid 5160] <... chdir resumed>) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5160] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5160] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... futex resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5160] rename("./file2", "./file1" [pid 5158] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... write resumed>) = 16777216 [pid 5158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5158] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5158] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5168]}, 88) = 5168 [pid 5158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5158] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5168 attached ) = 0 [pid 5168] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5158] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5168] <... rseq resumed>) = 0 [pid 5168] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5168] mkdir(".", 0777) = -1 EEXIST (File exists) [ 52.436207][ T5160] ERROR: (device loop4): diWrite: ixpxd invalid [ 52.436207][ T5160] [ 52.476026][ T5160] ERROR: (device loop4): remounting filesystem as read-only [pid 5168] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5161] munmap(0x7f919cc00000, 138412032) = 0 [pid 5160] <... rename resumed>) = -1 EIO (Input/output error) [pid 5160] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5057] <... ioctl resumed>) = 0 [pid 5168] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... ioctl resumed>) = 0 [pid 5168] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] ioctl(4, LOOP_SET_FD, 3 [pid 5168] <... futex resumed>) = 1 [pid 5158] <... futex resumed>) = 0 [ 52.507535][ T5160] ERROR: (device loop4): txAbort: [ 52.507535][ T5160] [pid 5168] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] exit_group(0 [pid 5168] <... futex resumed>) = ? [pid 5160] <... futex resumed>) = ? [pid 5158] <... exit_group resumed>) = ? [pid 5168] +++ exited with 0 +++ [pid 5160] +++ exited with 0 +++ [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5169 attached [pid 5169] set_robust_list(0x5555565206a0, 24) = 0 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5169 [pid 5169] chdir("./6") = 0 [pid 5158] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5158, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5161] <... ioctl resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5063] close(3 [pid 5060] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] <... prctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5169] setpgid(0, 0 [pid 5060] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5169] <... setpgid resumed>) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... openat resumed>) = 3 [pid 5169] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 5169] write(3, "1000", 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5169] <... write resumed>) = 4 [pid 5060] getdents64(3, [pid 5169] close(3) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5169] symlink("/dev/binderfs", "./binderfs" [pid 5060] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] <... symlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5169] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5169] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] unlink("./5/binderfs" [pid 5169] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5060] <... unlink resumed>) = 0 [pid 5169] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5170 attached ) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5170 [pid 5060] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5170] set_robust_list(0x5555565206a0, 24 [pid 5169] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5170] <... set_robust_list resumed>) = 0 [pid 5169] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5161] close(3 [pid 5060] <... umount2 resumed>) = 0 [pid 5169] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5060] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5171 attached [pid 5170] chdir("./6" [pid 5161] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5171] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5169] <... clone3 resumed> => {parent_tid=[5171]}, 88) = 5171 [pid 5161] close(4 [pid 5060] newfstatat(AT_FDCWD, "./5/file2", [pid 5171] <... rseq resumed>) = 0 [pid 5170] <... chdir resumed>) = 0 [pid 5169] rt_sigprocmask(SIG_SETMASK, [], [pid 5161] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5171] set_robust_list(0x7f91a50a79a0, 24 [pid 5169] <... futex resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./5/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5171] <... set_robust_list resumed>) = 0 [pid 5170] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5169] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5161] mkdir("./file2", 0777 [pid 5060] <... openat resumed>) = 4 [pid 5171] rt_sigprocmask(SIG_SETMASK, [], [pid 5170] <... prctl resumed>) = 0 [ 52.564547][ T5161] loop3: detected capacity change from 0 to 32768 [pid 5060] newfstatat(4, "", [pid 5171] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5170] setpgid(0, 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5171] memfd_create("syzkaller", 0 [pid 5170] <... setpgid resumed>) = 0 [pid 5161] <... mkdir resumed>) = 0 [pid 5060] getdents64(4, [pid 5171] <... memfd_create resumed>) = 3 [pid 5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5161] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5170] <... openat resumed>) = 3 [pid 5060] getdents64(4, [pid 5171] <... mmap resumed>) = 0x7f919cc00000 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5170] write(3, "1000", 4 [pid 5060] close(4) = 0 [pid 5060] rmdir("./5/file2") = 0 [pid 5170] <... write resumed>) = 4 [pid 5060] getdents64(3, [pid 5170] close(3 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5170] <... close resumed>) = 0 [pid 5060] close(3) = 0 [pid 5170] symlink("/dev/binderfs", "./binderfs" [pid 5060] rmdir("./5") = 0 [pid 5170] <... symlink resumed>) = 0 [pid 5060] mkdir("./6", 0777 [pid 5170] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... mkdir resumed>) = 0 [pid 5170] <... futex resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5170] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5060] <... openat resumed>) = 3 [pid 5170] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5170] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5170] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5161] <... mount resumed>) = 0 [pid 5170] <... mprotect resumed>) = 0 [pid 5161] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5161] <... openat resumed>) = 3 [pid 5170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5161] chdir("./file2") = 0 [pid 5170] <... clone3 resumed> => {parent_tid=[5172]}, 88) = 5172 [pid 5161] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5170] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5172 attached NULL, 8) = 0 [pid 5161] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5170] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = 0 [pid 5170] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5161] <... futex resumed>) = 1 [pid 5161] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5159] <... futex resumed>) = 0 [pid 5172] <... rseq resumed>) = 0 [pid 5159] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] set_robust_list(0x7f91a50a79a0, 24 [pid 5161] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5172] <... set_robust_list resumed>) = 0 [pid 5161] rename("./file2", "./file1" [pid 5159] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5172] memfd_create("syzkaller", 0) = 3 [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5159] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5159] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5159] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 52.655443][ T5161] ERROR: (device loop3): diWrite: ixpxd invalid [ 52.655443][ T5161] [ 52.690950][ T5161] ERROR: (device loop3): remounting filesystem as read-only [pid 5159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5173 attached => {parent_tid=[5173]}, 88) = 5173 [pid 5159] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5159] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5159] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5173] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5173] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5173] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5173] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5173] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5173] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5159] <... futex resumed>) = 0 [pid 5173] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] <... rename resumed>) = -1 EIO (Input/output error) [pid 5161] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5161] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] exit_group(0 [pid 5173] <... futex resumed>) = ? [pid 5159] <... exit_group resumed>) = ? [pid 5173] +++ exited with 0 +++ [pid 5161] <... futex resumed>) = ? [pid 5161] +++ exited with 0 +++ [pid 5159] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5059] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 52.731091][ T5161] ERROR: (device loop3): txAbort: [ 52.731091][ T5161] [ 52.738665][ T5161] ERROR: (device loop3): remounting filesystem as read-only [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./5/binderfs") = 0 [pid 5059] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./5/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./5/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./5/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./5/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./5") = 0 [pid 5059] mkdir("./6", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5167] <... write resumed>) = 16777216 [pid 5167] munmap(0x7f919cc00000, 138412032 [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5167] <... munmap resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5166] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5174 attached [pid 5167] <... openat resumed>) = 4 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5174 [pid 5174] set_robust_list(0x5555565206a0, 24 [pid 5167] ioctl(4, LOOP_SET_FD, 3 [pid 5174] <... set_robust_list resumed>) = 0 [pid 5167] <... ioctl resumed>) = 0 [pid 5174] chdir("./6") = 0 [pid 5174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5174] setpgid(0, 0) = 0 [pid 5174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5174] write(3, "1000", 4) = 4 [pid 5174] close(3) = 0 [pid 5174] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5174] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5174] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5174] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5174] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5174] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5166] munmap(0x7f919cc00000, 138412032 [pid 5174] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5174] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5175]}, 88) = 5175 [pid 5174] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5174] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5167] close(3./strace-static-x86_64: Process 5175 attached [pid 5166] <... munmap resumed>) = 0 [pid 5175] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5167] <... close resumed>) = 0 [pid 5167] close(4) = 0 [pid 5167] mkdir("./file2", 0777 [pid 5175] <... rseq resumed>) = 0 [pid 5167] <... mkdir resumed>) = 0 [pid 5167] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5175] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5175] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 52.983621][ T5167] loop0: detected capacity change from 0 to 32768 [pid 5175] memfd_create("syzkaller", 0) = 3 [pid 5167] <... mount resumed>) = 0 [pid 5167] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5167] chdir("./file2") = 0 [pid 5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5167] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5164] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] rename("./file2", "./file1" [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5166] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5175] <... mmap resumed>) = 0x7f919cc00000 [pid 5166] <... openat resumed>) = 4 [pid 5166] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5166] close(3) = 0 [pid 5166] close(4) = 0 [ 53.035603][ T5167] ERROR: (device loop0): diWrite: ixpxd invalid [ 53.035603][ T5167] [ 53.046456][ T5166] loop2: detected capacity change from 0 to 32768 [pid 5166] mkdir("./file2", 0777) = 0 [pid 5164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5164] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5166] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5164] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5164] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5176]}, 88) = 5176 [pid 5164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5164] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5176 attached [pid 5176] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5176] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5176] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5176] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5176] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5176] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5164] <... futex resumed>) = 0 [ 53.082840][ T5167] ERROR: (device loop0): remounting filesystem as read-only [ 53.114320][ T5167] ERROR: (device loop0): txAbort: [ 53.114320][ T5167] [pid 5176] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] <... mount resumed>) = 0 [pid 5171] <... write resumed>) = 16777216 [pid 5171] munmap(0x7f919cc00000, 138412032) = 0 [pid 5166] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5167] <... rename resumed>) = -1 EIO (Input/output error) [pid 5167] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] exit_group(0 [pid 5176] <... futex resumed>) = ? [pid 5167] <... futex resumed>) = ? [pid 5164] <... exit_group resumed>) = ? [pid 5176] +++ exited with 0 +++ [pid 5167] +++ exited with 0 +++ [pid 5166] <... openat resumed>) = 3 [pid 5164] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5166] chdir("./file2") = 0 [pid 5166] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 53.129950][ T5167] ERROR: (device loop0): remounting filesystem as read-only [pid 5056] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5166] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... ioctl resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5171] <... openat resumed>) = 4 [pid 5056] <... openat resumed>) = 3 [pid 5166] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] newfstatat(3, "", [pid 5166] <... futex resumed>) = 1 [pid 5165] <... futex resumed>) = 0 [pid 5059] close(3 [pid 5165] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5166] rename("./file2", "./file1" [pid 5165] <... futex resumed>) = 0 [pid 5056] getdents64(3, [pid 5059] <... close resumed>) = 0 [pid 5171] ioctl(4, LOOP_SET_FD, 3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5165] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5177 [pid 5056] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./6/binderfs", ./strace-static-x86_64: Process 5177 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./6/binderfs") = 0 [pid 5056] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... ioctl resumed>) = 0 [pid 5177] set_robust_list(0x5555565206a0, 24 [pid 5172] <... write resumed>) = 16777216 [pid 5166] <... rename resumed>) = -1 EIO (Input/output error) [pid 5177] <... set_robust_list resumed>) = 0 [pid 5177] chdir("./6" [pid 5171] close(3) = 0 [pid 5171] close(4) = 0 [pid 5171] mkdir("./file2", 0777) = 0 [pid 5172] munmap(0x7f919cc00000, 138412032 [pid 5166] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... chdir resumed>) = 0 [pid 5166] <... futex resumed>) = 1 [pid 5165] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5165] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5177] <... prctl resumed>) = 0 [pid 5165] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5177] setpgid(0, 0 [pid 5171] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5166] mkdir(".", 0777 [pid 5177] <... setpgid resumed>) = 0 [pid 5166] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5056] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5166] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5177] <... openat resumed>) = 3 [pid 5166] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./6/file2", [pid 5177] write(3, "1000", 4 [pid 5166] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5177] <... write resumed>) = 4 [pid 5165] <... futex resumed>) = 0 [pid 5056] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5177] close(3) = 0 [pid 5166] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5165] exit_group(0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5177] symlink("/dev/binderfs", "./binderfs" [pid 5166] <... futex resumed>) = ? [pid 5165] <... exit_group resumed>) = ? [pid 5056] openat(AT_FDCWD, "./6/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5166] +++ exited with 0 +++ [pid 5177] <... symlink resumed>) = 0 [pid 5172] <... munmap resumed>) = 0 [pid 5165] +++ exited with 0 +++ [pid 5056] <... openat resumed>) = 4 [pid 5177] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5177] <... futex resumed>) = 0 [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5171] <... mount resumed>) = 0 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5165, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5056] newfstatat(4, "", [pid 5177] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5172] <... openat resumed>) = 4 [pid 5171] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5177] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5172] ioctl(4, LOOP_SET_FD, 3 [pid 5171] <... openat resumed>) = 3 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5177] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5171] chdir("./file2" [pid 5058] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] getdents64(4, [pid 5177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5171] <... chdir resumed>) = 0 [ 53.179095][ T5166] ERROR: (device loop2): diWrite: ixpxd invalid [ 53.179095][ T5166] [ 53.181373][ T5171] loop1: detected capacity change from 0 to 32768 [ 53.194477][ T5166] ERROR: (device loop2): remounting filesystem as read-only [ 53.215564][ T5166] ERROR: (device loop2): txAbort: [ 53.215564][ T5166] [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5171] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5058] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5177] <... mmap resumed>) = 0x7f91a5087000 [pid 5171] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5058] <... openat resumed>) = 3 [pid 5177] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5171] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] newfstatat(3, "", [pid 5056] getdents64(4, [pid 5177] <... mprotect resumed>) = 0 [pid 5171] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5177] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5171] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] getdents64(3, [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5177] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5177] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5171] rename("./file2", "./file1" [pid 5169] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] close(4./strace-static-x86_64: Process 5178 attached [pid 5178] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5172] <... ioctl resumed>) = 0 [pid 5178] <... rseq resumed>) = 0 [pid 5178] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5177] <... clone3 resumed> => {parent_tid=[5178]}, 88) = 5178 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... close resumed>) = 0 [pid 5177] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5056] rmdir("./6/file2" [pid 5178] rt_sigprocmask(SIG_SETMASK, [], [pid 5177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5178] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5177] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] unlink("./6/binderfs" [pid 5178] memfd_create("syzkaller", 0 [pid 5177] <... futex resumed>) = 0 [pid 5058] <... unlink resumed>) = 0 [pid 5178] <... memfd_create resumed>) = 3 [pid 5177] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./6") = 0 [pid 5056] mkdir("./7", 0777 [pid 5172] close(3 [pid 5056] <... mkdir resumed>) = 0 [pid 5172] <... close resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5172] close(4 [pid 5056] <... openat resumed>) = 3 [pid 5172] <... close resumed>) = 0 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5172] mkdir("./file2", 0777) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./6/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./6/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./6") = 0 [pid 5058] mkdir("./7", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5172] <... mount resumed>) = 0 [ 53.252937][ T5172] loop5: detected capacity change from 0 to 32768 [ 53.258937][ T5171] ERROR: (device loop1): diWrite: ixpxd invalid [ 53.258937][ T5171] [ 53.289025][ T5171] ERROR: (device loop1): remounting filesystem as read-only [pid 5172] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5169] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5169] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5172] <... openat resumed>) = 3 [pid 5169] <... mmap resumed>) = 0x7f91a5066000 [pid 5172] chdir("./file2" [pid 5169] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5172] <... chdir resumed>) = 0 [pid 5169] <... mprotect resumed>) = 0 [pid 5172] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5169] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5172] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5169] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5179]}, 88) = 5179 ./strace-static-x86_64: Process 5179 attached [pid 5172] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5169] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5171] <... rename resumed>) = -1 EIO (Input/output error) [pid 5171] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5172] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5170] <... futex resumed>) = 0 [pid 5170] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... rseq resumed>) = 0 [pid 5172] rename("./file2", "./file1" [pid 5170] <... futex resumed>) = 0 [pid 5179] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5170] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 53.304048][ T5171] ERROR: (device loop1): txAbort: [ 53.304048][ T5171] [pid 5171] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5179] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5179] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5179] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5170] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5169] <... futex resumed>) = 0 [pid 5179] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] exit_group(0) = ? [pid 5179] <... futex resumed>) = ? [pid 5170] <... futex resumed>) = 0 [pid 5179] +++ exited with 0 +++ [pid 5171] <... futex resumed>) = ? [pid 5170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5171] +++ exited with 0 +++ [pid 5170] <... mmap resumed>) = 0x7f91a5066000 [pid 5169] +++ exited with 0 +++ [pid 5170] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [ 53.352676][ T5172] ERROR: (device loop5): diWrite: ixpxd invalid [ 53.352676][ T5172] [ 53.387024][ T5172] ERROR: (device loop5): remounting filesystem as read-only [pid 5057] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./6/binderfs") = 0 [pid 5057] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5170] <... mprotect resumed>) = 0 [pid 5170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5172] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] <... umount2 resumed>) = 0 [pid 5170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5057] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5180 attached [pid 5172] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... clone3 resumed> => {parent_tid=[5180]}, 88) = 5180 [pid 5180] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5172] <... futex resumed>) = 0 [pid 5180] <... rseq resumed>) = 0 [pid 5172] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./6/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5180] set_robust_list(0x7f91a50869a0, 24 [pid 5057] <... openat resumed>) = 4 [pid 5180] <... set_robust_list resumed>) = 0 [pid 5170] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] rt_sigprocmask(SIG_SETMASK, [], [pid 5170] <... futex resumed>) = 0 [pid 5180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5170] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5180] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5057] close(4 [pid 5180] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5057] <... close resumed>) = 0 [pid 5057] rmdir("./6/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./6" [pid 5180] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... rmdir resumed>) = 0 [pid 5180] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5170] <... futex resumed>) = 0 [pid 5170] exit_group(0 [pid 5057] mkdir("./7", 0777 [pid 5172] <... futex resumed>) = ? [pid 5170] <... exit_group resumed>) = ? [pid 5172] +++ exited with 0 +++ [pid 5057] <... mkdir resumed>) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 53.406895][ T5172] ERROR: (device loop5): txAbort: [ 53.406895][ T5172] [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5180] +++ exited with 0 +++ [pid 5170] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5170, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=18 /* 0.18 s */} --- [pid 5063] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5175] <... write resumed>) = 16777216 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5175] munmap(0x7f919cc00000, 138412032 [pid 5063] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./6/binderfs") = 0 [pid 5063] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./6/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5175] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5175] ioctl(4, LOOP_SET_FD, 3 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5175] <... ioctl resumed>) = 0 [pid 5063] getdents64(4, [pid 5175] close(3 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5175] <... close resumed>) = 0 [pid 5175] close(4) = 0 [pid 5063] close(4 [pid 5058] <... ioctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5175] mkdir("./file2", 0777 [pid 5063] rmdir("./6/file2" [pid 5056] <... ioctl resumed>) = 0 [pid 5175] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5058] close(3 [pid 5175] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] <... close resumed>) = 0 [pid 5063] close(3 [pid 5056] close(3 [pid 5063] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] <... close resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 53.543069][ T5175] loop4: detected capacity change from 0 to 32768 [pid 5063] rmdir("./6"./strace-static-x86_64: Process 5182 attached ./strace-static-x86_64: Process 5181 attached [pid 5175] <... mount resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5181 [pid 5181] set_robust_list(0x5555565206a0, 24 [pid 5063] mkdir("./7", 0777 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5182 [pid 5063] <... mkdir resumed>) = 0 [pid 5182] set_robust_list(0x5555565206a0, 24 [pid 5181] <... set_robust_list resumed>) = 0 [pid 5182] <... set_robust_list resumed>) = 0 [pid 5181] chdir("./7" [pid 5182] chdir("./7" [pid 5175] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5182] <... chdir resumed>) = 0 [pid 5182] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5181] <... chdir resumed>) = 0 [pid 5175] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5175] chdir("./file2" [pid 5182] <... prctl resumed>) = 0 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5182] setpgid(0, 0 [pid 5181] setpgid(0, 0 [pid 5182] <... setpgid resumed>) = 0 [pid 5175] <... chdir resumed>) = 0 [pid 5181] <... setpgid resumed>) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5182] <... openat resumed>) = 3 [pid 5182] write(3, "1000", 4 [pid 5175] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5182] <... write resumed>) = 4 [pid 5181] write(3, "1000", 4 [pid 5175] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5181] <... write resumed>) = 4 [pid 5182] close(3 [pid 5181] close(3 [pid 5175] <... futex resumed>) = 1 [pid 5174] <... futex resumed>) = 0 [pid 5174] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] rename("./file2", "./file1" [pid 5182] <... close resumed>) = 0 [pid 5182] symlink("/dev/binderfs", "./binderfs" [pid 5181] <... close resumed>) = 0 [pid 5182] <... symlink resumed>) = 0 [pid 5181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5181] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5181] <... futex resumed>) = 0 [ 53.618331][ T5175] ERROR: (device loop4): diWrite: ixpxd invalid [ 53.618331][ T5175] [pid 5182] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5181] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5182] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5181] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5174] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5174] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5181] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5182] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5174] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5174] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5174] <... mmap resumed>) = 0x7f91a5066000 [pid 5174] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5174] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5174] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5183]}, 88) = 5183 [pid 5174] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5174] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5183 attached [pid 5182] <... mmap resumed>) = 0x7f91a5087000 [pid 5181] <... mmap resumed>) = 0x7f91a5087000 [pid 5178] <... write resumed>) = 16777216 [pid 5183] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5182] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5181] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5178] munmap(0x7f919cc00000, 138412032 [pid 5183] <... rseq resumed>) = 0 [pid 5182] <... mprotect resumed>) = 0 [pid 5181] <... mprotect resumed>) = 0 [pid 5178] <... munmap resumed>) = 0 [pid 5183] set_robust_list(0x7f91a50869a0, 24 [pid 5174] <... futex resumed>) = 0 [pid 5183] <... set_robust_list resumed>) = 0 [pid 5174] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5183] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5183] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5183] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5183] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5174] <... futex resumed>) = 0 [pid 5183] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5181] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5178] ioctl(4, LOOP_SET_FD, 3 [pid 5182] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5181] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5182] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5184]}, 88) = 5184 ./strace-static-x86_64: Process 5184 attached [pid 5184] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5184] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5184] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5184] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 53.659326][ T5175] ERROR: (device loop4): remounting filesystem as read-only [ 53.682386][ T5175] ERROR: (device loop4): txAbort: [ 53.682386][ T5175] [ 53.690314][ T5178] loop3: detected capacity change from 0 to 32768 [pid 5181] rt_sigprocmask(SIG_SETMASK, [], [pid 5178] <... ioctl resumed>) = 0 [pid 5182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5178] close(3 [pid 5057] close(3 [pid 5178] <... close resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5178] close(4 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5181] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5184] <... futex resumed>) = 0 [pid 5182] <... clone3 resumed> => {parent_tid=[5185]}, 88) = 5185 [pid 5181] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5184] memfd_create("syzkaller", 0 [pid 5182] rt_sigprocmask(SIG_SETMASK, [], [pid 5184] <... memfd_create resumed>) = 3 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5182] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... mmap resumed>) = 0x7f919cc00000 [pid 5182] <... futex resumed>) = 0 [pid 5182] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5185 attached [pid 5185] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5178] <... close resumed>) = 0 [pid 5185] <... rseq resumed>) = 0 [pid 5178] mkdir("./file2", 0777 [pid 5185] set_robust_list(0x7f91a50a79a0, 24 [pid 5178] <... mkdir resumed>) = 0 [pid 5185] <... set_robust_list resumed>) = 0 [pid 5178] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5185] memfd_create("syzkaller", 0 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5186 ./strace-static-x86_64: Process 5186 attached [pid 5185] <... memfd_create resumed>) = 3 [pid 5186] set_robust_list(0x5555565206a0, 24 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5186] <... set_robust_list resumed>) = 0 [pid 5185] <... mmap resumed>) = 0x7f919cc00000 [ 53.706251][ T5175] ERROR: (device loop4): remounting filesystem as read-only [pid 5186] chdir("./7") = 0 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5186] setpgid(0, 0) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] <... rename resumed>) = -1 EIO (Input/output error) [pid 5186] write(3, "1000", 4) = 4 [pid 5175] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] close(3) = 0 [pid 5186] symlink("/dev/binderfs", "./binderfs" [pid 5175] <... futex resumed>) = 0 [pid 5174] exit_group(0 [pid 5183] <... futex resumed>) = ? [pid 5174] <... exit_group resumed>) = ? [pid 5183] +++ exited with 0 +++ [pid 5175] +++ exited with 0 +++ [pid 5174] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5174, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5178] <... mount resumed>) = 0 [pid 5178] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5178] chdir("./file2" [pid 5186] <... symlink resumed>) = 0 [pid 5178] <... chdir resumed>) = 0 [pid 5060] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5186] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5186] <... futex resumed>) = 0 [pid 5186] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5178] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5186] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5186] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... openat resumed>) = 3 [pid 5178] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(3, "", [pid 5186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5178] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5186] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5178] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(3, [pid 5186] <... mprotect resumed>) = 0 [pid 5186] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5177] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5186] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5177] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5186] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5186] <... clone3 resumed> => {parent_tid=[5187]}, 88) = 5187 [pid 5186] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5187 attached NULL, 8) = 0 [pid 5187] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5186] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] <... rseq resumed>) = 0 [pid 5186] <... futex resumed>) = 0 [pid 5187] set_robust_list(0x7f91a50a79a0, 24 [pid 5186] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5187] <... set_robust_list resumed>) = 0 [pid 5187] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5178] rename("./file2", "./file1" [pid 5060] unlink("./6/binderfs") = 0 [pid 5060] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] memfd_create("syzkaller", 0) = 3 [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5060] <... umount2 resumed>) = 0 [ 53.773575][ T5178] ERROR: (device loop3): diWrite: ixpxd invalid [ 53.773575][ T5178] [ 53.806288][ T5178] ERROR: (device loop3): remounting filesystem as read-only [pid 5178] <... rename resumed>) = -1 EIO (Input/output error) [pid 5177] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5177] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5177] <... futex resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./6/file2", [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5177] <... mmap resumed>) = 0x7f91a5066000 [pid 5060] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5177] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5177] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] openat(AT_FDCWD, "./6/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5177] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5177] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5060] newfstatat(4, "", ./strace-static-x86_64: Process 5188 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5188] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5177] <... clone3 resumed> => {parent_tid=[5188]}, 88) = 5188 [pid 5060] getdents64(4, [pid 5188] <... rseq resumed>) = 0 [pid 5177] rt_sigprocmask(SIG_SETMASK, [], [pid 5188] set_robust_list(0x7f91a50869a0, 24 [pid 5177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5177] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... set_robust_list resumed>) = 0 [pid 5177] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 5188] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5177] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5188] mkdir(".", 0777 [pid 5060] close(4 [pid 5188] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5060] <... close resumed>) = 0 [pid 5188] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5178] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] rmdir("./6/file2" [pid 5188] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5178] <... futex resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5188] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] getdents64(3, [pid 5188] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5188] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] exit_group(0 [pid 5188] <... futex resumed>) = ? [pid 5178] <... futex resumed>) = ? [pid 5177] <... exit_group resumed>) = ? [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5188] +++ exited with 0 +++ [pid 5178] +++ exited with 0 +++ [pid 5060] close(3) = 0 [ 53.821745][ T5178] ERROR: (device loop3): txAbort: [ 53.821745][ T5178] [pid 5060] rmdir("./6") = 0 [pid 5060] mkdir("./7", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5177] +++ exited with 0 +++ [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5177, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=19 /* 0.19 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./6/binderfs") = 0 [pid 5059] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./6/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./6/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./6/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./6") = 0 [pid 5059] mkdir("./7", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5189 attached [pid 5189] set_robust_list(0x5555565206a0, 24) = 0 [pid 5189] chdir("./7" [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5189 [pid 5189] <... chdir resumed>) = 0 [pid 5189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5189] setpgid(0, 0) = 0 [pid 5189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5189] write(3, "1000", 4) = 4 [pid 5189] close(3) = 0 [pid 5189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5189] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5189] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5189] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5189] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5189] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5189] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5190]}, 88) = 5190 [pid 5189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5190 attached [pid 5190] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5189] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5190] <... rseq resumed>) = 0 [pid 5189] <... futex resumed>) = 0 [pid 5190] set_robust_list(0x7f91a50a79a0, 24 [pid 5189] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5190] <... set_robust_list resumed>) = 0 [pid 5190] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5190] memfd_create("syzkaller", 0) = 3 [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5191 ./strace-static-x86_64: Process 5191 attached [pid 5191] set_robust_list(0x5555565206a0, 24) = 0 [pid 5191] chdir("./7") = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5191] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5191] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5191] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5192]}, 88) = 5192 [pid 5191] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5191] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5192 attached [pid 5192] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5192] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5192] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5059] <... ioctl resumed>) = 0 [pid 5185] <... write resumed>) = 16777216 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5193 ./strace-static-x86_64: Process 5193 attached [pid 5193] set_robust_list(0x5555565206a0, 24) = 0 [pid 5193] chdir("./7") = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5193] setpgid(0, 0) = 0 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5193] write(3, "1000", 4) = 4 [pid 5193] close(3) = 0 [pid 5193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5193] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5193] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5185] munmap(0x7f919cc00000, 138412032 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5193] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5193] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5194]}, 88) = 5194 [pid 5193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5193] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5194 attached [pid 5194] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5194] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5194] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5194] memfd_create("syzkaller", 0 [pid 5185] <... munmap resumed>) = 0 [pid 5194] <... memfd_create resumed>) = 3 [pid 5194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5185] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5184] <... write resumed>) = 16777216 [pid 5184] munmap(0x7f919cc00000, 138412032 [pid 5185] <... openat resumed>) = 4 [pid 5185] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5185] close(3) = 0 [pid 5185] close(4) = 0 [pid 5184] <... munmap resumed>) = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5184] ioctl(4, LOOP_SET_FD, 3 [pid 5185] mkdir("./file2", 0777 [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5185] <... mkdir resumed>) = 0 [pid 5185] mount("/dev/loop0", "./file2", "jfs", 0, "") = 0 [pid 5185] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5185] chdir("./file2" [pid 5184] <... ioctl resumed>) = 0 [pid 5184] close(3 [pid 5185] <... chdir resumed>) = 0 [pid 5184] <... close resumed>) = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5184] close(4 [pid 5185] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5184] <... close resumed>) = 0 [pid 5185] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] mkdir("./file2", 0777 [pid 5185] <... futex resumed>) = 1 [pid 5184] <... mkdir resumed>) = 0 [pid 5182] <... futex resumed>) = 0 [pid 5185] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5182] <... futex resumed>) = 0 [pid 5185] rename("./file2", "./file1" [pid 5182] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 54.311926][ T5185] loop0: detected capacity change from 0 to 32768 [ 54.331828][ T5184] loop2: detected capacity change from 0 to 32768 [pid 5184] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5187] <... write resumed>) = 16777216 [pid 5187] munmap(0x7f919cc00000, 138412032) = 0 [pid 5182] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5182] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5182] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5182] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5182] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5182] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5195 attached [pid 5195] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5184] <... mount resumed>) = 0 [pid 5195] <... rseq resumed>) = 0 [pid 5195] set_robust_list(0x7f91a50869a0, 24 [pid 5184] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5195] <... set_robust_list resumed>) = 0 [pid 5195] rt_sigprocmask(SIG_SETMASK, [], [pid 5184] <... openat resumed>) = 3 [pid 5195] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5195] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5184] chdir("./file2") = 0 [pid 5184] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 54.371813][ T5185] ERROR: (device loop0): diWrite: ixpxd invalid [ 54.371813][ T5185] [ 54.380493][ T5185] ERROR: (device loop0): remounting filesystem as read-only [ 54.403560][ T5185] ERROR: (device loop0): txAbort: [ 54.403560][ T5185] [pid 5184] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... clone3 resumed> => {parent_tid=[5195]}, 88) = 5195 [pid 5181] <... futex resumed>) = 0 [pid 5182] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5187] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5182] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] <... futex resumed>) = 0 [pid 5187] <... openat resumed>) = 4 [pid 5182] <... futex resumed>) = 1 [pid 5181] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] mkdir(".", 0777 [pid 5187] ioctl(4, LOOP_SET_FD, 3 [pid 5182] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5195] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5185] <... rename resumed>) = -1 EIO (Input/output error) [pid 5184] rename("./file2", "./file1" [pid 5195] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5195] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5182] <... futex resumed>) = 0 [pid 5195] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5185] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] exit_group(0 [pid 5195] <... futex resumed>) = ? [pid 5185] <... futex resumed>) = ? [pid 5182] <... exit_group resumed>) = ? [pid 5195] +++ exited with 0 +++ [pid 5185] +++ exited with 0 +++ [pid 5182] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5182, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [pid 5056] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./7/binderfs") = 0 [pid 5056] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... ioctl resumed>) = 0 [pid 5187] close(3) = 0 [ 54.438270][ T5187] loop1: detected capacity change from 0 to 32768 [ 54.445967][ T5184] ERROR: (device loop2): diWrite: ixpxd invalid [ 54.445967][ T5184] [pid 5187] close(4) = 0 [pid 5187] mkdir("./file2", 0777) = 0 [pid 5187] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5181] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5181] <... mmap resumed>) = 0x7f91a5066000 [pid 5181] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5181] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5196 attached [pid 5196] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5181] <... clone3 resumed> => {parent_tid=[5196]}, 88) = 5196 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5196] <... rseq resumed>) = 0 [pid 5181] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5196] set_robust_list(0x7f91a50869a0, 24 [pid 5181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] openat(AT_FDCWD, "./7/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5196] <... set_robust_list resumed>) = 0 [pid 5181] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5181] <... futex resumed>) = 0 [pid 5056] <... openat resumed>) = 4 [pid 5196] mkdir(".", 0777 [pid 5181] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] newfstatat(4, "", [pid 5196] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5196] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, [pid 5196] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5196] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5181] <... futex resumed>) = 0 [pid 5196] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] <... mount resumed>) = 0 [pid 5056] close(4 [pid 5187] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5187] chdir("./file2") = 0 [pid 5187] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5056] <... close resumed>) = 0 [pid 5187] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] rmdir("./7/file2" [pid 5187] <... futex resumed>) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5187] rename("./file2", "./file1" [ 54.481186][ T5184] ERROR: (device loop2): remounting filesystem as read-only [ 54.510656][ T5184] ERROR: (device loop2): txAbort: [ 54.510656][ T5184] [pid 5186] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] getdents64(3, [pid 5186] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./7") = 0 [pid 5056] mkdir("./8", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5184] <... rename resumed>) = -1 EIO (Input/output error) [ 54.527110][ T5187] ERROR: (device loop1): diWrite: ixpxd invalid [ 54.527110][ T5187] [ 54.531399][ T5184] ERROR: (device loop2): remounting filesystem as read-only [pid 5184] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5181] exit_group(0 [pid 5196] <... futex resumed>) = ? [pid 5181] <... exit_group resumed>) = ? [pid 5196] +++ exited with 0 +++ [pid 5184] +++ exited with 0 +++ [pid 5181] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5058] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5186] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5186] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5058] <... openat resumed>) = 3 [pid 5186] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5058] newfstatat(3, "", [pid 5186] <... mmap resumed>) = 0x7f91a5066000 [pid 5186] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5186] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5186] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5186] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5058] getdents64(3, [pid 5186] <... clone3 resumed> => {parent_tid=[5197]}, 88) = 5197 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5186] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5186] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5186] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5197 attached [pid 5058] unlink("./7/binderfs") = 0 [pid 5058] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5197] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5197] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5197] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5197] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5197] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5186] <... futex resumed>) = 0 [pid 5197] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5190] <... write resumed>) = 16777216 [ 54.572032][ T5187] ERROR: (device loop1): remounting filesystem as read-only [ 54.598264][ T5187] ERROR: (device loop1): txAbort: [ 54.598264][ T5187] [pid 5058] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] munmap(0x7f919cc00000, 138412032 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./7/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, [pid 5187] <... rename resumed>) = -1 EIO (Input/output error) [pid 5187] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] exit_group(0 [pid 5187] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] <... exit_group resumed>) = ? [pid 5187] <... futex resumed>) = ? [pid 5197] <... futex resumed>) = ? [pid 5190] <... munmap resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5197] +++ exited with 0 +++ [pid 5190] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5058] getdents64(4, [pid 5190] <... openat resumed>) = 4 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5190] ioctl(4, LOOP_SET_FD, 3 [pid 5058] close(4 [pid 5187] +++ exited with 0 +++ [pid 5186] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5057] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./7/binderfs") = 0 [pid 5057] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... close resumed>) = 0 [pid 5058] rmdir("./7/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./7" [pid 5190] <... ioctl resumed>) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5190] close(3) = 0 [pid 5058] mkdir("./8", 0777 [pid 5190] close(4 [pid 5058] <... mkdir resumed>) = 0 [pid 5190] <... close resumed>) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5190] mkdir("./file2", 0777 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5190] <... mkdir resumed>) = 0 [ 54.646120][ T5187] ERROR: (device loop1): remounting filesystem as read-only [ 54.682133][ T5190] loop5: detected capacity change from 0 to 32768 [pid 5190] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5057] <... umount2 resumed>) = 0 [pid 5190] <... mount resumed>) = 0 [pid 5057] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5190] <... openat resumed>) = 3 [pid 5057] newfstatat(AT_FDCWD, "./7/file2", [pid 5190] chdir("./file2" [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./7/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5190] <... chdir resumed>) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5057] <... openat resumed>) = 4 [pid 5057] newfstatat(4, "", [pid 5190] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./7/file2" [pid 5190] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... rmdir resumed>) = 0 [pid 5190] <... futex resumed>) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5189] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] getdents64(3, [pid 5190] rename("./file2", "./file1" [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./7") = 0 [pid 5057] mkdir("./8", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5189] <... futex resumed>) = 0 [ 54.767087][ T5190] ERROR: (device loop5): diWrite: ixpxd invalid [ 54.767087][ T5190] [pid 5189] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... write resumed>) = 16777216 [pid 5192] <... write resumed>) = 16777216 [pid 5189] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5189] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5198 [pid 5192] munmap(0x7f919cc00000, 138412032./strace-static-x86_64: Process 5198 attached [pid 5194] munmap(0x7f919cc00000, 138412032 [pid 5189] <... futex resumed>) = 0 [pid 5189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5198] set_robust_list(0x5555565206a0, 24 [pid 5189] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5198] <... set_robust_list resumed>) = 0 [pid 5198] chdir("./8" [pid 5189] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5198] <... chdir resumed>) = 0 [pid 5189] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5198] <... prctl resumed>) = 0 [pid 5198] setpgid(0, 0) = 0 [pid 5189] <... clone3 resumed> => {parent_tid=[5199]}, 88) = 5199 ./strace-static-x86_64: Process 5199 attached [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5190] <... rename resumed>) = -1 EIO (Input/output error) [pid 5189] rt_sigprocmask(SIG_SETMASK, [], [pid 5199] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5198] <... openat resumed>) = 3 [pid 5192] <... munmap resumed>) = 0 [pid 5189] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5199] set_robust_list(0x7f91a50869a0, 24 [pid 5190] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5192] ioctl(4, LOOP_SET_FD, 3 [pid 5199] <... set_robust_list resumed>) = 0 [pid 5198] write(3, "1000", 4 [pid 5194] <... munmap resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5189] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] rt_sigprocmask(SIG_SETMASK, [], [pid 5198] <... write resumed>) = 4 [pid 5199] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5199] mkdir(".", 0777 [pid 5198] close(3 [pid 5190] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] <... futex resumed>) = 0 [pid 5198] <... close resumed>) = 0 [pid 5189] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5199] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5198] symlink("/dev/binderfs", "./binderfs" [pid 5199] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5198] <... symlink resumed>) = 0 [pid 5194] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5198] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... openat resumed>) = 4 [pid 5198] <... futex resumed>) = 0 [pid 5194] ioctl(4, LOOP_SET_FD, 3 [pid 5199] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 54.838701][ T5190] ERROR: (device loop5): remounting filesystem as read-only [ 54.851178][ T5190] ERROR: (device loop5): txAbort: [ 54.851178][ T5190] [ 54.876994][ T5192] loop4: detected capacity change from 0 to 32768 [pid 5198] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5192] <... ioctl resumed>) = 0 [pid 5199] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5194] <... ioctl resumed>) = 0 [pid 5199] <... futex resumed>) = 1 [pid 5198] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5194] close(3 [pid 5189] <... futex resumed>) = 0 [pid 5199] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5194] <... close resumed>) = 0 [pid 5189] exit_group(0 [pid 5199] <... futex resumed>) = ? [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5194] close(4 [pid 5192] close(3 [pid 5190] <... futex resumed>) = ? [pid 5189] <... exit_group resumed>) = ? [pid 5199] +++ exited with 0 +++ [pid 5198] <... mmap resumed>) = 0x7f91a5087000 [pid 5194] <... close resumed>) = 0 [pid 5192] <... close resumed>) = 0 [pid 5190] +++ exited with 0 +++ [pid 5198] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5194] mkdir("./file2", 0777 [pid 5192] close(4 [pid 5198] <... mprotect resumed>) = 0 [pid 5192] <... close resumed>) = 0 [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5194] <... mkdir resumed>) = 0 [pid 5192] mkdir("./file2", 0777 [pid 5189] +++ exited with 0 +++ [pid 5198] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5194] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5200 attached [pid 5192] <... mkdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5189, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5200] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5198] <... clone3 resumed> => {parent_tid=[5200]}, 88) = 5200 [pid 5192] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5200] <... rseq resumed>) = 0 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... restart_syscall resumed>) = 0 [pid 5200] set_robust_list(0x7f91a50a79a0, 24 [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5198] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... mount resumed>) = 0 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5192] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5200] <... set_robust_list resumed>) = 0 [pid 5192] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5192] chdir("./file2" [pid 5063] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5200] rt_sigprocmask(SIG_SETMASK, [], [pid 5192] <... chdir resumed>) = 0 [pid 5200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5192] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5192] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5192] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] memfd_create("syzkaller", 0 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 54.892792][ T5194] loop3: detected capacity change from 0 to 32768 [pid 5191] <... futex resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5200] <... memfd_create resumed>) = 3 [pid 5192] rename("./file2", "./file1" [pid 5191] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5200] <... mmap resumed>) = 0x7f919cc00000 [pid 5194] <... mount resumed>) = 0 [pid 5063] getdents64(3, [pid 5194] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5194] <... openat resumed>) = 3 [pid 5063] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] close(3 [pid 5194] chdir("./file2" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... close resumed>) = 0 [pid 5194] <... chdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5194] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5194] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] unlink("./7/binderfs" [pid 5194] <... futex resumed>) = 1 [pid 5194] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] <... unlink resumed>) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5201 [pid 5193] <... futex resumed>) = 0 [pid 5063] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = 0 [pid 5193] <... futex resumed>) = 1 [pid 5194] rename("./file2", "./file1" [ 54.934226][ T5192] ERROR: (device loop4): diWrite: ixpxd invalid [ 54.934226][ T5192] [ 54.955729][ T5192] ERROR: (device loop4): remounting filesystem as read-only [ 54.975445][ T5192] ERROR: (device loop4): txAbort: [ 54.975445][ T5192] [pid 5193] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5201 attached [pid 5201] set_robust_list(0x5555565206a0, 24) = 0 [pid 5201] chdir("./8") = 0 [pid 5201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5201] setpgid(0, 0) = 0 [pid 5201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5201] write(3, "1000", 4) = 4 [pid 5201] close(3) = 0 [pid 5201] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5191] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5191] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5191] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5202]}, 88) = 5202 [pid 5191] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5191] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5202 attached [pid 5191] <... futex resumed>) = 0 [pid 5063] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./7/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5201] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5202] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5201] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5202] <... rseq resumed>) = 0 [pid 5201] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] close(4 [pid 5202] set_robust_list(0x7f91a50869a0, 24 [pid 5201] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 5202] <... set_robust_list resumed>) = 0 [pid 5201] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] rmdir("./7/file2" [pid 5202] rt_sigprocmask(SIG_SETMASK, [], [pid 5201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] getdents64(3, [pid 5202] mkdir(".", 0777 [pid 5201] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5202] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5201] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] close(3 [pid 5201] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... close resumed>) = 0 [pid 5201] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] rmdir("./7" [pid 5201] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] <... rmdir resumed>) = 0 [pid 5192] <... rename resumed>) = -1 EIO (Input/output error) [pid 5201] <... clone3 resumed> => {parent_tid=[5203]}, 88) = 5203 [pid 5192] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] mkdir("./8", 0777 [pid 5201] rt_sigprocmask(SIG_SETMASK, [], [pid 5192] <... futex resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5192] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5201] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 3 [pid 5201] <... futex resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5201] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5202] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, ""./strace-static-x86_64: Process 5203 attached [pid 5203] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5203] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5203] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5203] memfd_create("syzkaller", 0 [pid 5202] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5203] <... memfd_create resumed>) = 3 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5202] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... mmap resumed>) = 0x7f919cc00000 [pid 5202] <... futex resumed>) = 1 [pid 5202] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] <... futex resumed>) = 0 [pid 5191] exit_group(0 [pid 5192] <... futex resumed>) = ? [pid 5191] <... exit_group resumed>) = ? [pid 5192] +++ exited with 0 +++ [pid 5202] <... futex resumed>) = ? [pid 5202] +++ exited with 0 +++ [pid 5191] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5193] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5193] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5193] <... mmap resumed>) = 0x7f91a5066000 [pid 5060] <... openat resumed>) = 3 [pid 5193] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] newfstatat(3, "", [pid 5193] <... mprotect resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5193] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] getdents64(3, [pid 5193] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5060] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5204 attached [ 54.986387][ T5194] ERROR: (device loop3): diWrite: ixpxd invalid [ 54.986387][ T5194] [ 55.015301][ T5194] ERROR: (device loop3): remounting filesystem as read-only [pid 5193] <... clone3 resumed> => {parent_tid=[5204]}, 88) = 5204 [pid 5060] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5204] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5193] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5204] <... rseq resumed>) = 0 [pid 5193] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5193] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5204] set_robust_list(0x7f91a50869a0, 24 [pid 5060] unlink("./7/binderfs" [pid 5204] <... set_robust_list resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5204] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5204] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5204] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5204] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5204] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5194] <... rename resumed>) = -1 EIO (Input/output error) [pid 5194] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] exit_group(0) = ? [pid 5204] <... futex resumed>) = ? [pid 5204] +++ exited with 0 +++ [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3 [pid 5194] <... futex resumed>) = ? [pid 5057] <... close resumed>) = 0 [ 55.041278][ T5194] ERROR: (device loop3): txAbort: [ 55.041278][ T5194] [ 55.071933][ T5194] ERROR: (device loop3): remounting filesystem as read-only [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5194] +++ exited with 0 +++ [pid 5193] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- ./strace-static-x86_64: Process 5205 attached [pid 5205] set_robust_list(0x5555565206a0, 24) = 0 [pid 5205] chdir("./8" [pid 5059] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... chdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5205] <... prctl resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5205] setpgid(0, 0 [pid 5059] newfstatat(3, "", [pid 5205] <... setpgid resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] getdents64(3, [pid 5205] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5205] write(3, "1000", 4 [pid 5059] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5205 [pid 5205] <... write resumed>) = 4 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] close(3 [pid 5059] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5205] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./7/binderfs") = 0 [pid 5205] symlink("/dev/binderfs", "./binderfs" [pid 5059] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... symlink resumed>) = 0 [pid 5205] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5205] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5205] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5205] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5206]}, 88) = 5206 [pid 5205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5206 attached [pid 5205] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5205] <... futex resumed>) = 0 [pid 5206] <... rseq resumed>) = 0 [pid 5206] set_robust_list(0x7f91a50a79a0, 24 [pid 5205] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5206] <... set_robust_list resumed>) = 0 [pid 5206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5206] memfd_create("syzkaller", 0 [pid 5059] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... memfd_create resumed>) = 3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./7/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] newfstatat(4, "", [pid 5206] <... mmap resumed>) = 0x7f919cc00000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./7/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./7") = 0 [pid 5059] mkdir("./8", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] <... ioctl resumed>) = 0 [pid 5203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5207 attached [pid 5207] set_robust_list(0x5555565206a0, 24 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5207 [pid 5207] <... set_robust_list resumed>) = 0 [pid 5207] chdir("./8") = 0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5207] setpgid(0, 0) = 0 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5207] write(3, "1000", 4) = 4 [pid 5207] close(3) = 0 [pid 5207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5207] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5207] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5207] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5207] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5207] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5208 attached [pid 5208] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5208] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5208] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5208] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] <... clone3 resumed> => {parent_tid=[5208]}, 88) = 5208 [pid 5207] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5207] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5207] <... futex resumed>) = 1 [pid 5208] memfd_create("syzkaller", 0 [pid 5207] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5208] <... memfd_create resumed>) = 3 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./7/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./7/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./7/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5059] <... ioctl resumed>) = 0 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./7") = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5209 ./strace-static-x86_64: Process 5209 attached [pid 5209] set_robust_list(0x5555565206a0, 24 [pid 5060] mkdir("./8", 0777 [pid 5209] <... set_robust_list resumed>) = 0 [pid 5209] chdir("./8" [pid 5060] <... mkdir resumed>) = 0 [pid 5209] <... chdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5209] setpgid(0, 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5209] <... setpgid resumed>) = 0 [pid 5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5209] write(3, "1000", 4) = 4 [pid 5209] close(3) = 0 [pid 5209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5209] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5209] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5209] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5209] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5209] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5209] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5210 attached [pid 5210] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5209] <... clone3 resumed> => {parent_tid=[5210]}, 88) = 5210 [pid 5210] <... rseq resumed>) = 0 [pid 5209] rt_sigprocmask(SIG_SETMASK, [], [pid 5210] set_robust_list(0x7f91a50a79a0, 24 [pid 5209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5210] <... set_robust_list resumed>) = 0 [pid 5209] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] rt_sigprocmask(SIG_SETMASK, [], [pid 5209] <... futex resumed>) = 0 [pid 5210] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5209] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5210] memfd_create("syzkaller", 0) = 3 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5200] <... write resumed>) = 16777216 [pid 5200] munmap(0x7f919cc00000, 138412032 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5200] <... munmap resumed>) = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5200] close(3) = 0 [pid 5200] close(4) = 0 [pid 5200] mkdir("./file2", 0777) = 0 [pid 5200] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5203] <... write resumed>) = 16777216 [pid 5200] <... mount resumed>) = 0 [pid 5200] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 55.543672][ T5200] loop0: detected capacity change from 0 to 32768 [pid 5200] chdir("./file2") = 0 [pid 5200] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5203] munmap(0x7f919cc00000, 138412032 [pid 5200] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5200] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5200] rename("./file2", "./file1" [pid 5198] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... munmap resumed>) = 0 [pid 5198] <... futex resumed>) = 0 [pid 5198] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 55.589399][ T5200] ERROR: (device loop0): diWrite: ixpxd invalid [ 55.589399][ T5200] [pid 5203] ioctl(4, LOOP_SET_FD, 3 [pid 5198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5198] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5198] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5198] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5203] <... ioctl resumed>) = 0 [pid 5203] close(3) = 0 [pid 5203] close(4) = 0 [pid 5198] <... clone3 resumed> => {parent_tid=[5211]}, 88) = 5211 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5198] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5211 attached [pid 5203] mkdir("./file2", 0777 [pid 5211] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5203] <... mkdir resumed>) = 0 [pid 5200] <... rename resumed>) = -1 EIO (Input/output error) [pid 5211] <... rseq resumed>) = 0 [pid 5211] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5211] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5203] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5211] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5211] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5200] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = 0 [pid 5211] <... futex resumed>) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5211] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5200] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] exit_group(0 [pid 5211] <... futex resumed>) = ? [pid 5200] <... futex resumed>) = ? [pid 5198] <... exit_group resumed>) = ? [pid 5211] +++ exited with 0 +++ [pid 5200] +++ exited with 0 +++ [pid 5198] +++ exited with 0 +++ [pid 5203] <... mount resumed>) = 0 [pid 5203] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5203] <... openat resumed>) = 3 [ 55.631698][ T5200] ERROR: (device loop0): remounting filesystem as read-only [ 55.639433][ T5203] loop2: detected capacity change from 0 to 32768 [ 55.655250][ T5200] ERROR: (device loop0): txAbort: [ 55.655250][ T5200] [pid 5056] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5203] chdir("./file2") = 0 [pid 5203] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5203] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5203] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5201] <... futex resumed>) = 0 [pid 5056] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5203] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5201] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... openat resumed>) = 3 [pid 5203] <... futex resumed>) = 0 [pid 5201] <... futex resumed>) = 1 [pid 5056] newfstatat(3, "", [pid 5203] rename("./file2", "./file1" [pid 5201] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./8/binderfs") = 0 [pid 5056] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5201] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5201] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5201] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5201] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5212]}, 88) = 5212 [pid 5201] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5201] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5212 attached ) = 0 [pid 5212] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5201] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5212] <... rseq resumed>) = 0 [pid 5212] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5212] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5212] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5212] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5212] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5201] <... futex resumed>) = 0 [pid 5212] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] <... umount2 resumed>) = 0 [pid 5056] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./8/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... ioctl resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 55.713546][ T5203] ERROR: (device loop2): diWrite: ixpxd invalid [ 55.713546][ T5203] [ 55.743465][ T5203] ERROR: (device loop2): remounting filesystem as read-only [ 55.750746][ T5203] ERROR: (device loop2): txAbort: [ 55.750746][ T5203] [pid 5206] <... write resumed>) = 16777216 [pid 5203] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] close(3 [pid 5056] openat(AT_FDCWD, "./8/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5203] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] exit_group(0 [pid 5203] <... futex resumed>) = 0 [pid 5056] <... openat resumed>) = 4 [pid 5203] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... close resumed>) = 0 [pid 5056] newfstatat(4, "", [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5201] <... exit_group resumed>) = ? [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5203] <... futex resumed>) = ? [pid 5212] <... futex resumed>) = ? [pid 5212] +++ exited with 0 +++ [pid 5203] +++ exited with 0 +++ [pid 5201] +++ exited with 0 +++ [pid 5056] getdents64(4, [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5213 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5201, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, [pid 5058] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] munmap(0x7f919cc00000, 138412032 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5213 attached [pid 5213] set_robust_list(0x5555565206a0, 24) = 0 [pid 5213] chdir("./8") = 0 [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5213] setpgid(0, 0) = 0 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5213] write(3, "1000", 4) = 4 [pid 5213] close(3) = 0 [pid 5213] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5213] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5213] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5213] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5058] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] close(4 [pid 5058] <... openat resumed>) = 3 [pid 5056] <... close resumed>) = 0 [pid 5058] newfstatat(3, "", [pid 5056] rmdir("./8/file2" [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5213] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] getdents64(3, [pid 5056] <... rmdir resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] getdents64(3, [pid 5058] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5056] close(3 [pid 5213] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] <... close resumed>) = 0 [pid 5058] unlink("./8/binderfs" [pid 5056] rmdir("./8" [pid 5213] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5058] <... unlink resumed>) = 0 [pid 5213] <... clone3 resumed> => {parent_tid=[5214]}, 88) = 5214 [pid 5056] <... rmdir resumed>) = 0 [pid 5213] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5213] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5214 attached ) = 0 [pid 5214] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5213] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5214] <... rseq resumed>) = 0 [pid 5214] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5214] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5214] memfd_create("syzkaller", 0) = 3 [pid 5056] mkdir("./9", 0777 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5058] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5214] <... mmap resumed>) = 0x7f919cc00000 [pid 5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] <... openat resumed>) = 3 [pid 5206] <... munmap resumed>) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5058] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./8/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./8/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5206] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5058] <... openat resumed>) = 4 [pid 5206] <... openat resumed>) = 4 [ 55.791175][ T5203] ERROR: (device loop2): remounting filesystem as read-only [pid 5058] newfstatat(4, "", [pid 5206] ioctl(4, LOOP_SET_FD, 3 [pid 5208] <... write resumed>) = 16777216 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5208] munmap(0x7f919cc00000, 138412032 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, [pid 5206] <... ioctl resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5206] close(3 [pid 5058] close(4 [pid 5206] <... close resumed>) = 0 [pid 5206] close(4 [pid 5058] <... close resumed>) = 0 [pid 5206] <... close resumed>) = 0 [pid 5058] rmdir("./8/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5206] mkdir("./file2", 0777 [pid 5058] close(3 [pid 5206] <... mkdir resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5206] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5058] rmdir("./8") = 0 [pid 5058] mkdir("./9", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5206] <... mount resumed>) = 0 [pid 5206] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5206] chdir("./file2") = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5208] <... munmap resumed>) = 0 [pid 5206] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5206] <... futex resumed>) = 1 [pid 5206] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] <... openat resumed>) = 4 [pid 5205] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 55.861825][ T5206] loop1: detected capacity change from 0 to 32768 [pid 5208] ioctl(4, LOOP_SET_FD, 3 [pid 5206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] <... ioctl resumed>) = 0 [pid 5206] rename("./file2", "./file1" [pid 5208] close(3) = 0 [pid 5208] close(4) = 0 [pid 5208] mkdir("./file2", 0777) = 0 [pid 5208] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5205] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5205] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 55.915370][ T5208] loop5: detected capacity change from 0 to 32768 [ 55.942693][ T5206] ERROR: (device loop1): diWrite: ixpxd invalid [ 55.942693][ T5206] [pid 5205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5205] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5205] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5215]}, 88) = 5215 [pid 5205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5205] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5215 attached ) = 0 [pid 5215] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5205] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5215] <... rseq resumed>) = 0 [pid 5215] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5215] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5215] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5215] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5215] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = 0 [pid 5215] <... futex resumed>) = 1 [pid 5215] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] <... mount resumed>) = 0 [pid 5208] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 55.962842][ T5206] ERROR: (device loop1): remounting filesystem as read-only [ 55.976679][ T5206] ERROR: (device loop1): txAbort: [ 55.976679][ T5206] [pid 5206] <... rename resumed>) = -1 EIO (Input/output error) [pid 5208] chdir("./file2") = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5208] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5206] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5205] exit_group(0 [pid 5208] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5215] <... futex resumed>) = ? [pid 5208] rename("./file2", "./file1" [pid 5207] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] <... exit_group resumed>) = ? [pid 5215] +++ exited with 0 +++ [ 56.021380][ T5206] ERROR: (device loop1): remounting filesystem as read-only [pid 5206] <... futex resumed>) = ? [pid 5206] +++ exited with 0 +++ [pid 5205] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5205, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5057] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./8/binderfs") = 0 [pid 5057] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5057] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./8/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./8/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5208] <... rename resumed>) = -1 EIO (Input/output error) [pid 5208] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... openat resumed>) = 4 [pid 5208] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5057] newfstatat(4, "", [pid 5208] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5208] mkdir(".", 0777 [pid 5207] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] getdents64(4, [pid 5208] <... mkdir resumed>) = -1 EEXIST (File exists) [ 56.062846][ T5208] ERROR: (device loop5): diWrite: ixpxd invalid [ 56.062846][ T5208] [ 56.071420][ T5208] ERROR: (device loop5): remounting filesystem as read-only [ 56.078693][ T5208] ERROR: (device loop5): txAbort: [ 56.078693][ T5208] [pid 5208] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, [pid 5208] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5208] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] close(4 [pid 5208] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5207] exit_group(0) = ? [pid 5057] rmdir("./8/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./8") = 0 [pid 5057] mkdir("./9", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5208] +++ exited with 0 +++ [pid 5207] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./8/binderfs") = 0 [pid 5063] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... ioctl resumed>) = 0 [pid 5210] <... write resumed>) = 16777216 [pid 5210] munmap(0x7f919cc00000, 138412032) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5210] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./8/file2", ./strace-static-x86_64: Process 5216 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5216] set_robust_list(0x5555565206a0, 24 [pid 5063] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... ioctl resumed>) = 0 [pid 5216] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5216] chdir("./9" [pid 5063] openat(AT_FDCWD, "./8/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5216] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5216] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] newfstatat(4, "", [pid 5216] <... prctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5216] setpgid(0, 0 [pid 5063] getdents64(4, [pid 5216] <... setpgid resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(4, [pid 5216] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5216] write(3, "1000", 4 [pid 5063] close(4 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5216 [pid 5216] <... write resumed>) = 4 [pid 5210] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5216] close(3 [pid 5210] ioctl(4, LOOP_SET_FD, 3 [pid 5063] rmdir("./8/file2" [pid 5216] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5216] symlink("/dev/binderfs", "./binderfs" [pid 5063] getdents64(3, [pid 5216] <... symlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3 [pid 5216] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3 [pid 5058] <... close resumed>) = 0 [pid 5216] <... futex resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5216] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] rmdir("./8" [pid 5216] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5216] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5217 [pid 5216] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] mkdir("./9", 0777 [pid 5216] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 5217 attached [pid 5216] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5217] set_robust_list(0x5555565206a0, 24) = 0 [pid 5217] chdir("./9" [pid 5216] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5216] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5218]}, 88) = 5218 [pid 5216] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5216] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5218 attached [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5218] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5063] <... openat resumed>) = 3 [pid 5218] <... rseq resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5218] set_robust_list(0x7f91a50a79a0, 24 [pid 5217] <... chdir resumed>) = 0 [pid 5210] <... ioctl resumed>) = 0 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5210] close(3 [pid 5217] <... prctl resumed>) = 0 [pid 5210] <... close resumed>) = 0 [pid 5217] setpgid(0, 0 [pid 5210] close(4 [pid 5217] <... setpgid resumed>) = 0 [pid 5218] <... set_robust_list resumed>) = 0 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5218] memfd_create("syzkaller", 0) = 3 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5210] <... close resumed>) = 0 [pid 5217] <... openat resumed>) = 3 [pid 5210] mkdir("./file2", 0777 [pid 5217] write(3, "1000", 4 [pid 5210] <... mkdir resumed>) = 0 [pid 5217] <... write resumed>) = 4 [pid 5217] close(3 [pid 5210] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5217] <... close resumed>) = 0 [pid 5217] symlink("/dev/binderfs", "./binderfs" [pid 5210] <... mount resumed>) = 0 [pid 5217] <... symlink resumed>) = 0 [pid 5210] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5217] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... openat resumed>) = 3 [pid 5217] <... futex resumed>) = 0 [pid 5210] chdir("./file2" [pid 5217] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5210] <... chdir resumed>) = 0 [pid 5217] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5210] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5217] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5210] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5210] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] <... mmap resumed>) = 0x7f91a5087000 [pid 5210] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = 0 [pid 5217] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5210] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] <... mprotect resumed>) = 0 [pid 5210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] <... futex resumed>) = 0 [pid 5217] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5210] rename("./file2", "./file1" [ 56.211032][ T5210] loop3: detected capacity change from 0 to 32768 [pid 5209] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5217] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5219]}, 88) = 5219 [pid 5217] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5219 attached [pid 5219] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5219] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5219] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = 0 [pid 5217] <... futex resumed>) = 1 [pid 5209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5219] memfd_create("syzkaller", 0) = 3 [pid 5217] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5209] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5219] <... mmap resumed>) = 0x7f919cc00000 [pid 5209] <... mmap resumed>) = 0x7f91a5066000 [pid 5209] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5209] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5210] <... rename resumed>) = -1 EIO (Input/output error) [pid 5209] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5210] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5220 attached ) = 0 [ 56.282322][ T5210] ERROR: (device loop3): diWrite: ixpxd invalid [ 56.282322][ T5210] [ 56.311092][ T5210] ERROR: (device loop3): remounting filesystem as read-only [ 56.318384][ T5210] ERROR: (device loop3): txAbort: [ 56.318384][ T5210] [pid 5220] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5210] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] <... clone3 resumed> => {parent_tid=[5220]}, 88) = 5220 [pid 5220] <... rseq resumed>) = 0 [pid 5209] rt_sigprocmask(SIG_SETMASK, [], [pid 5220] set_robust_list(0x7f91a50869a0, 24 [pid 5209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5220] <... set_robust_list resumed>) = 0 [pid 5220] rt_sigprocmask(SIG_SETMASK, [], [pid 5209] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5209] <... futex resumed>) = 0 [pid 5220] mkdir(".", 0777 [pid 5209] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5220] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5220] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5214] <... write resumed>) = 16777216 [pid 5214] munmap(0x7f919cc00000, 138412032 [pid 5220] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5220] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5220] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5209] <... futex resumed>) = 0 [pid 5209] exit_group(0 [pid 5220] <... futex resumed>) = ? [pid 5210] <... futex resumed>) = ? [pid 5209] <... exit_group resumed>) = ? [pid 5220] +++ exited with 0 +++ [pid 5210] +++ exited with 0 +++ [pid 5209] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5209, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5059] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./8/binderfs") = 0 [pid 5059] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] <... munmap resumed>) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5057] close(3 [pid 5214] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5057] <... close resumed>) = 0 [pid 5214] close(3) = 0 [pid 5214] close(4) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5214] mkdir("./file2", 0777) = 0 [pid 5214] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5221 attached [pid 5214] <... mount resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5221 [pid 5214] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./8/file2", [pid 5221] set_robust_list(0x5555565206a0, 24 [pid 5214] <... openat resumed>) = 3 [pid 5214] chdir("./file2" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5221] <... set_robust_list resumed>) = 0 [pid 5059] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] chdir("./9") = 0 [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] setpgid(0, 0) = 0 [pid 5214] <... chdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./8/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5214] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5221] <... openat resumed>) = 3 [pid 5214] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... openat resumed>) = 4 [pid 5221] write(3, "1000", 4 [pid 5214] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... write resumed>) = 4 [pid 5214] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5221] close(3 [pid 5214] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5221] <... close resumed>) = 0 [pid 5214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] symlink("/dev/binderfs", "./binderfs" [pid 5214] rename("./file2", "./file1" [pid 5213] <... futex resumed>) = 0 [pid 5221] <... symlink resumed>) = 0 [pid 5213] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5221] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5221] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5221] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5221] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5222]}, 88) = 5222 [pid 5221] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5222 attached NULL, 8) = 0 [pid 5222] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5221] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5221] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5222] <... rseq resumed>) = 0 [pid 5222] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5222] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5222] memfd_create("syzkaller", 0 [pid 5059] newfstatat(4, "", [pid 5222] <... memfd_create resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [ 56.421590][ T5214] loop4: detected capacity change from 0 to 32768 [ 56.460921][ T5214] ERROR: (device loop4): diWrite: ixpxd invalid [ 56.460921][ T5214] [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5213] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5059] <... close resumed>) = 0 [pid 5213] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5213] <... futex resumed>) = 0 [pid 5059] rmdir("./8/file2" [pid 5213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5213] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... rmdir resumed>) = 0 [pid 5213] <... mprotect resumed>) = 0 [pid 5213] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5213] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5223 attached => {parent_tid=[5223]}, 88) = 5223 [pid 5059] getdents64(3, [pid 5213] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] <... rename resumed>) = -1 EIO (Input/output error) [pid 5213] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5214] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] rmdir("./8" [pid 5214] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 0 [pid 5213] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5223] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5214] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5223] <... rseq resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5223] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5223] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] mkdir("./9", 0777 [pid 5223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5223] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5059] <... mkdir resumed>) = 0 [pid 5223] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5223] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... openat resumed>) = 3 [pid 5223] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5223] <... futex resumed>) = 1 [pid 5213] <... futex resumed>) = 0 [pid 5223] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] exit_group(0 [pid 5223] <... futex resumed>) = ? [pid 5214] <... futex resumed>) = ? [pid 5213] <... exit_group resumed>) = ? [pid 5223] +++ exited with 0 +++ [pid 5214] +++ exited with 0 +++ [pid 5213] +++ exited with 0 +++ [pid 5063] close(3 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=15 /* 0.15 s */} --- [ 56.491624][ T5214] ERROR: (device loop4): remounting filesystem as read-only [ 56.498912][ T5214] ERROR: (device loop4): txAbort: [ 56.498912][ T5214] [pid 5063] <... close resumed>) = 0 [pid 5060] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5224 attached [pid 5060] getdents64(3, [pid 5224] set_robust_list(0x5555565206a0, 24 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5224] <... set_robust_list resumed>) = 0 [pid 5060] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5224] chdir("./9" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5224] <... chdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5224] <... prctl resumed>) = 0 [pid 5060] unlink("./8/binderfs" [pid 5224] setpgid(0, 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5224 [pid 5060] <... unlink resumed>) = 0 [pid 5224] <... setpgid resumed>) = 0 [pid 5060] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5224] write(3, "1000", 4) = 4 [pid 5224] close(3) = 0 [pid 5224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5224] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5224] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5224] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5224] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5225]}, 88) = 5225 [pid 5224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5224] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5225 attached [pid 5225] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5225] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5225] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5225] memfd_create("syzkaller", 0) = 3 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5218] <... write resumed>) = 16777216 [pid 5218] munmap(0x7f919cc00000, 138412032) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5218] ioctl(4, LOOP_SET_FD, 3 [pid 5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5219] <... write resumed>) = 16777216 [pid 5218] <... ioctl resumed>) = 0 [pid 5218] close(3) = 0 [pid 5218] close(4) = 0 [pid 5218] mkdir("./file2", 0777) = 0 [pid 5218] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./8/file2", [pid 5219] munmap(0x7f919cc00000, 138412032 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./8/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./8/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] <... mount resumed>) = 0 [pid 5218] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5218] chdir("./file2") = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5218] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5216] <... futex resumed>) = 0 [pid 5218] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5216] <... futex resumed>) = 0 [ 56.811799][ T5218] loop0: detected capacity change from 0 to 32768 [pid 5060] getdents64(4, [pid 5218] rename("./file2", "./file1" [pid 5216] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./8/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./8") = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5060] mkdir("./9", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5219] <... munmap resumed>) = 0 [pid 5059] close(3 [pid 5219] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 5219] <... openat resumed>) = 4 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 56.862187][ T5218] ERROR: (device loop0): diWrite: ixpxd invalid [ 56.862187][ T5218] [ 56.882951][ T5218] ERROR: (device loop0): remounting filesystem as read-only [ 56.898733][ T5218] ERROR: (device loop0): txAbort: [ 56.898733][ T5218] [pid 5219] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5226 attached [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5226 [pid 5226] set_robust_list(0x5555565206a0, 24) = 0 [pid 5226] chdir("./9") = 0 [pid 5219] <... ioctl resumed>) = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5219] close(3 [pid 5226] <... prctl resumed>) = 0 [pid 5219] <... close resumed>) = 0 [pid 5226] setpgid(0, 0 [pid 5219] close(4 [pid 5226] <... setpgid resumed>) = 0 [pid 5219] <... close resumed>) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5219] mkdir("./file2", 0777 [pid 5226] <... openat resumed>) = 3 [pid 5216] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5226] write(3, "1000", 4 [pid 5216] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] <... write resumed>) = 4 [pid 5219] <... mkdir resumed>) = 0 [pid 5216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5226] close(3 [pid 5219] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5216] <... mmap resumed>) = 0x7f91a5066000 [pid 5226] <... close resumed>) = 0 [pid 5216] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5216] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5226] symlink("/dev/binderfs", "./binderfs" [pid 5216] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5216] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5226] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5227 attached [pid 5226] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] <... clone3 resumed> => {parent_tid=[5227]}, 88) = 5227 [pid 5227] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5216] rt_sigprocmask(SIG_SETMASK, [], [pid 5227] <... rseq resumed>) = 0 [pid 5216] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5227] set_robust_list(0x7f91a50869a0, 24 [pid 5216] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... set_robust_list resumed>) = 0 [pid 5216] <... futex resumed>) = 0 [pid 5227] rt_sigprocmask(SIG_SETMASK, [], [pid 5216] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5227] mkdir(".", 0777 [pid 5218] <... rename resumed>) = -1 EIO (Input/output error) [pid 5227] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5218] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5227] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5226] <... futex resumed>) = 0 [pid 5227] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5227] <... futex resumed>) = 1 [pid 5226] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5216] <... futex resumed>) = 0 [pid 5227] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5216] exit_group(0 [pid 5227] <... futex resumed>) = ? [pid 5226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] <... futex resumed>) = ? [pid 5216] <... exit_group resumed>) = ? [pid 5227] +++ exited with 0 +++ [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5219] <... mount resumed>) = 0 [pid 5218] +++ exited with 0 +++ [pid 5216] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5216, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=16 /* 0.16 s */} --- [ 56.908090][ T5219] loop2: detected capacity change from 0 to 32768 [pid 5056] restart_syscall(<... resuming interrupted clone ...> [pid 5226] <... mmap resumed>) = 0x7f91a5087000 [pid 5226] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5219] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5056] <... restart_syscall resumed>) = 0 [pid 5226] <... mprotect resumed>) = 0 [pid 5222] <... write resumed>) = 16777216 [pid 5056] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5219] <... openat resumed>) = 3 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5219] chdir("./file2" [pid 5056] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5226] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5219] <... chdir resumed>) = 0 [pid 5056] unlink("./9/binderfs" [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5219] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] <... unlink resumed>) = 0 [pid 5056] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] <... clone3 resumed> => {parent_tid=[5228]}, 88) = 5228 [pid 5219] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5226] rt_sigprocmask(SIG_SETMASK, [], [pid 5219] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5228 attached [pid 5226] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5226] <... futex resumed>) = 0 [pid 5219] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5228] <... rseq resumed>) = 0 [pid 5226] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5219] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] set_robust_list(0x7f91a50a79a0, 24 [pid 5217] <... futex resumed>) = 0 [pid 5228] <... set_robust_list resumed>) = 0 [pid 5222] munmap(0x7f919cc00000, 138412032 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... umount2 resumed>) = 0 [pid 5228] rt_sigprocmask(SIG_SETMASK, [], [pid 5219] rename("./file2", "./file1" [pid 5056] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5228] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] memfd_create("syzkaller", 0 [pid 5056] newfstatat(AT_FDCWD, "./9/file2", [pid 5228] <... memfd_create resumed>) = 3 [pid 5222] <... munmap resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5056] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./9/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./9/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./9") = 0 [pid 5056] mkdir("./10", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5222] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5222] ioctl(4, LOOP_SET_FD, 3 [pid 5217] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5217] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... ioctl resumed>) = 0 [pid 5222] close(3) = 0 [pid 5217] <... futex resumed>) = 0 [pid 5222] close(4 [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5217] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5222] <... close resumed>) = 0 [pid 5222] mkdir("./file2", 0777 [pid 5217] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5222] <... mkdir resumed>) = 0 [pid 5217] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5217] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5229 attached [pid 5222] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5217] <... clone3 resumed> => {parent_tid=[5229]}, 88) = 5229 [pid 5229] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5217] rt_sigprocmask(SIG_SETMASK, [], [pid 5229] set_robust_list(0x7f91a50869a0, 24 [pid 5217] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5229] <... set_robust_list resumed>) = 0 [pid 5217] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] rt_sigprocmask(SIG_SETMASK, [], [pid 5217] <... futex resumed>) = 0 [pid 5229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5217] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5229] mkdir(".", 0777) = -1 EEXIST (File exists) [ 56.993375][ T5219] ERROR: (device loop2): diWrite: ixpxd invalid [ 56.993375][ T5219] [ 57.021541][ T5219] ERROR: (device loop2): remounting filesystem as read-only [ 57.023276][ T5222] loop1: detected capacity change from 0 to 32768 [ 57.028866][ T5219] ERROR: (device loop2): txAbort: [ 57.028866][ T5219] [pid 5229] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5229] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] <... mount resumed>) = 0 [pid 5222] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5222] chdir("./file2") = 0 [pid 5229] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5229] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5222] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5221] <... futex resumed>) = 0 [pid 5221] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5221] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] rename("./file2", "./file1" [pid 5219] <... rename resumed>) = -1 EIO (Input/output error) [pid 5219] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5219] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] exit_group(0 [pid 5229] <... futex resumed>) = ? [pid 5219] <... futex resumed>) = ? [pid 5217] <... exit_group resumed>) = ? [pid 5229] +++ exited with 0 +++ [pid 5219] +++ exited with 0 +++ [pid 5217] +++ exited with 0 +++ [ 57.084951][ T5219] ERROR: (device loop2): remounting filesystem as read-only [ 57.102716][ T5222] ERROR: (device loop1): diWrite: ixpxd invalid [ 57.102716][ T5222] [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5058] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5225] <... write resumed>) = 16777216 [pid 5058] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", [pid 5225] munmap(0x7f919cc00000, 138412032 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./9/binderfs") = 0 [pid 5221] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5225] <... munmap resumed>) = 0 [pid 5221] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5221] <... futex resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5221] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5221] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5230]}, 88) = 5230 [pid 5221] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5221] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5221] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5230 attached [pid 5230] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5230] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5225] <... openat resumed>) = 4 [pid 5230] rt_sigprocmask(SIG_SETMASK, [], [pid 5225] ioctl(4, LOOP_SET_FD, 3 [pid 5060] close(3 [pid 5230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5222] <... rename resumed>) = -1 EIO (Input/output error) [pid 5230] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5230] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5231 attached [pid 5230] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5225] <... ioctl resumed>) = 0 [pid 5222] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5231 [pid 5058] <... umount2 resumed>) = 0 [pid 5230] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] close(3 [pid 5222] <... futex resumed>) = 0 [pid 5058] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] <... futex resumed>) = 1 [pid 5225] <... close resumed>) = 0 [pid 5222] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5221] <... futex resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5231] set_robust_list(0x5555565206a0, 24 [pid 5230] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] close(4 [pid 5221] exit_group(0 [pid 5058] newfstatat(AT_FDCWD, "./9/file2", [pid 5231] <... set_robust_list resumed>) = 0 [pid 5230] <... futex resumed>) = ? [pid 5222] <... futex resumed>) = ? [pid 5221] <... exit_group resumed>) = ? [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5231] chdir("./9" [pid 5230] +++ exited with 0 +++ [pid 5225] <... close resumed>) = 0 [pid 5058] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] <... chdir resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5058] openat(AT_FDCWD, "./9/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5231] <... prctl resumed>) = 0 [pid 5225] mkdir("./file2", 0777 [pid 5222] +++ exited with 0 +++ [pid 5221] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=14 /* 0.14 s */} --- [pid 5058] <... openat resumed>) = 4 [pid 5225] <... mkdir resumed>) = 0 [pid 5058] newfstatat(4, "", [pid 5231] setpgid(0, 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5231] <... setpgid resumed>) = 0 [pid 5058] getdents64(4, [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5225] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5058] getdents64(4, [pid 5057] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] close(4 [pid 5057] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... close resumed>) = 0 [pid 5057] <... openat resumed>) = 3 [pid 5058] rmdir("./9/file2" [pid 5057] newfstatat(3, "", [pid 5058] <... rmdir resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5231] <... openat resumed>) = 3 [ 57.135132][ T5222] ERROR: (device loop1): remounting filesystem as read-only [ 57.166210][ T5222] ERROR: (device loop1): txAbort: [ 57.166210][ T5222] [ 57.174470][ T5225] loop5: detected capacity change from 0 to 32768 [pid 5057] getdents64(3, [pid 5058] getdents64(3, [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5231] write(3, "1000", 4 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] <... write resumed>) = 4 [pid 5225] <... mount resumed>) = 0 [pid 5058] close(3 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5231] close(3 [pid 5225] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] <... close resumed>) = 0 [pid 5057] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5231] <... close resumed>) = 0 [pid 5225] <... openat resumed>) = 3 [pid 5058] rmdir("./9" [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5231] symlink("/dev/binderfs", "./binderfs" [pid 5225] chdir("./file2" [pid 5058] <... rmdir resumed>) = 0 [pid 5057] unlink("./9/binderfs" [pid 5231] <... symlink resumed>) = 0 [pid 5225] <... chdir resumed>) = 0 [pid 5058] mkdir("./10", 0777 [pid 5057] <... unlink resumed>) = 0 [pid 5231] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5058] <... mkdir resumed>) = 0 [pid 5057] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] <... futex resumed>) = 0 [pid 5225] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5231] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5231] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5231] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5225] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5225] <... futex resumed>) = 1 [pid 5225] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5224] <... futex resumed>) = 0 [pid 5224] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... clone3 resumed> => {parent_tid=[5232]}, 88) = 5232 [pid 5225] <... futex resumed>) = 0 [pid 5224] <... futex resumed>) = 1 [pid 5231] rt_sigprocmask(SIG_SETMASK, [], [pid 5224] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5225] rename("./file2", "./file1" [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5232 attached [pid 5231] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5231] <... futex resumed>) = 0 [pid 5232] <... rseq resumed>) = 0 [pid 5231] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5232] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5232] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5232] memfd_create("syzkaller", 0) = 3 [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5225] <... rename resumed>) = -1 EIO (Input/output error) [pid 5225] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5224] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] <... futex resumed>) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5225] mkdir(".", 0777 [pid 5224] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=41000000} [pid 5225] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5225] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3 [pid 5225] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... close resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 57.240613][ T5225] ERROR: (device loop5): diWrite: ixpxd invalid [ 57.240613][ T5225] [ 57.261088][ T5225] ERROR: (device loop5): remounting filesystem as read-only [ 57.269376][ T5225] ERROR: (device loop5): txAbort: [ 57.269376][ T5225] [pid 5225] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5224] exit_group(0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5233 [pid 5224] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5233 attached [pid 5233] set_robust_list(0x5555565206a0, 24) = 0 [pid 5225] +++ exited with 0 +++ [pid 5224] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [pid 5233] chdir("./10" [pid 5063] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5233] <... chdir resumed>) = 0 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0 [pid 5063] getdents64(3, [pid 5233] <... setpgid resumed>) = 0 [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5233] write(3, "1000", 4 [pid 5063] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5233] <... write resumed>) = 4 [pid 5233] close(3) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5233] symlink("/dev/binderfs", "./binderfs" [pid 5063] unlink("./9/binderfs" [pid 5233] <... symlink resumed>) = 0 [pid 5233] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... futex resumed>) = 0 [pid 5233] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] <... umount2 resumed>) = 0 [pid 5233] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5233] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./9/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./9/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5233] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] <... openat resumed>) = 4 [pid 5233] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] newfstatat(4, "", [pid 5233] <... mprotect resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5233] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5233] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] getdents64(4, [pid 5233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5234 attached [pid 5063] close(4 [pid 5234] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5233] <... clone3 resumed> => {parent_tid=[5234]}, 88) = 5234 [pid 5063] <... close resumed>) = 0 [pid 5234] <... rseq resumed>) = 0 [pid 5233] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] rmdir("./9/file2" [pid 5234] set_robust_list(0x7f91a50a79a0, 24 [pid 5233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5234] <... set_robust_list resumed>) = 0 [pid 5233] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 5234] rt_sigprocmask(SIG_SETMASK, [], [pid 5233] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5233] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] close(3) = 0 [pid 5063] rmdir("./9" [pid 5234] memfd_create("syzkaller", 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5234] <... memfd_create resumed>) = 3 [pid 5063] mkdir("./10", 0777 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5235 attached , child_tidptr=0x555556520690) = 5235 [pid 5235] set_robust_list(0x5555565206a0, 24) = 0 [pid 5235] chdir("./10") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5235] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5235] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5235] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5236 attached => {parent_tid=[5236]}, 88) = 5236 [pid 5228] <... write resumed>) = 16777216 [pid 5057] <... umount2 resumed>) = 0 [pid 5236] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5235] rt_sigprocmask(SIG_SETMASK, [], [pid 5236] <... rseq resumed>) = 0 [pid 5057] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] set_robust_list(0x7f91a50a79a0, 24 [pid 5235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5236] <... set_robust_list resumed>) = 0 [pid 5235] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5236] rt_sigprocmask(SIG_SETMASK, [], [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5228] munmap(0x7f919cc00000, 138412032 [pid 5057] newfstatat(AT_FDCWD, "./9/file2", [pid 5236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5236] memfd_create("syzkaller", 0 [pid 5057] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5236] <... memfd_create resumed>) = 3 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5057] openat(AT_FDCWD, "./9/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5236] <... mmap resumed>) = 0x7f919cc00000 [pid 5057] <... openat resumed>) = 4 [pid 5228] <... munmap resumed>) = 0 [pid 5057] newfstatat(4, "", [pid 5228] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, [pid 5228] <... openat resumed>) = 4 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5228] ioctl(4, LOOP_SET_FD, 3 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./9/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./9") = 0 [pid 5228] <... ioctl resumed>) = 0 [pid 5228] close(3 [pid 5057] mkdir("./10", 0777 [pid 5228] <... close resumed>) = 0 [pid 5057] <... mkdir resumed>) = 0 [pid 5228] close(4) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5228] mkdir("./file2", 0777) = 0 [ 57.582115][ T5228] loop3: detected capacity change from 0 to 32768 [pid 5228] mount("/dev/loop3", "./file2", "jfs", 0, "") = 0 [pid 5228] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5228] chdir("./file2") = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5228] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5228] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... futex resumed>) = 0 [pid 5226] <... futex resumed>) = 1 [pid 5228] rename("./file2", "./file1" [pid 5226] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] <... write resumed>) = 16777216 [pid 5232] <... write resumed>) = 16777216 [pid 5226] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5063] <... ioctl resumed>) = 0 [ 57.683826][ T5228] ERROR: (device loop3): diWrite: ixpxd invalid [ 57.683826][ T5228] [ 57.721517][ T5228] ERROR: (device loop3): remounting filesystem as read-only [pid 5234] munmap(0x7f919cc00000, 138412032) = 0 [pid 5232] munmap(0x7f919cc00000, 138412032 [pid 5234] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5228] <... rename resumed>) = -1 EIO (Input/output error) [pid 5226] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3 [pid 5234] <... openat resumed>) = 4 [pid 5232] <... munmap resumed>) = 0 [pid 5228] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] <... futex resumed>) = 0 [pid 5234] ioctl(4, LOOP_SET_FD, 3 [pid 5228] <... futex resumed>) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... close resumed>) = 0 [pid 5228] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] <... mmap resumed>) = 0x7f91a5066000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5226] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5237 attached [pid 5232] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5226] <... mprotect resumed>) = 0 [pid 5237] set_robust_list(0x5555565206a0, 24 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5237 [pid 5237] <... set_robust_list resumed>) = 0 [pid 5226] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5237] chdir("./10" [pid 5234] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5238 attached [pid 5237] <... chdir resumed>) = 0 [pid 5238] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5226] <... clone3 resumed> => {parent_tid=[5238]}, 88) = 5238 [pid 5238] <... rseq resumed>) = 0 [pid 5237] <... prctl resumed>) = 0 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5226] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] set_robust_list(0x7f91a50869a0, 24 [pid 5237] setpgid(0, 0 [pid 5234] close(3 [pid 5226] <... futex resumed>) = 0 [pid 5238] <... set_robust_list resumed>) = 0 [pid 5237] <... setpgid resumed>) = 0 [pid 5234] <... close resumed>) = 0 [pid 5226] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5238] rt_sigprocmask(SIG_SETMASK, [], [pid 5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5234] close(4 [pid 5232] <... openat resumed>) = 4 [pid 5238] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5237] <... openat resumed>) = 3 [pid 5234] <... close resumed>) = 0 [ 57.742612][ T5228] ERROR: (device loop3): txAbort: [ 57.742612][ T5228] [ 57.767611][ T5234] loop0: detected capacity change from 0 to 32768 [pid 5232] ioctl(4, LOOP_SET_FD, 3 [pid 5238] mkdir(".", 0777 [pid 5237] write(3, "1000", 4 [pid 5234] mkdir("./file2", 0777 [pid 5238] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5237] <... write resumed>) = 4 [pid 5238] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5237] close(3 [pid 5234] <... mkdir resumed>) = 0 [pid 5237] <... close resumed>) = 0 [pid 5237] symlink("/dev/binderfs", "./binderfs" [pid 5234] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5237] <... symlink resumed>) = 0 [pid 5237] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5238] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5237] <... futex resumed>) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5238] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5237] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5226] exit_group(0 [pid 5237] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5228] <... futex resumed>) = ? [pid 5238] <... futex resumed>) = ? [pid 5226] <... exit_group resumed>) = ? [pid 5238] +++ exited with 0 +++ [pid 5234] <... mount resumed>) = 0 [pid 5232] <... ioctl resumed>) = 0 [pid 5237] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5234] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5232] close(3 [pid 5237] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5234] <... openat resumed>) = 3 [pid 5232] <... close resumed>) = 0 [pid 5228] +++ exited with 0 +++ [pid 5226] +++ exited with 0 +++ [pid 5237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5234] chdir("./file2" [pid 5232] close(4 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=12 /* 0.12 s */} --- [pid 5237] <... mmap resumed>) = 0x7f91a5087000 [pid 5234] <... chdir resumed>) = 0 [pid 5232] <... close resumed>) = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5232] mkdir("./file2", 0777 [pid 5234] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5232] <... mkdir resumed>) = 0 [pid 5237] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5234] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5237] <... mprotect resumed>) = 0 [pid 5234] <... futex resumed>) = 1 [pid 5233] <... futex resumed>) = 0 [pid 5234] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5233] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5233] <... futex resumed>) = 0 [pid 5237] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5234] rename("./file2", "./file1" [pid 5233] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5237] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5057] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5239 attached [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5237] <... clone3 resumed> => {parent_tid=[5239]}, 88) = 5239 [pid 5059] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5237] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 5237] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5237] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5239] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5237] <... futex resumed>) = 0 [pid 5239] <... rseq resumed>) = 0 [pid 5239] set_robust_list(0x7f91a50a79a0, 24 [pid 5237] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5239] <... set_robust_list resumed>) = 0 [pid 5057] close(3 [ 57.796082][ T5232] loop4: detected capacity change from 0 to 32768 [ 57.830517][ T5234] ERROR: (device loop0): diWrite: ixpxd invalid [ 57.830517][ T5234] [pid 5239] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] <... close resumed>) = 0 [pid 5239] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./9/binderfs") = 0 [pid 5059] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5240 attached [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5240 [pid 5240] set_robust_list(0x5555565206a0, 24 [pid 5239] memfd_create("syzkaller", 0 [pid 5240] <... set_robust_list resumed>) = 0 [pid 5239] <... memfd_create resumed>) = 3 [pid 5240] chdir("./10" [pid 5239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5240] <... chdir resumed>) = 0 [pid 5239] <... mmap resumed>) = 0x7f919cc00000 [pid 5232] <... mount resumed>) = 0 [pid 5232] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5240] setpgid(0, 0) = 0 [pid 5232] chdir("./file2" [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5232] <... chdir resumed>) = 0 [pid 5232] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5240] <... openat resumed>) = 3 [pid 5240] write(3, "1000", 4 [pid 5232] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5240] <... write resumed>) = 4 [pid 5232] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] close(3 [pid 5232] <... futex resumed>) = 1 [pid 5240] <... close resumed>) = 0 [pid 5232] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5240] symlink("/dev/binderfs", "./binderfs" [pid 5231] <... futex resumed>) = 0 [pid 5240] <... symlink resumed>) = 0 [pid 5233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = 0 [pid 5233] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5240] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] <... mmap resumed>) = 0x7f91a5066000 [pid 5232] <... futex resumed>) = 0 [pid 5231] <... futex resumed>) = 1 [pid 5059] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5232] rename("./file2", "./file1" [pid 5233] <... mprotect resumed>) = 0 [pid 5231] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./9/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 57.857025][ T5234] ERROR: (device loop0): remounting filesystem as read-only [ 57.891083][ T5234] ERROR: (device loop0): txAbort: [ 57.891083][ T5234] [pid 5059] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./9/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./9/file2" [pid 5234] <... rename resumed>) = -1 EIO (Input/output error) [pid 5059] <... rmdir resumed>) = 0 [pid 5234] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(3, [pid 5234] <... futex resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5234] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] close(3) = 0 [pid 5059] rmdir("./9") = 0 [pid 5059] mkdir("./10", 0777) = 0 [pid 5233] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5240] <... futex resumed>) = 0 [pid 5233] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5240] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5240] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5240] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 5241 attached NULL, 8) = 0 [pid 5241] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5241] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5233] <... clone3 resumed> => {parent_tid=[5241]}, 88) = 5241 [pid 5241] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5240] <... mmap resumed>) = 0x7f91a5087000 [pid 5233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5233] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5241] <... futex resumed>) = 0 [pid 5233] <... futex resumed>) = 1 [pid 5240] <... mprotect resumed>) = 0 [pid 5232] <... rename resumed>) = -1 EIO (Input/output error) [pid 5241] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5241] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5240] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5241] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5241] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5231] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5231] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5242]}, 88) = 5242 [pid 5231] rt_sigprocmask(SIG_SETMASK, [], [pid 5240] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5240] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5233] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5242 attached [pid 5231] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5231] <... futex resumed>) = 0 [pid 5242] <... rseq resumed>) = 0 [pid 5233] exit_group(0 [pid 5231] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5242] set_robust_list(0x7f91a50869a0, 24 [pid 5241] <... futex resumed>) = ? [pid 5234] <... futex resumed>) = ? [pid 5233] <... exit_group resumed>) = ? [pid 5232] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... set_robust_list resumed>) = 0 [pid 5241] +++ exited with 0 +++ [pid 5234] +++ exited with 0 +++ [pid 5242] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5243 attached NULL, 8) = 0 [pid 5243] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5242] mkdir(".", 0777 [pid 5243] <... rseq resumed>) = 0 [pid 5242] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5240] <... clone3 resumed> => {parent_tid=[5243]}, 88) = 5243 [pid 5233] +++ exited with 0 +++ [pid 5232] <... futex resumed>) = 0 [pid 5232] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=18 /* 0.18 s */} --- [pid 5240] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5240] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5240] <... futex resumed>) = 0 [pid 5240] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5056] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5243] set_robust_list(0x7f91a50a79a0, 24 [pid 5056] <... openat resumed>) = 3 [pid 5056] newfstatat(3, "", [pid 5243] <... set_robust_list resumed>) = 0 [pid 5242] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5243] rt_sigprocmask(SIG_SETMASK, [], [pid 5242] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] getdents64(3, [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... futex resumed>) = 1 [pid 5231] <... futex resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5243] memfd_create("syzkaller", 0 [pid 5242] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] exit_group(0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5243] <... memfd_create resumed>) = 3 [pid 5242] <... futex resumed>) = ? [pid 5232] <... futex resumed>) = ? [pid 5231] <... exit_group resumed>) = ? [pid 5056] unlink("./10/binderfs" [pid 5243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5242] +++ exited with 0 +++ [pid 5232] +++ exited with 0 +++ [pid 5231] +++ exited with 0 +++ [ 57.913262][ T5232] ERROR: (device loop4): diWrite: ixpxd invalid [ 57.913262][ T5232] [ 57.931199][ T5232] ERROR: (device loop4): remounting filesystem as read-only [ 57.951103][ T5232] ERROR: (device loop4): txAbort: [ 57.951103][ T5232] [pid 5243] <... mmap resumed>) = 0x7f919cc00000 [pid 5056] <... unlink resumed>) = 0 [pid 5056] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=16 /* 0.16 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 5056] <... umount2 resumed>) = 0 [pid 5239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./10/file2", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] unlink("./9/binderfs" [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./10/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... openat resumed>) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./10/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./10") = 0 [pid 5056] mkdir("./11", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5236] <... write resumed>) = 16777216 [pid 5236] munmap(0x7f919cc00000, 138412032) = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5236] close(3) = 0 [pid 5236] close(4) = 0 [pid 5236] mkdir("./file2", 0777) = 0 [pid 5236] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... ioctl resumed>) = 0 [ 58.129453][ T5236] loop2: detected capacity change from 0 to 32768 [pid 5059] close(3) = 0 [pid 5236] <... mount resumed>) = 0 [pid 5236] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5236] <... openat resumed>) = 3 [pid 5236] chdir("./file2") = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5236] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5244 attached [pid 5235] <... futex resumed>) = 0 [pid 5244] set_robust_list(0x5555565206a0, 24 [pid 5235] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] <... set_robust_list resumed>) = 0 [pid 5236] <... futex resumed>) = 0 [pid 5244] chdir("./10" [pid 5236] rename("./file2", "./file1" [pid 5235] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5244 [pid 5244] <... chdir resumed>) = 0 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] setpgid(0, 0) = 0 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1000", 4) = 4 [pid 5244] close(3) = 0 [pid 5244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5244] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] <... write resumed>) = 16777216 [pid 5244] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5244] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5239] munmap(0x7f919cc00000, 138412032 [pid 5244] <... mmap resumed>) = 0x7f91a5087000 [pid 5239] <... munmap resumed>) = 0 [pid 5235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5236] <... rename resumed>) = -1 EIO (Input/output error) [pid 5244] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5235] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5235] <... futex resumed>) = 0 [pid 5244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5245]}, 88) = 5245 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5245 attached [ 58.198997][ T5236] ERROR: (device loop2): diWrite: ixpxd invalid [ 58.198997][ T5236] [ 58.224052][ T5236] ERROR: (device loop2): remounting filesystem as read-only [ 58.241248][ T5236] ERROR: (device loop2): txAbort: [ 58.241248][ T5236] [pid 5245] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5244] rt_sigprocmask(SIG_SETMASK, [], [pid 5239] <... openat resumed>) = 4 [pid 5235] <... mmap resumed>) = 0x7f91a5066000 [pid 5245] <... rseq resumed>) = 0 [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5239] ioctl(4, LOOP_SET_FD, 3 [pid 5235] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5245] set_robust_list(0x7f91a50a79a0, 24 [pid 5244] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... set_robust_list resumed>) = 0 [pid 5245] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] <... futex resumed>) = 0 [pid 5239] <... ioctl resumed>) = 0 [pid 5235] <... mprotect resumed>) = 0 [pid 5244] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] memfd_create("syzkaller", 0) = 3 [pid 5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5235] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5239] close(3) = 0 [pid 5239] close(4) = 0 [pid 5239] mkdir("./file2", 0777) = 0 [pid 5239] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5235] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5246 attached [pid 5239] <... mount resumed>) = 0 [pid 5235] <... clone3 resumed> => {parent_tid=[5246]}, 88) = 5246 [pid 5056] <... ioctl resumed>) = 0 [pid 5235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5246] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5246] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5246] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5235] <... futex resumed>) = 1 [ 58.272288][ T5239] loop5: detected capacity change from 0 to 32768 [pid 5235] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5246] <... futex resumed>) = 0 [pid 5239] <... openat resumed>) = 3 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5247 attached [pid 5246] mkdir(".", 0777 [pid 5239] chdir("./file2" [pid 5060] <... umount2 resumed>) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5247 [pid 5247] set_robust_list(0x5555565206a0, 24 [pid 5246] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5239] <... chdir resumed>) = 0 [pid 5247] <... set_robust_list resumed>) = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5246] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5246] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5246] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5235] <... futex resumed>) = 0 [pid 5235] exit_group(0 [pid 5060] newfstatat(AT_FDCWD, "./9/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./9/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./9/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5246] <... futex resumed>) = ? [pid 5236] <... futex resumed>) = ? [pid 5235] <... exit_group resumed>) = ? [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5247] chdir("./11") = 0 [pid 5246] +++ exited with 0 +++ [pid 5239] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5236] +++ exited with 0 +++ [pid 5235] +++ exited with 0 +++ [pid 5060] getdents64(4, [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5239] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5239] <... futex resumed>) = 1 [pid 5237] <... futex resumed>) = 0 [pid 5060] close(4 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=17 /* 0.17 s */} --- [pid 5237] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... close resumed>) = 0 [pid 5058] restart_syscall(<... resuming interrupted clone ...> [pid 5237] <... futex resumed>) = 0 [pid 5060] rmdir("./9/file2" [pid 5247] <... prctl resumed>) = 0 [pid 5239] rename("./file2", "./file1" [pid 5237] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... rmdir resumed>) = 0 [pid 5058] <... restart_syscall resumed>) = 0 [pid 5247] setpgid(0, 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./9") = 0 [pid 5060] mkdir("./10", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5247] <... setpgid resumed>) = 0 [pid 5243] <... write resumed>) = 16777216 [pid 5058] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5247] <... openat resumed>) = 3 [pid 5058] <... openat resumed>) = 3 [pid 5247] write(3, "1000", 4 [pid 5243] munmap(0x7f919cc00000, 138412032 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5247] <... write resumed>) = 4 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5247] close(3) = 0 [pid 5247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5247] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5247] <... futex resumed>) = 0 [pid 5247] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5247] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5247] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5243] <... munmap resumed>) = 0 [pid 5058] unlink("./10/binderfs" [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5243] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5058] <... unlink resumed>) = 0 [pid 5247] <... mmap resumed>) = 0x7f91a5087000 [pid 5243] <... openat resumed>) = 4 [ 58.352888][ T5239] ERROR: (device loop5): diWrite: ixpxd invalid [ 58.352888][ T5239] [ 58.370784][ T5239] ERROR: (device loop5): remounting filesystem as read-only [ 58.381376][ T5239] ERROR: (device loop5): txAbort: [ 58.381376][ T5239] [pid 5237] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5247] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5243] ioctl(4, LOOP_SET_FD, 3 [pid 5237] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... mprotect resumed>) = 0 [pid 5237] <... futex resumed>) = 0 [pid 5058] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5247] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5247] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5237] <... mmap resumed>) = 0x7f91a5066000 [pid 5247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5237] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5247] <... clone3 resumed> => {parent_tid=[5248]}, 88) = 5248 [pid 5247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5247] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5237] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5247] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5237] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5237] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5249]}, 88) = 5249 [pid 5237] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5237] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5237] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5249 attached [pid 5249] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5058] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5248 attached [pid 5249] <... rseq resumed>) = 0 [pid 5239] <... rename resumed>) = -1 EIO (Input/output error) [pid 5058] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5248] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5239] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5249] rt_sigprocmask(SIG_SETMASK, [], [pid 5248] <... rseq resumed>) = 0 [pid 5239] <... futex resumed>) = 0 [pid 5058] newfstatat(AT_FDCWD, "./10/file2", [pid 5249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5248] set_robust_list(0x7f91a50a79a0, 24 [pid 5239] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5249] mkdir(".", 0777 [pid 5248] <... set_robust_list resumed>) = 0 [pid 5058] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5248] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... ioctl resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5249] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] openat(AT_FDCWD, "./10/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5249] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5243] close(3 [pid 5058] <... openat resumed>) = 4 [pid 5249] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] memfd_create("syzkaller", 0 [pid 5243] <... close resumed>) = 0 [pid 5249] <... futex resumed>) = 1 [pid 5243] close(4 [pid 5237] <... futex resumed>) = 0 [pid 5058] newfstatat(4, "", [pid 5248] <... memfd_create resumed>) = 3 [pid 5249] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] <... close resumed>) = 0 [pid 5237] exit_group(0 [pid 5249] <... futex resumed>) = ? [pid 5243] mkdir("./file2", 0777 [pid 5237] <... exit_group resumed>) = ? [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5249] +++ exited with 0 +++ [pid 5243] <... mkdir resumed>) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, [pid 5243] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5239] <... futex resumed>) = ? [pid 5058] close(4 [pid 5248] <... mmap resumed>) = 0x7f919cc00000 [pid 5243] <... mount resumed>) = 0 [pid 5239] +++ exited with 0 +++ [pid 5237] +++ exited with 0 +++ [pid 5058] <... close resumed>) = 0 [pid 5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5058] rmdir("./10/file2") = 0 [pid 5063] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./10/binderfs") = 0 [pid 5063] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5243] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] close(3 [pid 5243] <... openat resumed>) = 3 [pid 5243] chdir("./file2" [pid 5058] <... close resumed>) = 0 [pid 5243] <... chdir resumed>) = 0 [pid 5058] rmdir("./10") = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5058] mkdir("./11", 0777 [pid 5243] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 58.403327][ T5243] loop1: detected capacity change from 0 to 32768 [pid 5058] <... mkdir resumed>) = 0 [pid 5243] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5240] <... futex resumed>) = 0 [pid 5240] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 1 [pid 5243] rename("./file2", "./file1" [pid 5240] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5240] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5240] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [ 58.466945][ T5243] ERROR: (device loop1): diWrite: ixpxd invalid [ 58.466945][ T5243] [ 58.495771][ T5243] ERROR: (device loop1): remounting filesystem as read-only [pid 5240] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5240] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5240] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5250]}, 88) = 5250 ./strace-static-x86_64: Process 5250 attached [pid 5240] rt_sigprocmask(SIG_SETMASK, [], [pid 5250] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5240] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5250] <... rseq resumed>) = 0 [pid 5240] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] set_robust_list(0x7f91a50869a0, 24 [pid 5240] <... futex resumed>) = 0 [pid 5250] <... set_robust_list resumed>) = 0 [pid 5240] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5250] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5250] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5250] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5240] <... futex resumed>) = 0 [pid 5250] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] <... rename resumed>) = -1 EIO (Input/output error) [pid 5243] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5240] exit_group(0) = ? [pid 5250] <... futex resumed>) = ? [pid 5250] +++ exited with 0 +++ [pid 5243] +++ exited with 0 +++ [pid 5240] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5240, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5057] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5057] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./10/binderfs") = 0 [ 58.520451][ T5243] ERROR: (device loop1): txAbort: [ 58.520451][ T5243] [ 58.539234][ T5243] ERROR: (device loop1): remounting filesystem as read-only [pid 5057] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./10/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./10/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] <... close resumed>) = 0 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] getdents64(4, [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5251 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5251 attached [pid 5057] close(4) = 0 [pid 5057] rmdir("./10/file2" [pid 5251] set_robust_list(0x5555565206a0, 24) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5251] chdir("./10" [pid 5057] getdents64(3, [pid 5251] <... chdir resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5057] close(3 [pid 5251] <... prctl resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5251] setpgid(0, 0) = 0 [pid 5057] rmdir("./10" [pid 5251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5057] <... rmdir resumed>) = 0 [pid 5251] <... openat resumed>) = 3 [pid 5251] write(3, "1000", 4) = 4 [pid 5057] mkdir("./11", 0777 [pid 5251] close(3) = 0 [pid 5251] symlink("/dev/binderfs", "./binderfs" [pid 5057] <... mkdir resumed>) = 0 [pid 5251] <... symlink resumed>) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5251] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5251] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5251] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5252]}, 88) = 5252 ./strace-static-x86_64: Process 5252 attached [pid 5251] rt_sigprocmask(SIG_SETMASK, [], [pid 5252] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5252] <... rseq resumed>) = 0 [pid 5251] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] set_robust_list(0x7f91a50a79a0, 24 [pid 5245] <... write resumed>) = 16777216 [pid 5252] <... set_robust_list resumed>) = 0 [pid 5245] munmap(0x7f919cc00000, 138412032 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], [pid 5251] <... futex resumed>) = 0 [pid 5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5251] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5252] memfd_create("syzkaller", 0) = 3 [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5245] <... munmap resumed>) = 0 [pid 5252] <... mmap resumed>) = 0x7f919cc00000 [pid 5245] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5245] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3 [pid 5063] <... umount2 resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5063] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./10/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5253 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./10/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", ./strace-static-x86_64: Process 5253 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5253] set_robust_list(0x5555565206a0, 24 [pid 5063] getdents64(4, [pid 5253] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5253] chdir("./11" [pid 5063] getdents64(4, [pid 5253] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5253] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] close(4 [pid 5253] <... prctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5253] setpgid(0, 0 [pid 5063] rmdir("./10/file2" [pid 5253] <... setpgid resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(3, [pid 5253] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5253] write(3, "1000", 4 [pid 5063] close(3 [pid 5253] <... write resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5253] close(3 [pid 5063] rmdir("./10" [pid 5253] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5253] symlink("/dev/binderfs", "./binderfs" [pid 5063] mkdir("./11", 0777 [pid 5253] <... symlink resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5245] close(3 [pid 5253] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5253] <... futex resumed>) = 0 [pid 5245] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5253] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5253] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5253] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5253] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5245] close(4) = 0 [pid 5253] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5253] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5254]}, 88) = 5254 [pid 5253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5253] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5254 attached ) = 0 [pid 5245] mkdir("./file2", 0777 [pid 5254] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5245] <... mkdir resumed>) = 0 [pid 5253] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5254] <... rseq resumed>) = 0 [pid 5254] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5254] memfd_create("syzkaller", 0 [pid 5245] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5254] <... memfd_create resumed>) = 3 [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [ 58.722922][ T5245] loop3: detected capacity change from 0 to 32768 [pid 5245] <... mount resumed>) = 0 [pid 5245] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5245] chdir("./file2") = 0 [pid 5245] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5245] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5244] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] rename("./file2", "./file1" [pid 5244] <... futex resumed>) = 0 [pid 5244] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5244] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5244] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5244] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5244] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 58.821930][ T5245] ERROR: (device loop3): diWrite: ixpxd invalid [ 58.821930][ T5245] [ 58.851540][ T5245] ERROR: (device loop3): remounting filesystem as read-only [ 58.858826][ T5245] ERROR: (device loop3): txAbort: [ 58.858826][ T5245] [pid 5244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5255]}, 88) = 5255 [pid 5244] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5255 attached [pid 5255] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5244] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... rseq resumed>) = 0 [pid 5255] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5255] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5255] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5244] <... futex resumed>) = 0 [pid 5244] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5245] <... rename resumed>) = -1 EIO (Input/output error) [pid 5245] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5245] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5255] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5255] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] exit_group(0 [pid 5255] <... futex resumed>) = ? [pid 5245] <... futex resumed>) = ? [pid 5244] <... exit_group resumed>) = ? [pid 5255] +++ exited with 0 +++ [pid 5245] +++ exited with 0 +++ [pid 5244] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5248] <... write resumed>) = 16777216 [pid 5059] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5248] munmap(0x7f919cc00000, 138412032 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 5248] <... munmap resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5248] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5248] <... openat resumed>) = 4 [pid 5248] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./10/binderfs") = 0 [pid 5059] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5248] <... ioctl resumed>) = 0 [pid 5248] close(3) = 0 [pid 5248] close(4) = 0 [pid 5248] mkdir("./file2", 0777) = 0 [pid 5248] mount("/dev/loop0", "./file2", "jfs", 0, "") = 0 [pid 5248] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5057] <... ioctl resumed>) = 0 [ 58.967918][ T5248] loop0: detected capacity change from 0 to 32768 [pid 5248] chdir("./file2") = 0 [pid 5248] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5248] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = 0 [pid 5247] <... futex resumed>) = 1 [pid 5248] rename("./file2", "./file1" [pid 5247] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5256 ./strace-static-x86_64: Process 5256 attached [pid 5256] set_robust_list(0x5555565206a0, 24) = 0 [pid 5256] chdir("./11") = 0 [pid 5256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5256] setpgid(0, 0) = 0 [pid 5256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5256] write(3, "1000", 4) = 4 [pid 5256] close(3) = 0 [pid 5256] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5256] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5256] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5256] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5256] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5256] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5257]}, 88) = 5257 [pid 5256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5256] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5256] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5257 attached [pid 5257] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5257] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5257] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5257] memfd_create("syzkaller", 0) = 3 [pid 5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [ 59.032440][ T5248] ERROR: (device loop0): diWrite: ixpxd invalid [ 59.032440][ T5248] [ 59.054519][ T5248] ERROR: (device loop0): remounting filesystem as read-only [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5248] <... rename resumed>) = -1 EIO (Input/output error) [pid 5248] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5248] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] <... futex resumed>) = 0 [pid 5248] mkdir(".", 0777 [pid 5247] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... close resumed>) = 0 [pid 5248] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5248] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5258 attached [pid 5254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5258] set_robust_list(0x5555565206a0, 24 [pid 5248] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5258 [pid 5258] <... set_robust_list resumed>) = 0 [pid 5258] chdir("./11" [pid 5248] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... chdir resumed>) = 0 [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5258] setpgid(0, 0 [pid 5248] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5258] <... setpgid resumed>) = 0 [pid 5248] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] exit_group(0 [pid 5248] <... futex resumed>) = ? [pid 5247] <... exit_group resumed>) = ? [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5248] +++ exited with 0 +++ [pid 5247] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=13 /* 0.13 s */} --- [pid 5056] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5258] <... openat resumed>) = 3 [pid 5056] <... openat resumed>) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5258] write(3, "1000", 4 [pid 5056] getdents64(3, [pid 5258] <... write resumed>) = 4 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5258] close(3 [pid 5056] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] <... close resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5258] symlink("/dev/binderfs", "./binderfs" [ 59.081219][ T5248] ERROR: (device loop0): txAbort: [ 59.081219][ T5248] [pid 5056] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5258] <... symlink resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./11/binderfs" [pid 5258] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... unlink resumed>) = 0 [pid 5056] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] <... futex resumed>) = 0 [pid 5258] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5258] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5258] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5258] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5258] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5259 attached [pid 5259] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5258] <... clone3 resumed> => {parent_tid=[5259]}, 88) = 5259 [pid 5259] <... rseq resumed>) = 0 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] set_robust_list(0x7f91a50a79a0, 24 [pid 5258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] <... set_robust_list resumed>) = 0 [pid 5258] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] rt_sigprocmask(SIG_SETMASK, [], [pid 5258] <... futex resumed>) = 0 [pid 5259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] memfd_create("syzkaller", 0 [pid 5258] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5259] <... memfd_create resumed>) = 3 [pid 5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5252] <... write resumed>) = 16777216 [pid 5252] munmap(0x7f919cc00000, 138412032) = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5059] <... umount2 resumed>) = 0 [pid 5252] ioctl(4, LOOP_SET_FD, 3 [pid 5059] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./10/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./10/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./10/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./10") = 0 [pid 5059] mkdir("./11", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5252] <... ioctl resumed>) = 0 [pid 5252] close(3) = 0 [pid 5252] close(4) = 0 [pid 5252] mkdir("./file2", 0777) = 0 [pid 5252] mount("/dev/loop4", "./file2", "jfs", 0, "") = 0 [pid 5252] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5252] chdir("./file2") = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5252] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5252] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5251] <... futex resumed>) = 0 [pid 5251] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 59.255633][ T5252] loop4: detected capacity change from 0 to 32768 [pid 5252] rename("./file2", "./file1" [pid 5254] <... write resumed>) = 16777216 [pid 5251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5251] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5251] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5260]}, 88) = 5260 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5251] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 59.302311][ T5252] ERROR: (device loop4): diWrite: ixpxd invalid [ 59.302311][ T5252] [ 59.342430][ T5252] ERROR: (device loop4): remounting filesystem as read-only [pid 5251] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5260 attached [pid 5260] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5260] set_robust_list(0x7f91a50869a0, 24 [pid 5254] munmap(0x7f919cc00000, 138412032 [pid 5260] <... set_robust_list resumed>) = 0 [pid 5260] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5260] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5260] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5260] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... munmap resumed>) = 0 [pid 5260] <... futex resumed>) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5260] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5257] <... write resumed>) = 16777216 [pid 5254] <... openat resumed>) = 4 [pid 5257] munmap(0x7f919cc00000, 138412032 [pid 5254] ioctl(4, LOOP_SET_FD, 3 [pid 5259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5252] <... rename resumed>) = -1 EIO (Input/output error) [pid 5252] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] exit_group(0 [pid 5252] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5251] <... exit_group resumed>) = ? [pid 5252] +++ exited with 0 +++ [pid 5260] <... futex resumed>) = ? [pid 5257] <... munmap resumed>) = 0 [pid 5254] <... ioctl resumed>) = 0 [pid 5260] +++ exited with 0 +++ [pid 5257] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5254] close(3 [pid 5251] +++ exited with 0 +++ [pid 5056] <... umount2 resumed>) = 0 [pid 5257] <... openat resumed>) = 4 [pid 5254] <... close resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5251, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5056] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] ioctl(4, LOOP_SET_FD, 3 [pid 5254] close(4 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5254] <... close resumed>) = 0 [pid 5254] mkdir("./file2", 0777) = 0 [pid 5060] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5254] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5060] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 59.374001][ T5252] ERROR: (device loop4): txAbort: [ 59.374001][ T5252] [ 59.402010][ T5252] ERROR: (device loop4): remounting filesystem as read-only [ 59.411885][ T5254] loop2: detected capacity change from 0 to 32768 [pid 5056] newfstatat(AT_FDCWD, "./11/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5056] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(3, "", [pid 5056] openat(AT_FDCWD, "./11/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] newfstatat(4, "", [pid 5257] <... ioctl resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(3, [pid 5056] close(4) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] rmdir("./11/file2") = 0 [pid 5056] getdents64(3, [pid 5060] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] close(3 [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5257] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] close(4 [pid 5060] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5257] <... close resumed>) = 0 [pid 5257] mkdir("./file2", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] close(3 [pid 5254] <... mount resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./11" [pid 5257] <... mkdir resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5257] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5254] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] unlink("./10/binderfs" [pid 5056] mkdir("./12", 0777) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5254] <... openat resumed>) = 3 [pid 5060] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5254] chdir("./file2" [pid 5056] <... openat resumed>) = 3 [pid 5254] <... chdir resumed>) = 0 [pid 5254] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5254] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5254] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5253] <... futex resumed>) = 0 [pid 5254] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] <... futex resumed>) = 0 [pid 5254] rename("./file2", "./file1" [ 59.448112][ T5257] loop1: detected capacity change from 0 to 32768 [pid 5253] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] <... mount resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] newfstatat(AT_FDCWD, "./10/file2", [pid 5257] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./10/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] chdir("./file2" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] <... chdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./10/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5060] <... openat resumed>) = 4 [pid 5257] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] newfstatat(4, "", [pid 5257] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5257] <... futex resumed>) = 1 [pid 5256] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] getdents64(4, [pid 5256] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5256] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 0 [pid 5060] close(4 [pid 5256] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./10/file2" [pid 5253] <... mmap resumed>) = 0x7f91a5066000 [pid 5253] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... rmdir resumed>) = 0 [pid 5253] <... mprotect resumed>) = 0 [pid 5060] getdents64(3, [pid 5257] rename("./file2", "./file1" [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5253] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] close(3 [pid 5253] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 5254] <... rename resumed>) = -1 EIO (Input/output error) [ 59.505482][ T5254] ERROR: (device loop2): diWrite: ixpxd invalid [ 59.505482][ T5254] [ 59.518787][ T5254] ERROR: (device loop2): remounting filesystem as read-only [ 59.529966][ T5254] ERROR: (device loop2): txAbort: [ 59.529966][ T5254] [pid 5254] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5060] rmdir("./10") = 0 [pid 5060] mkdir("./11", 0777./strace-static-x86_64: Process 5261 attached [pid 5261] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5261] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5261] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5261] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... clone3 resumed> => {parent_tid=[5261]}, 88) = 5261 [pid 5253] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5253] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5261] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 1 [pid 5261] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5253] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5261] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5261] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5253] <... futex resumed>) = 0 [pid 5253] exit_group(0 [pid 5254] <... futex resumed>) = ? [pid 5253] <... exit_group resumed>) = ? [pid 5254] +++ exited with 0 +++ [pid 5261] +++ exited with 0 +++ [pid 5253] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5253, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5058] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./11/binderfs") = 0 [pid 5058] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... ioctl resumed>) = 0 [pid 5256] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 59.567407][ T5257] ERROR: (device loop1): diWrite: ixpxd invalid [ 59.567407][ T5257] [pid 5259] <... write resumed>) = 16777216 [pid 5256] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 5256] <... futex resumed>) = 0 [pid 5259] munmap(0x7f919cc00000, 138412032 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5262 ./strace-static-x86_64: Process 5262 attached [pid 5262] set_robust_list(0x5555565206a0, 24) = 0 [pid 5262] chdir("./11") = 0 [pid 5256] <... mmap resumed>) = 0x7f91a5066000 [pid 5262] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5262] setpgid(0, 0) = 0 [pid 5262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5256] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5058] <... umount2 resumed>) = 0 [pid 5256] <... mprotect resumed>) = 0 [pid 5058] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5262] <... openat resumed>) = 3 [ 59.613509][ T5257] ERROR: (device loop1): remounting filesystem as read-only [pid 5259] <... munmap resumed>) = 0 [pid 5262] write(3, "1000", 4) = 4 [pid 5259] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5262] close(3 [pid 5259] <... openat resumed>) = 4 [pid 5262] <... close resumed>) = 0 [pid 5259] ioctl(4, LOOP_SET_FD, 3 [pid 5262] symlink("/dev/binderfs", "./binderfs" [pid 5256] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5257] <... rename resumed>) = -1 EIO (Input/output error) [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5262] <... symlink resumed>) = 0 [pid 5262] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5262] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5262] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5262] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5262] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5263]}, 88) = 5263 [pid 5262] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5262] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5263 attached [pid 5259] <... ioctl resumed>) = 0 [pid 5263] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5259] close(3 [pid 5263] <... rseq resumed>) = 0 [pid 5259] <... close resumed>) = 0 [pid 5263] set_robust_list(0x7f91a50a79a0, 24 [pid 5259] close(4 [pid 5263] <... set_robust_list resumed>) = 0 [pid 5259] <... close resumed>) = 0 [pid 5263] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] mkdir("./file2", 0777 [pid 5263] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] <... mkdir resumed>) = 0 [pid 5263] memfd_create("syzkaller", 0) = 3 [pid 5259] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5257] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5058] newfstatat(AT_FDCWD, "./11/file2", [pid 5257] <... futex resumed>) = 0 [pid 5256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5264 attached [pid 5257] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5256] <... clone3 resumed> => {parent_tid=[5264]}, 88) = 5264 [pid 5264] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] rt_sigprocmask(SIG_SETMASK, [], [pid 5264] <... rseq resumed>) = 0 [pid 5058] openat(AT_FDCWD, "./11/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5264] set_robust_list(0x7f91a50869a0, 24 [pid 5256] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... openat resumed>) = 4 [pid 5264] <... set_robust_list resumed>) = 0 [pid 5259] <... mount resumed>) = 0 [pid 5259] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5259] chdir("./file2") = 0 [pid 5259] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5264] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5256] <... futex resumed>) = 0 [pid 5058] newfstatat(4, "", [pid 5256] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5264] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5264] mkdir(".", 0777 [pid 5259] <... futex resumed>) = 1 [pid 5264] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5259] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] getdents64(4, [ 59.656046][ T5257] ERROR: (device loop1): txAbort: [ 59.656046][ T5257] [ 59.658868][ T5259] loop5: detected capacity change from 0 to 32768 [pid 5264] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5264] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] getdents64(4, [pid 5264] <... futex resumed>) = 1 [pid 5256] <... futex resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5264] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5256] exit_group(0 [pid 5058] close(4 [pid 5264] <... futex resumed>) = ? [pid 5258] <... futex resumed>) = 0 [pid 5257] <... futex resumed>) = ? [pid 5256] <... exit_group resumed>) = ? [pid 5058] <... close resumed>) = 0 [pid 5257] +++ exited with 0 +++ [pid 5058] rmdir("./11/file2" [pid 5264] +++ exited with 0 +++ [pid 5258] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] +++ exited with 0 +++ [pid 5058] <... rmdir resumed>) = 0 [pid 5058] getdents64(3, [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5256, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3 [pid 5057] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] <... close resumed>) = 0 [pid 5058] rmdir("./11" [pid 5057] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, [pid 5058] <... rmdir resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] mkdir("./12", 0777 [pid 5057] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5258] <... futex resumed>) = 1 [pid 5058] <... mkdir resumed>) = 0 [pid 5057] unlink("./11/binderfs" [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5258] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... openat resumed>) = 3 [pid 5057] <... unlink resumed>) = 0 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5057] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] <... futex resumed>) = 0 [pid 5259] rename("./file2", "./file1" [pid 5056] <... ioctl resumed>) = 0 [pid 5258] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] <... ioctl resumed>) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5258] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5258] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5258] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5258] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] close(3 [pid 5258] <... clone3 resumed> => {parent_tid=[5265]}, 88) = 5265 [pid 5056] <... close resumed>) = 0 ./strace-static-x86_64: Process 5265 attached [pid 5258] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5265] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5265] <... rseq resumed>) = 0 [pid 5258] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] close(3 [pid 5057] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5265] set_robust_list(0x7f91a50869a0, 24 [pid 5258] <... futex resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... close resumed>) = 0 [pid 5265] <... set_robust_list resumed>) = 0 [pid 5258] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5265] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5265] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5265] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5265] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5258] <... futex resumed>) = 0 [pid 5265] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5266 [ 59.745385][ T5259] ERROR: (device loop5): diWrite: ixpxd invalid [ 59.745385][ T5259] [ 59.772146][ T5259] ERROR: (device loop5): remounting filesystem as read-only [ 59.779436][ T5259] ERROR: (device loop5): txAbort: [ 59.779436][ T5259] [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] newfstatat(AT_FDCWD, "./11/file2", [pid 5259] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5267 attached ./strace-static-x86_64: Process 5266 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5267 [pid 5057] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] set_robust_list(0x5555565206a0, 24 [pid 5266] set_robust_list(0x5555565206a0, 24 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5266] <... set_robust_list resumed>) = 0 [pid 5057] openat(AT_FDCWD, "./11/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5266] chdir("./12" [pid 5267] <... set_robust_list resumed>) = 0 [pid 5266] <... chdir resumed>) = 0 [pid 5259] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... openat resumed>) = 4 [pid 5266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5057] newfstatat(4, "", [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5258] exit_group(0 [pid 5267] chdir("./11" [pid 5259] <... futex resumed>) = ? [pid 5258] <... exit_group resumed>) = ? [pid 5057] getdents64(4, [pid 5267] <... chdir resumed>) = 0 [pid 5267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5265] <... futex resumed>) = ? [pid 5265] +++ exited with 0 +++ [pid 5267] setpgid(0, 0) = 0 [pid 5267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5267] write(3, "1000", 4) = 4 [pid 5267] close(3) = 0 [pid 5267] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5267] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] +++ exited with 0 +++ [pid 5258] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5258, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=14 /* 0.14 s */} --- [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5266] <... prctl resumed>) = 0 [pid 5057] getdents64(4, [pid 5266] setpgid(0, 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5266] <... setpgid resumed>) = 0 [pid 5057] close(4 [pid 5063] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] <... close resumed>) = 0 [pid 5057] rmdir("./11/file2" [pid 5063] newfstatat(3, "", [pid 5267] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5267] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] getdents64(3, [pid 5267] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] <... rmdir resumed>) = 0 [pid 5266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5266] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] close(3 [pid 5266] write(3, "1000", 4 [pid 5063] unlink("./11/binderfs" [pid 5267] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5266] <... write resumed>) = 4 [pid 5063] <... unlink resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5267] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5266] close(3 [pid 5063] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] rmdir("./11" [pid 5267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5266] <... close resumed>) = 0 [pid 5267] <... mmap resumed>) = 0x7f91a5087000 [pid 5057] <... rmdir resumed>) = 0 [pid 5267] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5057] mkdir("./12", 0777 [pid 5267] <... mprotect resumed>) = 0 [pid 5267] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5266] symlink("/dev/binderfs", "./binderfs" [pid 5057] <... mkdir resumed>) = 0 [pid 5267] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5268]}, 88) = 5268 [pid 5267] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5267] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5268 attached [pid 5266] <... symlink resumed>) = 0 [pid 5057] <... openat resumed>) = 3 [pid 5268] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5266] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5268] set_robust_list(0x7f91a50a79a0, 24 [pid 5266] <... futex resumed>) = 0 [pid 5268] <... set_robust_list resumed>) = 0 [pid 5266] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5268] rt_sigprocmask(SIG_SETMASK, [], [pid 5266] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5268] memfd_create("syzkaller", 0 [pid 5266] <... mmap resumed>) = 0x7f91a5087000 [pid 5268] <... memfd_create resumed>) = 3 [pid 5266] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5266] <... mprotect resumed>) = 0 [pid 5266] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5268] <... mmap resumed>) = 0x7f919cc00000 [pid 5266] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5269 attached => {parent_tid=[5269]}, 88) = 5269 [pid 5266] rt_sigprocmask(SIG_SETMASK, [], [pid 5269] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5269] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5269] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5269] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5266] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 [pid 5266] <... futex resumed>) = 1 [pid 5063] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5269] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 59.822131][ T5259] ERROR: (device loop5): remounting filesystem as read-only [pid 5269] memfd_create("syzkaller", 0 [pid 5266] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] newfstatat(AT_FDCWD, "./11/file2", [pid 5269] <... memfd_create resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./11/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./11/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5269] <... mmap resumed>) = 0x7f919cc00000 [pid 5063] close(3) = 0 [pid 5063] rmdir("./11") = 0 [pid 5063] mkdir("./12", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5270 attached [pid 5270] set_robust_list(0x5555565206a0, 24 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5270 [pid 5270] <... set_robust_list resumed>) = 0 [pid 5270] chdir("./12") = 0 [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5270] <... prctl resumed>) = 0 [pid 5270] setpgid(0, 0) = 0 [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5270] write(3, "1000", 4) = 4 [pid 5270] close(3) = 0 [pid 5270] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5270] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5270] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5270] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5270] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5270] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5270] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5271]}, 88) = 5271 [pid 5270] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5270] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5271 attached [pid 5270] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5271] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5063] <... ioctl resumed>) = 0 [pid 5271] <... rseq resumed>) = 0 [pid 5271] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5271] memfd_create("syzkaller", 0 [pid 5269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5271] <... memfd_create resumed>) = 3 [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5271] <... mmap resumed>) = 0x7f919cc00000 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5263] <... write resumed>) = 16777216 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5273 attached [pid 5273] set_robust_list(0x5555565206a0, 24 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5273 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5272 [pid 5273] <... set_robust_list resumed>) = 0 [pid 5273] chdir("./12" [pid 5263] munmap(0x7f919cc00000, 138412032 [pid 5273] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5272 attached [pid 5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5272] set_robust_list(0x5555565206a0, 24 [pid 5273] setpgid(0, 0 [pid 5272] <... set_robust_list resumed>) = 0 [pid 5273] <... setpgid resumed>) = 0 [pid 5272] chdir("./12" [pid 5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5272] <... chdir resumed>) = 0 [pid 5272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5272] setpgid(0, 0) = 0 [pid 5272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5273] <... openat resumed>) = 3 [pid 5272] <... openat resumed>) = 3 [pid 5272] write(3, "1000", 4 [pid 5273] write(3, "1000", 4 [pid 5272] <... write resumed>) = 4 [pid 5263] <... munmap resumed>) = 0 [pid 5273] <... write resumed>) = 4 [pid 5272] close(3 [pid 5263] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5273] close(3 [pid 5272] <... close resumed>) = 0 [pid 5263] ioctl(4, LOOP_SET_FD, 3 [pid 5273] <... close resumed>) = 0 [pid 5272] symlink("/dev/binderfs", "./binderfs" [pid 5263] <... ioctl resumed>) = 0 [pid 5273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5272] <... symlink resumed>) = 0 [pid 5273] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5272] <... futex resumed>) = 0 [pid 5273] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5272] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5273] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5272] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5273] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5272] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5273] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5263] close(3 [pid 5272] <... mmap resumed>) = 0x7f91a5087000 [pid 5272] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5263] <... close resumed>) = 0 [pid 5263] close(4 [pid 5273] <... mmap resumed>) = 0x7f91a5087000 [pid 5272] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5263] <... close resumed>) = 0 [pid 5273] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5272] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5263] mkdir("./file2", 0777 [pid 5273] <... mprotect resumed>) = 0 [pid 5272] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5263] <... mkdir resumed>) = 0 [pid 5273] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5263] mount("/dev/loop3", "./file2", "jfs", 0, ""./strace-static-x86_64: Process 5274 attached [pid 5273] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5274] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5273] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5272] <... clone3 resumed> => {parent_tid=[5274]}, 88) = 5274 [pid 5274] <... rseq resumed>) = 0 [pid 5272] rt_sigprocmask(SIG_SETMASK, [], [pid 5274] set_robust_list(0x7f91a50a79a0, 24 [pid 5273] <... clone3 resumed> => {parent_tid=[5275]}, 88) = 5275 [pid 5272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5274] <... set_robust_list resumed>) = 0 [pid 5273] rt_sigprocmask(SIG_SETMASK, [], [pid 5272] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] rt_sigprocmask(SIG_SETMASK, [], [pid 5273] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5272] <... futex resumed>) = 0 [pid 5274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5273] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5275 attached [pid 5274] memfd_create("syzkaller", 0 [pid 5273] <... futex resumed>) = 0 [pid 5263] <... mount resumed>) = 0 [pid 5275] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5274] <... memfd_create resumed>) = 3 [pid 5273] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5263] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5275] <... rseq resumed>) = 0 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5263] <... openat resumed>) = 3 [pid 5275] set_robust_list(0x7f91a50a79a0, 24 [pid 5274] <... mmap resumed>) = 0x7f919cc00000 [pid 5263] chdir("./file2" [pid 5275] <... set_robust_list resumed>) = 0 [pid 5263] <... chdir resumed>) = 0 [pid 5275] rt_sigprocmask(SIG_SETMASK, [], [pid 5263] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5263] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5275] memfd_create("syzkaller", 0 [pid 5263] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... memfd_create resumed>) = 3 [pid 5263] <... futex resumed>) = 1 [pid 5262] <... futex resumed>) = 0 [pid 5275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5263] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... mmap resumed>) = 0x7f919cc00000 [ 60.243645][ T5263] loop3: detected capacity change from 0 to 32768 [pid 5263] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5262] <... futex resumed>) = 0 [pid 5263] rename("./file2", "./file1" [pid 5262] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5262] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5262] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5262] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5262] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5276]}, 88) = 5276 [pid 5262] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5262] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 60.302176][ T5263] ERROR: (device loop3): diWrite: ixpxd invalid [ 60.302176][ T5263] [ 60.333124][ T5263] ERROR: (device loop3): remounting filesystem as read-only [pid 5262] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5276 attached [pid 5263] <... rename resumed>) = -1 EIO (Input/output error) [pid 5276] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5268] <... write resumed>) = 16777216 [pid 5276] <... rseq resumed>) = 0 [pid 5263] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] set_robust_list(0x7f91a50869a0, 24 [pid 5263] <... futex resumed>) = 0 [pid 5276] <... set_robust_list resumed>) = 0 [pid 5263] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5276] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5276] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5276] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5268] munmap(0x7f919cc00000, 138412032 [pid 5276] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5276] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5262] <... futex resumed>) = 0 [pid 5276] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5262] exit_group(0 [pid 5276] <... futex resumed>) = ? [pid 5263] <... futex resumed>) = ? [pid 5262] <... exit_group resumed>) = ? [pid 5276] +++ exited with 0 +++ [pid 5263] +++ exited with 0 +++ [pid 5262] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5262, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=15 /* 0.15 s */} --- [pid 5059] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 60.365891][ T5263] ERROR: (device loop3): txAbort: [ 60.365891][ T5263] [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./11/binderfs") = 0 [pid 5059] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5269] <... write resumed>) = 16777216 [pid 5268] <... munmap resumed>) = 0 [pid 5268] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5269] munmap(0x7f919cc00000, 138412032 [pid 5268] <... openat resumed>) = 4 [pid 5059] <... umount2 resumed>) = 0 [pid 5268] ioctl(4, LOOP_SET_FD, 3 [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./11/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./11/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5269] <... munmap resumed>) = 0 [pid 5268] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5269] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5268] close(3 [pid 5059] close(4 [pid 5268] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5268] close(4 [pid 5059] rmdir("./11/file2" [pid 5268] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5268] mkdir("./file2", 0777 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./11" [pid 5268] <... mkdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./12", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5268] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5269] <... openat resumed>) = 4 [pid 5269] ioctl(4, LOOP_SET_FD, 3 [pid 5268] <... mount resumed>) = 0 [pid 5268] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5268] chdir("./file2") = 0 [pid 5268] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5268] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5267] <... futex resumed>) = 0 [ 60.454592][ T5268] loop4: detected capacity change from 0 to 32768 [ 60.492572][ T5269] loop0: detected capacity change from 0 to 32768 [pid 5268] rename("./file2", "./file1" [pid 5267] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... ioctl resumed>) = 0 [pid 5269] close(3 [pid 5275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5269] <... close resumed>) = 0 [pid 5269] close(4 [pid 5267] <... futex resumed>) = 0 [pid 5269] <... close resumed>) = 0 [pid 5267] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] mkdir("./file2", 0777) = 0 [ 60.521423][ T5268] ERROR: (device loop4): diWrite: ixpxd invalid [ 60.521423][ T5268] [ 60.560971][ T5268] ERROR: (device loop4): remounting filesystem as read-only [pid 5269] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5267] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5267] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5269] <... mount resumed>) = 0 [pid 5267] <... mmap resumed>) = 0x7f91a5066000 [pid 5269] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5267] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5269] <... openat resumed>) = 3 [pid 5267] <... mprotect resumed>) = 0 [pid 5269] chdir("./file2" [pid 5267] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5269] <... chdir resumed>) = 0 [pid 5267] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5269] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5267] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5269] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5277 attached [pid 5277] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5267] <... clone3 resumed> => {parent_tid=[5277]}, 88) = 5277 [pid 5269] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5269] <... futex resumed>) = 1 [pid 5267] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... futex resumed>) = 0 [pid 5277] <... rseq resumed>) = 0 [pid 5269] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5268] <... rename resumed>) = -1 EIO (Input/output error) [pid 5268] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... futex resumed>) = 0 [pid 5269] rename("./file2", "./file1" [pid 5266] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] set_robust_list(0x7f91a50869a0, 24 [pid 5268] <... futex resumed>) = 0 [ 60.584952][ T5268] ERROR: (device loop4): txAbort: [ 60.584952][ T5268] [pid 5268] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] <... set_robust_list resumed>) = 0 [pid 5277] rt_sigprocmask(SIG_SETMASK, [], [pid 5267] <... futex resumed>) = 0 [pid 5277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5267] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5277] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5277] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5277] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5267] <... futex resumed>) = 0 [pid 5277] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5267] exit_group(0 [pid 5277] <... futex resumed>) = ? [pid 5268] <... futex resumed>) = ? [pid 5267] <... exit_group resumed>) = ? [pid 5277] +++ exited with 0 +++ [pid 5268] +++ exited with 0 +++ [pid 5267] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5267, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=13 /* 0.13 s */} --- [pid 5060] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5269] <... rename resumed>) = -1 EIO (Input/output error) [pid 5266] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5269] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5266] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5269] <... futex resumed>) = 1 [pid 5269] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5269] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5266] <... futex resumed>) = 0 [pid 5266] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=49000000} [pid 5269] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5269] <... futex resumed>) = 0 [pid 5269] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] exit_group(0 [pid 5269] <... futex resumed>) = ? [pid 5266] <... exit_group resumed>) = ? [pid 5269] +++ exited with 0 +++ [pid 5266] +++ exited with 0 +++ [pid 5060] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5266, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5056] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(3, "", [pid 5056] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] newfstatat(3, "", [pid 5060] getdents64(3, [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] getdents64(3, [pid 5060] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5060] unlink("./11/binderfs" [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./12/binderfs") = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5056] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [ 60.642209][ T5269] ERROR: (device loop0): diWrite: ixpxd invalid [ 60.642209][ T5269] [ 60.652080][ T5269] ERROR: (device loop0): remounting filesystem as read-only [ 60.681547][ T5269] ERROR: (device loop0): txAbort: [ 60.681547][ T5269] [pid 5060] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = 0 [pid 5274] <... write resumed>) = 16777216 [pid 5271] <... write resumed>) = 16777216 [pid 5271] munmap(0x7f919cc00000, 138412032 [pid 5274] munmap(0x7f919cc00000, 138412032 [pid 5271] <... munmap resumed>) = 0 [pid 5056] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./12/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./12/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./12/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./12") = 0 [pid 5056] mkdir("./13", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5271] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5274] <... munmap resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5271] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5278 attached [pid 5271] ioctl(4, LOOP_SET_FD, 3 [pid 5278] set_robust_list(0x5555565206a0, 24 [pid 5275] <... write resumed>) = 16777216 [pid 5274] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5060] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5278 [pid 5278] <... set_robust_list resumed>) = 0 [pid 5275] munmap(0x7f919cc00000, 138412032 [pid 5274] <... openat resumed>) = 4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5278] chdir("./12" [pid 5275] <... munmap resumed>) = 0 [pid 5271] <... ioctl resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./11/file2", [pid 5278] <... chdir resumed>) = 0 [pid 5278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5275] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5274] ioctl(4, LOOP_SET_FD, 3 [pid 5271] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5278] <... prctl resumed>) = 0 [pid 5278] setpgid(0, 0) = 0 [pid 5271] <... close resumed>) = 0 [pid 5060] umount2("./11/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5271] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] openat(AT_FDCWD, "./11/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5271] <... close resumed>) = 0 [pid 5275] <... openat resumed>) = 4 [pid 5271] mkdir("./file2", 0777 [pid 5060] <... openat resumed>) = 4 [pid 5278] <... openat resumed>) = 3 [pid 5271] <... mkdir resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5278] write(3, "1000", 4 [pid 5275] ioctl(4, LOOP_SET_FD, 3 [pid 5271] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5278] <... write resumed>) = 4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5278] close(3 [pid 5060] getdents64(4, [pid 5278] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5278] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] getdents64(4, [pid 5278] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5278] <... futex resumed>) = 0 [pid 5060] close(4 [pid 5278] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./11/file2" [pid 5278] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5274] <... ioctl resumed>) = 0 [pid 5274] close(3) = 0 [pid 5274] close(4) = 0 [pid 5274] mkdir("./file2", 0777 [pid 5278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5274] <... mkdir resumed>) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5278] <... mmap resumed>) = 0x7f91a5087000 [pid 5060] <... close resumed>) = 0 [pid 5278] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5060] rmdir("./11" [pid 5278] <... mprotect resumed>) = 0 [pid 5274] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5278] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... rmdir resumed>) = 0 [pid 5278] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] mkdir("./12", 0777 [pid 5278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5278] <... clone3 resumed> => {parent_tid=[5279]}, 88) = 5279 [pid 5278] rt_sigprocmask(SIG_SETMASK, [], [pid 5275] <... ioctl resumed>) = 0 [pid 5274] <... mount resumed>) = 0 [pid 5271] <... mount resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5275] close(3 [pid 5274] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5271] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5278] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... close resumed>) = 0 [pid 5274] <... openat resumed>) = 3 [pid 5274] chdir("./file2" [pid 5278] <... futex resumed>) = 0 [pid 5275] close(4 [pid 5274] <... chdir resumed>) = 0 [pid 5271] <... openat resumed>) = 3 [pid 5278] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5275] <... close resumed>) = 0 [pid 5274] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5271] chdir("./file2" [pid 5275] mkdir("./file2", 0777 [pid 5274] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5279 attached [pid 5274] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5274] <... futex resumed>) = 1 [pid 5279] <... rseq resumed>) = 0 [pid 5275] <... mkdir resumed>) = 0 [pid 5274] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] <... futex resumed>) = 0 [pid 5271] <... chdir resumed>) = 0 [ 60.776631][ T5271] loop2: detected capacity change from 0 to 32768 [ 60.802777][ T5274] loop5: detected capacity change from 0 to 32768 [ 60.813512][ T5275] loop1: detected capacity change from 0 to 32768 [pid 5279] set_robust_list(0x7f91a50a79a0, 24 [pid 5275] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5272] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5279] <... set_robust_list resumed>) = 0 [pid 5279] rt_sigprocmask(SIG_SETMASK, [], [pid 5274] <... futex resumed>) = 0 [pid 5272] <... futex resumed>) = 1 [pid 5271] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5274] rename("./file2", "./file1" [pid 5272] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] memfd_create("syzkaller", 0) = 3 [pid 5271] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5270] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5271] rename("./file2", "./file1" [pid 5270] <... futex resumed>) = 0 [pid 5270] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5279] <... mmap resumed>) = 0x7f919cc00000 [ 60.842394][ T5274] ERROR: (device loop5): diWrite: ixpxd invalid [ 60.842394][ T5274] [ 60.855781][ T5271] ERROR: (device loop2): diWrite: ixpxd invalid [ 60.855781][ T5271] [ 60.864035][ T5274] ERROR: (device loop5): remounting filesystem as read-only [pid 5272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5272] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5272] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5272] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5272] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5280 attached [pid 5275] <... mount resumed>) = 0 [pid 5275] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5275] chdir("./file2" [pid 5280] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5275] <... chdir resumed>) = 0 [pid 5272] <... clone3 resumed> => {parent_tid=[5280]}, 88) = 5280 [pid 5280] <... rseq resumed>) = 0 [pid 5280] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5272] rt_sigprocmask(SIG_SETMASK, [], [pid 5280] rt_sigprocmask(SIG_SETMASK, [], [pid 5275] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5272] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] mkdir(".", 0777 [pid 5272] <... futex resumed>) = 0 [pid 5270] <... futex resumed>) = 0 [pid 5272] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5280] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5280] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5275] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5271] <... rename resumed>) = -1 EIO (Input/output error) [pid 5270] <... mmap resumed>) = 0x7f91a5066000 [pid 5270] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5280] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5275] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... mprotect resumed>) = 0 [pid 5280] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 1 [pid 5273] <... futex resumed>) = 0 [pid 5271] <... futex resumed>) = 0 [pid 5270] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5275] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... futex resumed>) = 1 [pid 5275] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = 1 [pid 5272] <... futex resumed>) = 0 [pid 5271] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] <... rt_sigprocmask resumed>[], 8) = 0 [ 60.889323][ T5271] ERROR: (device loop2): remounting filesystem as read-only [ 60.891330][ T5274] ERROR: (device loop5): txAbort: [ 60.891330][ T5274] [ 60.921087][ T5271] ERROR: (device loop2): txAbort: [ 60.921087][ T5271] [pid 5280] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5275] rename("./file2", "./file1" [pid 5273] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5270] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5281 attached [pid 5281] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5270] <... clone3 resumed> => {parent_tid=[5281]}, 88) = 5281 [pid 5281] <... rseq resumed>) = 0 [pid 5270] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] close(3 [pid 5281] set_robust_list(0x7f91a50869a0, 24 [pid 5270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... close resumed>) = 0 [pid 5281] <... set_robust_list resumed>) = 0 [pid 5270] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5281] rt_sigprocmask(SIG_SETMASK, [], [pid 5270] <... futex resumed>) = 0 [pid 5270] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5282 [pid 5281] mkdir(".", 0777./strace-static-x86_64: Process 5282 attached [pid 5282] set_robust_list(0x5555565206a0, 24) = 0 [pid 5282] chdir("./13") = 0 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5281] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5282] <... prctl resumed>) = 0 [pid 5281] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5282] setpgid(0, 0) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5281] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5282] write(3, "1000", 4 [pid 5281] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... write resumed>) = 4 [pid 5281] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5282] close(3 [pid 5281] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] <... rename resumed>) = -1 EIO (Input/output error) [pid 5270] exit_group(0 [pid 5282] <... close resumed>) = 0 [pid 5282] symlink("/dev/binderfs", "./binderfs" [pid 5271] <... futex resumed>) = ? [pid 5270] <... exit_group resumed>) = ? [pid 5282] <... symlink resumed>) = 0 [pid 5281] <... futex resumed>) = ? [pid 5274] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] +++ exited with 0 +++ [pid 5282] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5272] exit_group(0 [pid 5282] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5280] <... futex resumed>) = ? [pid 5272] <... exit_group resumed>) = ? [pid 5282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5280] +++ exited with 0 +++ [pid 5282] <... mmap resumed>) = 0x7f91a5087000 [ 60.960541][ T5275] ERROR: (device loop1): diWrite: ixpxd invalid [ 60.960541][ T5275] [ 60.970005][ T5274] ERROR: (device loop5): remounting filesystem as read-only [ 60.978796][ T5275] ERROR: (device loop1): remounting filesystem as read-only [ 61.004658][ T5275] ERROR: (device loop1): txAbort: [pid 5282] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5282] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5281] +++ exited with 0 +++ [pid 5274] <... futex resumed>) = ? [pid 5270] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5270, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5282] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5282] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5283 attached => {parent_tid=[5283]}, 88) = 5283 [pid 5283] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5282] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] set_robust_list(0x7f91a50a79a0, 24 [pid 5282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] <... set_robust_list resumed>) = 0 [pid 5282] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] rt_sigprocmask(SIG_SETMASK, [], [pid 5282] <... futex resumed>) = 0 [pid 5283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5282] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] <... openat resumed>) = 3 [pid 5283] memfd_create("syzkaller", 0 [pid 5274] +++ exited with 0 +++ [pid 5273] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5272] +++ exited with 0 +++ [pid 5058] newfstatat(3, "", [pid 5283] <... memfd_create resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5272, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5273] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] getdents64(3, [pid 5283] <... mmap resumed>) = 0x7f919cc00000 [pid 5273] <... futex resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5275] <... rename resumed>) = -1 EIO (Input/output error) [pid 5273] <... mmap resumed>) = 0x7f91a5066000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5273] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5058] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5063] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5275] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] <... mprotect resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5275] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5063] newfstatat(3, "", [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5273] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5284 attached [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] unlink("./12/binderfs" [pid 5273] <... clone3 resumed> => {parent_tid=[5284]}, 88) = 5284 [pid 5058] <... unlink resumed>) = 0 [pid 5284] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [ 61.004658][ T5275] [pid 5273] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] getdents64(3, [pid 5284] <... rseq resumed>) = 0 [pid 5273] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] set_robust_list(0x7f91a50869a0, 24 [pid 5273] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5284] <... set_robust_list resumed>) = 0 [pid 5284] rt_sigprocmask(SIG_SETMASK, [], [pid 5273] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5284] mkdir(".", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5284] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5284] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./12/binderfs") = 0 [pid 5063] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5284] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5284] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5284] <... futex resumed>) = 1 [pid 5284] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] exit_group(0 [pid 5284] <... futex resumed>) = ? [pid 5273] <... exit_group resumed>) = ? [pid 5284] +++ exited with 0 +++ [pid 5275] <... futex resumed>) = ? [pid 5275] +++ exited with 0 +++ [pid 5273] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5273, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5057] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./12/binderfs") = 0 [pid 5057] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./12/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./12/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./12/file2") = 0 [pid 5063] getdents64(3, [pid 5058] newfstatat(AT_FDCWD, "./12/file2", [pid 5057] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./12") = 0 [pid 5063] mkdir("./13", 0777 [pid 5058] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... ioctl resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] close(3 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./12/file2", [pid 5060] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] openat(AT_FDCWD, "./12/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 5058] newfstatat(4, "", [pid 5057] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5285 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] openat(AT_FDCWD, "./12/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5285 attached [pid 5285] set_robust_list(0x5555565206a0, 24 [pid 5058] getdents64(4, [pid 5057] <... openat resumed>) = 4 [pid 5285] <... set_robust_list resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] newfstatat(4, "", [pid 5285] chdir("./12" [pid 5058] getdents64(4, [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] getdents64(4, [pid 5058] close(4 [pid 5285] <... chdir resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] rmdir("./12/file2" [pid 5057] getdents64(4, [pid 5285] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5285] setpgid(0, 0 [pid 5058] getdents64(3, [pid 5057] close(4 [pid 5285] <... setpgid resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] <... close resumed>) = 0 [pid 5285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5058] close(3 [pid 5057] rmdir("./12/file2" [pid 5285] <... openat resumed>) = 3 [pid 5058] <... close resumed>) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5285] write(3, "1000", 4) = 4 [pid 5285] close(3) = 0 [pid 5285] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5285] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5285] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5285] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5285] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5285] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5285] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5286 attached [pid 5058] rmdir("./12" [pid 5057] getdents64(3, [pid 5285] <... clone3 resumed> => {parent_tid=[5286]}, 88) = 5286 [pid 5285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5285] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... rmdir resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5285] <... futex resumed>) = 0 [pid 5285] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] close(3) = 0 [pid 5286] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5057] rmdir("./12") = 0 [pid 5286] <... rseq resumed>) = 0 [pid 5286] set_robust_list(0x7f91a50a79a0, 24 [pid 5058] mkdir("./13", 0777 [pid 5286] <... set_robust_list resumed>) = 0 [pid 5286] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] <... mkdir resumed>) = 0 [pid 5286] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5286] memfd_create("syzkaller", 0 [pid 5057] mkdir("./13", 0777) = 0 [pid 5286] <... memfd_create resumed>) = 3 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5058] <... openat resumed>) = 3 [pid 5057] <... openat resumed>) = 3 [pid 5286] <... mmap resumed>) = 0x7f919cc00000 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5279] <... write resumed>) = 16777216 [pid 5279] munmap(0x7f919cc00000, 138412032) = 0 [pid 5279] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5279] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5279] close(3) = 0 [pid 5279] close(4) = 0 [pid 5279] mkdir("./file2", 0777) = 0 [ 61.343095][ T5279] loop3: detected capacity change from 0 to 32768 [pid 5279] mount("/dev/loop3", "./file2", "jfs", 0, "") = 0 [pid 5279] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5279] chdir("./file2") = 0 [pid 5279] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5279] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5278] <... futex resumed>) = 0 [pid 5278] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] rename("./file2", "./file1" [pid 5278] <... futex resumed>) = 0 [ 61.406520][ T5279] ERROR: (device loop3): diWrite: ixpxd invalid [ 61.406520][ T5279] [ 61.425019][ T5279] ERROR: (device loop3): remounting filesystem as read-only [pid 5278] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5283] <... write resumed>) = 16777216 [pid 5278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5283] munmap(0x7f919cc00000, 138412032 [pid 5278] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5278] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5278] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5287 attached => {parent_tid=[5287]}, 88) = 5287 [pid 5287] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5278] rt_sigprocmask(SIG_SETMASK, [], [pid 5287] <... rseq resumed>) = 0 [pid 5278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5287] set_robust_list(0x7f91a50869a0, 24 [pid 5278] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... set_robust_list resumed>) = 0 [pid 5278] <... futex resumed>) = 0 [pid 5287] rt_sigprocmask(SIG_SETMASK, [], [pid 5286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5278] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5287] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5287] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5287] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5278] <... futex resumed>) = 0 [pid 5287] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5283] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5057] <... ioctl resumed>) = 0 [ 61.455060][ T5279] ERROR: (device loop3): txAbort: [ 61.455060][ T5279] [ 61.487991][ T5279] ERROR: (device loop3): remounting filesystem as read-only [pid 5283] <... openat resumed>) = 4 [pid 5283] ioctl(4, LOOP_SET_FD, 3 [pid 5279] <... rename resumed>) = -1 EIO (Input/output error) [pid 5063] close(3 [pid 5058] <... ioctl resumed>) = 0 [pid 5057] close(3 [pid 5063] <... close resumed>) = 0 [pid 5279] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] close(3 [pid 5057] <... close resumed>) = 0 [pid 5278] exit_group(0) = ? [pid 5287] <... futex resumed>) = ? [pid 5058] <... close resumed>) = 0 [pid 5287] +++ exited with 0 +++ [pid 5279] <... futex resumed>) = ? [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5288 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5290 attached ./strace-static-x86_64: Process 5289 attached ./strace-static-x86_64: Process 5288 attached [pid 5283] <... ioctl resumed>) = 0 [pid 5279] +++ exited with 0 +++ [pid 5278] +++ exited with 0 +++ [pid 5289] set_robust_list(0x5555565206a0, 24 [pid 5288] set_robust_list(0x5555565206a0, 24 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5289 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5290 [pid 5289] <... set_robust_list resumed>) = 0 [pid 5288] <... set_robust_list resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5278, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=19 /* 0.19 s */} --- [pid 5289] chdir("./13" [pid 5288] chdir("./13" [pid 5059] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5289] <... chdir resumed>) = 0 [pid 5288] <... chdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5290] set_robust_list(0x5555565206a0, 24 [pid 5289] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5290] <... set_robust_list resumed>) = 0 [pid 5289] <... prctl resumed>) = 0 [pid 5288] <... prctl resumed>) = 0 [pid 5283] close(3 [pid 5059] <... openat resumed>) = 3 [pid 5290] chdir("./13" [pid 5289] setpgid(0, 0 [pid 5288] setpgid(0, 0 [pid 5283] <... close resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 5290] <... chdir resumed>) = 0 [pid 5289] <... setpgid resumed>) = 0 [pid 5288] <... setpgid resumed>) = 0 [pid 5283] close(4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5290] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5283] <... close resumed>) = 0 [pid 5059] getdents64(3, [pid 5290] <... prctl resumed>) = 0 [pid 5289] <... openat resumed>) = 3 [pid 5288] <... openat resumed>) = 3 [pid 5283] mkdir("./file2", 0777 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5290] setpgid(0, 0 [pid 5289] write(3, "1000", 4 [pid 5288] write(3, "1000", 4 [pid 5283] <... mkdir resumed>) = 0 [pid 5059] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5290] <... setpgid resumed>) = 0 [ 61.507217][ T5283] loop0: detected capacity change from 0 to 32768 [pid 5289] <... write resumed>) = 4 [pid 5288] <... write resumed>) = 4 [pid 5283] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5289] close(3) = 0 [pid 5289] symlink("/dev/binderfs", "./binderfs" [pid 5290] <... openat resumed>) = 3 [pid 5289] <... symlink resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5289] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] write(3, "1000", 4 [pid 5289] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5289] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5290] <... write resumed>) = 4 [pid 5289] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] unlink("./12/binderfs" [pid 5289] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5290] close(3 [pid 5289] <... mmap resumed>) = 0x7f91a5087000 [pid 5288] close(3 [pid 5059] <... unlink resumed>) = 0 [pid 5290] <... close resumed>) = 0 [pid 5289] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5288] <... close resumed>) = 0 [pid 5290] symlink("/dev/binderfs", "./binderfs" [pid 5289] <... mprotect resumed>) = 0 [pid 5288] symlink("/dev/binderfs", "./binderfs" [pid 5059] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5290] <... symlink resumed>) = 0 [pid 5288] <... symlink resumed>) = 0 [pid 5290] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] <... futex resumed>) = 0 [pid 5289] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5288] <... futex resumed>) = 0 [pid 5290] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5289] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5288] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5290] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5288] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5291 attached [pid 5290] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5288] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... umount2 resumed>) = 0 [pid 5291] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5289] <... clone3 resumed> => {parent_tid=[5291]}, 88) = 5291 [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5291] <... rseq resumed>) = 0 [pid 5290] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5289] rt_sigprocmask(SIG_SETMASK, [], [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5291] set_robust_list(0x7f91a50a79a0, 24 [pid 5290] <... mmap resumed>) = 0x7f91a5087000 [pid 5289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5288] <... mmap resumed>) = 0x7f91a5087000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5291] <... set_robust_list resumed>) = 0 [pid 5290] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5289] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5283] <... mount resumed>) = 0 [pid 5291] rt_sigprocmask(SIG_SETMASK, [], [pid 5290] <... mprotect resumed>) = 0 [pid 5288] <... mprotect resumed>) = 0 [pid 5283] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./12/file2", [pid 5291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5290] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5289] <... futex resumed>) = 0 [pid 5288] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5283] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5291] memfd_create("syzkaller", 0 [pid 5290] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5289] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5288] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5283] chdir("./file2" [pid 5059] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5291] <... memfd_create resumed>) = 3 [pid 5290] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5283] <... chdir resumed>) = 0 [pid 5291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5283] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5291] <... mmap resumed>) = 0x7f919cc00000 [pid 5288] <... clone3 resumed> => {parent_tid=[5293]}, 88) = 5293 [pid 5283] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5290] <... clone3 resumed> => {parent_tid=[5292]}, 88) = 5292 [pid 5288] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] openat(AT_FDCWD, "./12/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5290] rt_sigprocmask(SIG_SETMASK, [], [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5283] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5292 attached [pid 5290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5288] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = 1 [pid 5282] <... futex resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5292] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5290] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = 0 [pid 5282] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] newfstatat(4, "", [pid 5292] <... rseq resumed>) = 0 [pid 5290] <... futex resumed>) = 0 [pid 5288] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5282] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5292] set_robust_list(0x7f91a50a79a0, 24 [pid 5290] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5283] rename("./file2", "./file1" [pid 5282] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] getdents64(4, ./strace-static-x86_64: Process 5293 attached [pid 5292] <... set_robust_list resumed>) = 0 [pid 5293] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5292] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./12/file2" [pid 5292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5293] <... rseq resumed>) = 0 [pid 5292] memfd_create("syzkaller", 0 [pid 5059] getdents64(3, [pid 5293] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5293] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./12" [pid 5293] memfd_create("syzkaller", 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./13", 0777 [pid 5293] <... memfd_create resumed>) = 3 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5292] <... memfd_create resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 5292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5292] <... mmap resumed>) = 0x7f919cc00000 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5293] <... mmap resumed>) = 0x7f919cc00000 [pid 5282] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5282] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5282] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5282] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5282] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5294]}, 88) = 5294 [pid 5282] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 61.585820][ T5283] ERROR: (device loop0): diWrite: ixpxd invalid [ 61.585820][ T5283] [ 61.611733][ T5283] ERROR: (device loop0): remounting filesystem as read-only ./strace-static-x86_64: Process 5294 attached [pid 5282] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5282] <... futex resumed>) = 0 [pid 5294] <... rseq resumed>) = 0 [pid 5286] <... write resumed>) = 16777216 [pid 5283] <... rename resumed>) = -1 EIO (Input/output error) [pid 5282] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5294] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5294] mkdir(".", 0777 [pid 5283] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5286] munmap(0x7f919cc00000, 138412032 [pid 5283] <... futex resumed>) = 0 [pid 5283] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] <... munmap resumed>) = 0 [pid 5294] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5294] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5282] <... futex resumed>) = 0 [pid 5282] exit_group(0 [pid 5294] ???( [pid 5283] <... futex resumed>) = ? [pid 5282] <... exit_group resumed>) = ? [pid 5294] <... ??? resumed>) = ? [pid 5283] +++ exited with 0 +++ [pid 5294] +++ exited with 0 +++ [ 61.651642][ T5283] ERROR: (device loop0): txAbort: [ 61.651642][ T5283] [pid 5286] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5282] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5286] <... openat resumed>) = 4 [pid 5056] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./13/binderfs") = 0 [pid 5056] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5286] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5286] close(3 [pid 5056] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5286] <... close resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./13/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./13/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", [pid 5286] close(4 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5286] <... close resumed>) = 0 [pid 5286] mkdir("./file2", 0777 [pid 5291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5286] <... mkdir resumed>) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5286] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5056] close(4) = 0 [pid 5056] rmdir("./13/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./13") = 0 [pid 5056] mkdir("./14", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 61.751433][ T5286] loop4: detected capacity change from 0 to 32768 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5286] <... mount resumed>) = 0 [pid 5286] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5286] chdir("./file2") = 0 [pid 5286] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5286] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5285] <... futex resumed>) = 0 [pid 5285] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5285] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5286] rename("./file2", "./file1" [pid 5292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5285] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5285] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5285] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5285] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5285] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5285] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5295]}, 88) = 5295 [pid 5285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5285] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5285] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5295 attached [pid 5295] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5295] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5295] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5295] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5295] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... ioctl resumed>) = 0 [pid 5295] <... futex resumed>) = 1 [pid 5285] <... futex resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5296 ./strace-static-x86_64: Process 5296 attached [pid 5295] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 61.867587][ T5286] ERROR: (device loop4): diWrite: ixpxd invalid [ 61.867587][ T5286] [ 61.901444][ T5286] ERROR: (device loop4): remounting filesystem as read-only [ 61.908888][ T5286] ERROR: (device loop4): txAbort: [ 61.908888][ T5286] [pid 5296] set_robust_list(0x5555565206a0, 24) = 0 [pid 5296] chdir("./13") = 0 [pid 5296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5296] setpgid(0, 0) = 0 [pid 5296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5296] write(3, "1000", 4) = 4 [pid 5296] close(3) = 0 [pid 5296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5296] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5296] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5296] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5297 attached [pid 5297] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5296] <... clone3 resumed> => {parent_tid=[5297]}, 88) = 5297 [pid 5297] <... rseq resumed>) = 0 [pid 5296] rt_sigprocmask(SIG_SETMASK, [], [pid 5297] set_robust_list(0x7f91a50a79a0, 24 [pid 5296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5297] <... set_robust_list resumed>) = 0 [pid 5297] rt_sigprocmask(SIG_SETMASK, [], [pid 5296] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5296] <... futex resumed>) = 0 [pid 5297] memfd_create("syzkaller", 0) = 3 [pid 5297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5296] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5286] <... rename resumed>) = -1 EIO (Input/output error) [pid 5286] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] exit_group(0 [pid 5295] <... futex resumed>) = ? [pid 5285] <... exit_group resumed>) = ? [pid 5286] <... futex resumed>) = ? [pid 5295] +++ exited with 0 +++ [ 61.942415][ T5286] ERROR: (device loop4): remounting filesystem as read-only [pid 5286] +++ exited with 0 +++ [pid 5285] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5285, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=14 /* 0.14 s */} --- [pid 5060] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./12/binderfs") = 0 [pid 5060] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./12/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./12/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./12/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./12/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./12") = 0 [pid 5060] mkdir("./13", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5292] <... write resumed>) = 16777216 [pid 5292] munmap(0x7f919cc00000, 138412032 [pid 5291] <... write resumed>) = 16777216 [pid 5056] <... ioctl resumed>) = 0 [pid 5292] <... munmap resumed>) = 0 [pid 5291] munmap(0x7f919cc00000, 138412032 [pid 5056] close(3) = 0 [pid 5291] <... munmap resumed>) = 0 [pid 5292] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5293] <... write resumed>) = 16777216 [pid 5291] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5292] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5298 attached [pid 5292] ioctl(4, LOOP_SET_FD, 3 [pid 5298] set_robust_list(0x5555565206a0, 24) = 0 [pid 5291] <... openat resumed>) = 4 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5298 [pid 5298] chdir("./14" [pid 5291] ioctl(4, LOOP_SET_FD, 3 [pid 5298] <... chdir resumed>) = 0 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5298] setpgid(0, 0) = 0 [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5298] write(3, "1000", 4) = 4 [pid 5298] close(3) = 0 [pid 5298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5298] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5298] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5298] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5299 attached [pid 5299] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5298] <... clone3 resumed> => {parent_tid=[5299]}, 88) = 5299 [pid 5299] <... rseq resumed>) = 0 [pid 5298] rt_sigprocmask(SIG_SETMASK, [], [pid 5299] set_robust_list(0x7f91a50a79a0, 24 [pid 5298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5299] <... set_robust_list resumed>) = 0 [pid 5298] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] rt_sigprocmask(SIG_SETMASK, [], [pid 5298] <... futex resumed>) = 0 [pid 5291] <... ioctl resumed>) = 0 [pid 5299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5293] munmap(0x7f919cc00000, 138412032 [pid 5291] close(3 [pid 5299] memfd_create("syzkaller", 0 [pid 5298] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5299] <... memfd_create resumed>) = 3 [pid 5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5291] <... close resumed>) = 0 [pid 5299] <... mmap resumed>) = 0x7f919cc00000 [pid 5291] close(4) = 0 [pid 5291] mkdir("./file2", 0777 [pid 5292] <... ioctl resumed>) = 0 [pid 5291] <... mkdir resumed>) = 0 [pid 5291] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5292] close(3) = 0 [pid 5292] close(4) = 0 [pid 5292] mkdir("./file2", 0777) = 0 [pid 5292] mount("/dev/loop1", "./file2", "jfs", 0, "") = 0 [pid 5292] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5292] chdir("./file2") = 0 [pid 5292] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5292] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5290] <... futex resumed>) = 0 [pid 5292] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5290] <... futex resumed>) = 0 [ 62.156275][ T5292] loop1: detected capacity change from 0 to 32768 [ 62.164804][ T5291] loop2: detected capacity change from 0 to 32768 [pid 5292] rename("./file2", "./file1" [pid 5290] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... munmap resumed>) = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5293] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5293] close(3) = 0 [pid 5293] close(4 [pid 5291] <... mount resumed>) = 0 [pid 5290] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5293] <... close resumed>) = 0 [pid 5291] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5290] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5290] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [ 62.200391][ T5292] ERROR: (device loop1): diWrite: ixpxd invalid [ 62.200391][ T5292] [ 62.218184][ T5293] loop5: detected capacity change from 0 to 32768 [ 62.236221][ T5292] ERROR: (device loop1): remounting filesystem as read-only [pid 5290] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5293] mkdir("./file2", 0777 [pid 5291] chdir("./file2" [pid 5290] <... mprotect resumed>) = 0 [pid 5290] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5290] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5300]}, 88) = 5300 [pid 5290] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5290] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] <... chdir resumed>) = 0 [pid 5290] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5291] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5292] <... rename resumed>) = -1 EIO (Input/output error) ./strace-static-x86_64: Process 5300 attached [pid 5293] <... mkdir resumed>) = 0 [pid 5291] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5293] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5291] <... futex resumed>) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5300] <... rseq resumed>) = 0 [pid 5289] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] set_robust_list(0x7f91a50869a0, 24 [pid 5293] <... mount resumed>) = 0 [pid 5291] rename("./file2", "./file1" [pid 5289] <... futex resumed>) = 0 [pid 5293] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5289] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] chdir("./file2") = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5293] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5293] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [ 62.273643][ T5292] ERROR: (device loop1): txAbort: [ 62.273643][ T5292] [ 62.312521][ T5291] ERROR: (device loop2): diWrite: ixpxd invalid [ 62.312521][ T5291] [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] <... futex resumed>) = 0 [pid 5293] rename("./file2", "./file1" [pid 5288] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5300] <... set_robust_list resumed>) = 0 [pid 5300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5300] mkdir(".", 0777) = -1 EEXIST (File exists) [ 62.315178][ T5293] ERROR: (device loop5): diWrite: ixpxd invalid [ 62.315178][ T5293] [ 62.342422][ T5291] ERROR: (device loop2): remounting filesystem as read-only [ 62.349718][ T5291] ERROR: (device loop2): txAbort: [ 62.349718][ T5291] [ 62.363219][ T5293] ERROR: (device loop5): remounting filesystem as read-only [pid 5300] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5289] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5289] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = 0 [pid 5289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5300] <... futex resumed>) = 1 [pid 5300] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] <... mmap resumed>) = 0x7f91a5066000 [pid 5290] <... futex resumed>) = 0 [pid 5290] exit_group(0 [pid 5289] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5300] <... futex resumed>) = ? [pid 5292] <... futex resumed>) = ? [pid 5290] <... exit_group resumed>) = ? [pid 5289] <... mprotect resumed>) = 0 [pid 5292] +++ exited with 0 +++ [pid 5300] +++ exited with 0 +++ [pid 5290] +++ exited with 0 +++ [pid 5289] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5290, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=15 /* 0.15 s */} --- [pid 5289] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5301 attached [pid 5301] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5289] <... clone3 resumed> => {parent_tid=[5301]}, 88) = 5301 [pid 5301] <... rseq resumed>) = 0 [pid 5289] rt_sigprocmask(SIG_SETMASK, [], [pid 5301] set_robust_list(0x7f91a50869a0, 24 [pid 5289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5301] <... set_robust_list resumed>) = 0 [pid 5301] rt_sigprocmask(SIG_SETMASK, [], [pid 5289] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5289] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5301] mkdir(".", 0777 [pid 5289] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5288] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5288] <... futex resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5301] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5288] <... mmap resumed>) = 0x7f91a5066000 [pid 5288] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5057] <... openat resumed>) = 3 [pid 5288] <... mprotect resumed>) = 0 [pid 5301] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5288] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5057] newfstatat(3, "", [pid 5301] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5301] <... futex resumed>) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5302 attached [pid 5301] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5302] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5288] <... clone3 resumed> => {parent_tid=[5302]}, 88) = 5302 [pid 5057] getdents64(3, [pid 5302] <... rseq resumed>) = 0 [pid 5288] rt_sigprocmask(SIG_SETMASK, [], [pid 5302] set_robust_list(0x7f91a50869a0, 24 [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5302] <... set_robust_list resumed>) = 0 [pid 5288] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5302] rt_sigprocmask(SIG_SETMASK, [], [pid 5288] <... futex resumed>) = 0 [ 62.370572][ T5293] ERROR: (device loop5): txAbort: [ 62.370572][ T5293] [pid 5302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5288] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5302] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5302] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5302] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5302] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] <... futex resumed>) = 0 [pid 5057] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./13/binderfs" [pid 5291] <... rename resumed>) = -1 EIO (Input/output error) [pid 5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5293] <... rename resumed>) = -1 EIO (Input/output error) [pid 5291] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... unlink resumed>) = 0 [pid 5293] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = 0 [pid 5289] exit_group(0 [pid 5057] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5301] <... futex resumed>) = ? [pid 5293] <... futex resumed>) = 0 [pid 5289] <... exit_group resumed>) = ? [pid 5291] +++ exited with 0 +++ [pid 5288] exit_group(0 [pid 5302] <... futex resumed>) = ? [pid 5288] <... exit_group resumed>) = ? [pid 5302] +++ exited with 0 +++ [pid 5301] +++ exited with 0 +++ [pid 5289] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5289, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=23 /* 0.23 s */} --- [pid 5058] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5058] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] +++ exited with 0 +++ [pid 5288] +++ exited with 0 +++ [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5058] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./13/binderfs") = 0 [pid 5058] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5058] <... umount2 resumed>) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] <... ioctl resumed>) = 0 [pid 5058] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./13/file2", [pid 5063] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] close(3 [pid 5058] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./13/binderfs" [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... unlink resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5058] openat(AT_FDCWD, "./13/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] <... openat resumed>) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./13/file2") = 0 [pid 5063] <... umount2 resumed>) = 0 [ 62.396305][ T5291] ERROR: (device loop2): remounting filesystem as read-only [ 62.406847][ T5293] ERROR: (device loop5): remounting filesystem as read-only [pid 5058] getdents64(3, [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5303 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5303 attached [pid 5058] close(3 [pid 5303] set_robust_list(0x5555565206a0, 24 [pid 5058] <... close resumed>) = 0 [pid 5303] <... set_robust_list resumed>) = 0 [pid 5058] rmdir("./13" [pid 5303] chdir("./13" [pid 5058] <... rmdir resumed>) = 0 [pid 5057] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5303] <... chdir resumed>) = 0 [pid 5058] mkdir("./14", 0777 [pid 5303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5058] <... mkdir resumed>) = 0 [pid 5303] <... prctl resumed>) = 0 [pid 5303] setpgid(0, 0) = 0 [pid 5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5057] newfstatat(AT_FDCWD, "./13/file2", [pid 5303] <... openat resumed>) = 3 [pid 5063] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... openat resumed>) = 3 [pid 5057] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5303] write(3, "1000", 4 [pid 5063] newfstatat(AT_FDCWD, "./13/file2", [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5303] <... write resumed>) = 4 [pid 5303] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5303] <... close resumed>) = 0 [pid 5057] openat(AT_FDCWD, "./13/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5303] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... openat resumed>) = 4 [pid 5303] <... symlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(4, "", [pid 5303] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] openat(AT_FDCWD, "./13/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5303] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5303] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5057] getdents64(4, [pid 5303] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] newfstatat(4, "", [pid 5057] getdents64(4, [pid 5303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5303] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] getdents64(4, [pid 5057] close(4 [pid 5303] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5303] <... mprotect resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5057] rmdir("./13/file2" [pid 5303] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5303] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./13/file2" [pid 5303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] <... rmdir resumed>) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5303] <... clone3 resumed> => {parent_tid=[5304]}, 88) = 5304 [pid 5057] getdents64(3, ./strace-static-x86_64: Process 5304 attached [pid 5304] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3 [pid 5303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] getdents64(3, [pid 5303] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] <... close resumed>) = 0 [pid 5304] <... rseq resumed>) = 0 [pid 5057] rmdir("./13" [pid 5304] set_robust_list(0x7f91a50a79a0, 24 [pid 5303] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] close(3) = 0 [pid 5304] <... set_robust_list resumed>) = 0 [pid 5063] rmdir("./13" [pid 5057] <... rmdir resumed>) = 0 [pid 5057] mkdir("./14", 0777 [pid 5304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5304] memfd_create("syzkaller", 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5304] <... memfd_create resumed>) = 3 [pid 5304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] mkdir("./14", 0777 [pid 5057] <... mkdir resumed>) = 0 [pid 5304] <... mmap resumed>) = 0x7f919cc00000 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5297] <... write resumed>) = 16777216 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5297] munmap(0x7f919cc00000, 138412032 [pid 5057] <... openat resumed>) = 3 [pid 5297] <... munmap resumed>) = 0 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5297] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5297] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5297] close(3) = 0 [pid 5297] close(4) = 0 [pid 5297] mkdir("./file2", 0777) = 0 [pid 5297] mount("/dev/loop3", "./file2", "jfs", 0, "") = 0 [pid 5297] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5297] chdir("./file2") = 0 [pid 5297] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5297] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5296] <... futex resumed>) = 0 [pid 5297] rename("./file2", "./file1" [pid 5296] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 62.521459][ T5297] loop3: detected capacity change from 0 to 32768 [ 62.554539][ T5297] ERROR: (device loop3): diWrite: ixpxd invalid [ 62.554539][ T5297] [pid 5296] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5296] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5296] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5305]}, 88) = 5305 [pid 5296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5296] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5296] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5305 attached [pid 5305] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5305] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5305] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5305] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5305] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5296] <... futex resumed>) = 0 [ 62.591685][ T5297] ERROR: (device loop3): remounting filesystem as read-only [ 62.627009][ T5297] ERROR: (device loop3): txAbort: [ 62.627009][ T5297] [pid 5305] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5297] <... rename resumed>) = -1 EIO (Input/output error) [pid 5297] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] exit_group(0 [pid 5305] <... futex resumed>) = ? [pid 5296] <... exit_group resumed>) = ? [pid 5305] +++ exited with 0 +++ [pid 5297] <... futex resumed>) = ? [pid 5297] +++ exited with 0 +++ [pid 5296] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5296, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5059] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 62.649117][ T5297] ERROR: (device loop3): remounting filesystem as read-only [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5058] <... ioctl resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./13/binderfs" [pid 5058] close(3 [pid 5304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... unlink resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5306 attached [pid 5306] set_robust_list(0x5555565206a0, 24 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5306 [pid 5306] <... set_robust_list resumed>) = 0 [pid 5306] chdir("./14") = 0 [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] setpgid(0, 0) = 0 [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5306] write(3, "1000", 4) = 4 [pid 5306] close(3) = 0 [pid 5306] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5306] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5306] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5306] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5306] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5307]}, 88) = 5307 ./strace-static-x86_64: Process 5307 attached [pid 5306] rt_sigprocmask(SIG_SETMASK, [], [pid 5307] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5307] <... rseq resumed>) = 0 [pid 5306] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] set_robust_list(0x7f91a50a79a0, 24 [pid 5306] <... futex resumed>) = 0 [pid 5307] <... set_robust_list resumed>) = 0 [pid 5306] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5307] memfd_create("syzkaller", 0) = 3 [pid 5299] <... write resumed>) = 16777216 [pid 5307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5299] munmap(0x7f919cc00000, 138412032 [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3 [pid 5299] <... munmap resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5308 attached , child_tidptr=0x555556520690) = 5308 [pid 5308] set_robust_list(0x5555565206a0, 24) = 0 [pid 5308] chdir("./14") = 0 [pid 5308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5308] setpgid(0, 0) = 0 [pid 5308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./13/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5308] write(3, "1000", 4) = 4 [pid 5308] close(3 [pid 5059] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5308] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./13/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", [pid 5308] symlink("/dev/binderfs", "./binderfs" [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5308] <... symlink resumed>) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5308] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(4, [pid 5308] <... futex resumed>) = 0 [pid 5308] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5299] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5308] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5299] <... openat resumed>) = 4 [pid 5059] rmdir("./13/file2" [pid 5308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5059] <... rmdir resumed>) = 0 [pid 5308] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5308] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5299] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5059] getdents64(3, [pid 5308] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5309]}, 88) = 5309 [pid 5308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5308] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5309 attached [pid 5063] close(3 [pid 5309] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5059] close(3 [pid 5309] <... rseq resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5309] set_robust_list(0x7f91a50a79a0, 24 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... close resumed>) = 0 [pid 5309] <... set_robust_list resumed>) = 0 [pid 5309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5309] memfd_create("syzkaller", 0) = 3 [pid 5309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5310 [pid 5059] rmdir("./13" [pid 5309] <... mmap resumed>) = 0x7f919cc00000 ./strace-static-x86_64: Process 5310 attached [pid 5059] <... rmdir resumed>) = 0 [pid 5310] set_robust_list(0x5555565206a0, 24) = 0 [pid 5310] chdir("./14") = 0 [pid 5310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5310] setpgid(0, 0) = 0 [pid 5310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5310] write(3, "1000", 4 [pid 5299] <... ioctl resumed>) = 0 [pid 5310] <... write resumed>) = 4 [pid 5059] mkdir("./14", 0777 [pid 5299] close(3 [pid 5310] close(3) = 0 [pid 5299] <... close resumed>) = 0 [pid 5310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5299] close(4 [pid 5059] <... mkdir resumed>) = 0 [pid 5310] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... close resumed>) = 0 [pid 5310] <... futex resumed>) = 0 [pid 5299] mkdir("./file2", 0777 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5310] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5299] <... mkdir resumed>) = 0 [pid 5310] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5299] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5310] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5311]}, 88) = 5311 [pid 5310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5310] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5310] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5311 attached [pid 5311] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5311] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 62.826558][ T5299] loop0: detected capacity change from 0 to 32768 [pid 5311] memfd_create("syzkaller", 0) = 3 [pid 5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5299] <... mount resumed>) = 0 [pid 5299] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5299] chdir("./file2") = 0 [pid 5299] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5299] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] rename("./file2", "./file1" [pid 5298] <... futex resumed>) = 0 [pid 5298] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5298] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5298] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5298] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5298] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5298] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5298] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5312 attached [pid 5312] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5298] <... clone3 resumed> => {parent_tid=[5312]}, 88) = 5312 [pid 5312] <... rseq resumed>) = 0 [ 62.914145][ T5299] ERROR: (device loop0): diWrite: ixpxd invalid [ 62.914145][ T5299] [pid 5298] rt_sigprocmask(SIG_SETMASK, [], [pid 5312] set_robust_list(0x7f91a50869a0, 24 [pid 5298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5312] <... set_robust_list resumed>) = 0 [pid 5312] rt_sigprocmask(SIG_SETMASK, [], [pid 5298] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5298] <... futex resumed>) = 0 [pid 5312] mkdir(".", 0777 [pid 5298] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5312] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5312] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5312] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5312] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5298] <... futex resumed>) = 0 [pid 5312] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] <... rename resumed>) = -1 EIO (Input/output error) [pid 5299] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5298] exit_group(0 [pid 5312] <... futex resumed>) = ? [pid 5299] <... futex resumed>) = ? [pid 5298] <... exit_group resumed>) = ? [pid 5312] +++ exited with 0 +++ [pid 5299] +++ exited with 0 +++ [pid 5298] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5298, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5056] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./14/binderfs") = 0 [ 62.964303][ T5299] ERROR: (device loop0): remounting filesystem as read-only [ 62.983127][ T5299] ERROR: (device loop0): txAbort: [ 62.983127][ T5299] [pid 5056] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5056] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./14/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./14/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./14/file2") = 0 [pid 5056] getdents64(3, [pid 5304] <... write resumed>) = 16777216 [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5304] munmap(0x7f919cc00000, 138412032 [pid 5056] close(3) = 0 [pid 5056] rmdir("./14") = 0 [pid 5304] <... munmap resumed>) = 0 [pid 5056] mkdir("./15", 0777 [pid 5309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] <... mkdir resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5304] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5304] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5304] close(3) = 0 [pid 5304] close(4) = 0 [pid 5304] mkdir("./file2", 0777) = 0 [pid 5304] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5313 ./strace-static-x86_64: Process 5313 attached [pid 5313] set_robust_list(0x5555565206a0, 24) = 0 [pid 5313] chdir("./14") = 0 [pid 5313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5313] setpgid(0, 0) = 0 [pid 5313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5313] write(3, "1000", 4) = 4 [pid 5313] close(3) = 0 [pid 5313] symlink("/dev/binderfs", "./binderfs") = 0 [ 63.171986][ T5304] loop4: detected capacity change from 0 to 32768 [pid 5313] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5313] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5313] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5313] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5314]}, 88) = 5314 [pid 5313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5313] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5313] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5314 attached [pid 5314] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5304] <... mount resumed>) = 0 [pid 5314] <... rseq resumed>) = 0 [pid 5304] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5314] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5304] <... openat resumed>) = 3 [pid 5314] rt_sigprocmask(SIG_SETMASK, [], [pid 5304] chdir("./file2" [pid 5314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5304] <... chdir resumed>) = 0 [pid 5314] memfd_create("syzkaller", 0 [pid 5304] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5314] <... memfd_create resumed>) = 3 [pid 5304] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5304] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... mmap resumed>) = 0x7f919cc00000 [pid 5307] <... write resumed>) = 16777216 [pid 5307] munmap(0x7f919cc00000, 138412032 [pid 5304] <... futex resumed>) = 1 [pid 5303] <... futex resumed>) = 0 [pid 5304] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5304] rename("./file2", "./file1" [pid 5303] <... futex resumed>) = 0 [pid 5303] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5307] <... munmap resumed>) = 0 [pid 5307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 63.302323][ T5304] ERROR: (device loop4): diWrite: ixpxd invalid [ 63.302323][ T5304] [ 63.334770][ T5307] loop2: detected capacity change from 0 to 32768 [ 63.341082][ T5304] ERROR: (device loop4): remounting filesystem as read-only [pid 5307] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5307] close(3 [pid 5303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5307] <... close resumed>) = 0 [pid 5303] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] close(4 [pid 5303] <... futex resumed>) = 0 [pid 5307] <... close resumed>) = 0 [pid 5303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5307] mkdir("./file2", 0777 [pid 5303] <... mmap resumed>) = 0x7f91a5066000 [pid 5307] <... mkdir resumed>) = 0 [pid 5303] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5307] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5303] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5307] <... mount resumed>) = 0 [pid 5307] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5303] <... clone3 resumed> => {parent_tid=[5315]}, 88) = 5315 ./strace-static-x86_64: Process 5315 attached [pid 5307] <... openat resumed>) = 3 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], [pid 5315] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5307] chdir("./file2" [pid 5303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5315] <... rseq resumed>) = 0 [pid 5307] <... chdir resumed>) = 0 [pid 5303] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] set_robust_list(0x7f91a50869a0, 24 [pid 5307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5303] <... futex resumed>) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5315] <... set_robust_list resumed>) = 0 [pid 5307] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5303] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5307] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5306] <... futex resumed>) = 0 [pid 5307] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5306] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] rt_sigprocmask(SIG_SETMASK, [], [pid 5307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5306] <... futex resumed>) = 0 [pid 5315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5307] rename("./file2", "./file1" [pid 5306] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5315] mkdir(".", 0777 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5316 attached , child_tidptr=0x555556520690) = 5316 [pid 5316] set_robust_list(0x5555565206a0, 24) = 0 [pid 5315] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5315] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5315] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5315] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5316] chdir("./15" [pid 5303] <... futex resumed>) = 0 [pid 5316] <... chdir resumed>) = 0 [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5316] setpgid(0, 0) = 0 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5316] write(3, "1000", 4) = 4 [pid 5316] close(3) = 0 [pid 5316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5316] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5316] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5316] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5317 attached => {parent_tid=[5317]}, 88) = 5317 [pid 5316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5316] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5317] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5316] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5317] <... rseq resumed>) = 0 [pid 5317] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5317] memfd_create("syzkaller", 0) = 3 [pid 5317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [ 63.350537][ T5304] ERROR: (device loop4): txAbort: [ 63.350537][ T5304] [ 63.385863][ T5307] ERROR: (device loop2): diWrite: ixpxd invalid [ 63.385863][ T5307] [pid 5306] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5306] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5306] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5304] <... rename resumed>) = -1 EIO (Input/output error) [pid 5306] <... mprotect resumed>) = 0 [pid 5304] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5303] exit_group(0 [pid 5315] <... futex resumed>) = ? [pid 5306] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5304] <... futex resumed>) = ? [pid 5303] <... exit_group resumed>) = ? [pid 5315] +++ exited with 0 +++ [pid 5306] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5318]}, 88) = 5318 [pid 5306] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5318 attached NULL, 8) = 0 [pid 5306] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5306] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5318] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5304] +++ exited with 0 +++ [pid 5303] +++ exited with 0 +++ [pid 5318] <... rseq resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5303, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5318] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5318] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5318] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 63.421109][ T5304] ERROR: (device loop4): remounting filesystem as read-only [ 63.422045][ T5307] ERROR: (device loop2): remounting filesystem as read-only [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5318] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5318] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5306] <... futex resumed>) = 0 [pid 5318] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5307] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5307] <... futex resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5307] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./13/binderfs" [pid 5306] exit_group(0 [pid 5318] <... futex resumed>) = ? [pid 5307] <... futex resumed>) = ? [pid 5306] <... exit_group resumed>) = ? [pid 5060] <... unlink resumed>) = 0 [pid 5318] +++ exited with 0 +++ [pid 5307] +++ exited with 0 +++ [pid 5306] +++ exited with 0 +++ [pid 5060] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5306, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [ 63.465327][ T5307] ERROR: (device loop2): txAbort: [ 63.465327][ T5307] [pid 5058] restart_syscall(<... resuming interrupted clone ...> [pid 5060] <... umount2 resumed>) = 0 [pid 5058] <... restart_syscall resumed>) = 0 [pid 5058] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./14/binderfs") = 0 [pid 5058] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5060] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./13/file2", [pid 5058] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./13/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] newfstatat(AT_FDCWD, "./14/file2", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] openat(AT_FDCWD, "./13/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 4 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(4, "", [pid 5058] openat(AT_FDCWD, "./14/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] <... openat resumed>) = 4 [pid 5060] getdents64(4, [pid 5058] newfstatat(4, "", [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5058] getdents64(4, [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] close(4 [pid 5058] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./13/file2" [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4 [pid 5060] <... rmdir resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5060] getdents64(3, [pid 5058] rmdir("./14/file2" [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5060] close(3) = 0 [pid 5058] getdents64(3, [pid 5060] rmdir("./13") = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3 [pid 5060] mkdir("./14", 0777 [pid 5058] <... close resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5058] rmdir("./14") = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5309] <... write resumed>) = 16777216 [pid 5060] <... openat resumed>) = 3 [pid 5058] mkdir("./15", 0777 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5058] <... mkdir resumed>) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5309] munmap(0x7f919cc00000, 138412032 [pid 5314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5309] <... munmap resumed>) = 0 [pid 5309] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5309] ioctl(4, LOOP_SET_FD, 3 [pid 5317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5311] <... write resumed>) = 16777216 [pid 5309] <... ioctl resumed>) = 0 [pid 5311] munmap(0x7f919cc00000, 138412032 [pid 5309] close(3 [pid 5311] <... munmap resumed>) = 0 [pid 5309] <... close resumed>) = 0 [pid 5309] close(4 [pid 5311] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5309] <... close resumed>) = 0 [pid 5311] <... openat resumed>) = 4 [ 63.585846][ T5309] loop1: detected capacity change from 0 to 32768 [pid 5309] mkdir("./file2", 0777 [pid 5311] ioctl(4, LOOP_SET_FD, 3 [pid 5309] <... mkdir resumed>) = 0 [pid 5309] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5311] <... ioctl resumed>) = 0 [pid 5311] close(3) = 0 [pid 5311] close(4 [pid 5309] <... mount resumed>) = 0 [pid 5311] <... close resumed>) = 0 [pid 5309] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5311] mkdir("./file2", 0777 [pid 5309] <... openat resumed>) = 3 [pid 5309] chdir("./file2" [pid 5311] <... mkdir resumed>) = 0 [pid 5309] <... chdir resumed>) = 0 [pid 5311] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5309] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5309] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5309] rename("./file2", "./file1" [pid 5308] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] <... write resumed>) = 16777216 [pid 5314] munmap(0x7f919cc00000, 138412032 [pid 5311] <... mount resumed>) = 0 [pid 5311] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5311] chdir("./file2") = 0 [pid 5311] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5311] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5310] <... futex resumed>) = 0 [ 63.656408][ T5311] loop5: detected capacity change from 0 to 32768 [ 63.686316][ T5309] ERROR: (device loop1): diWrite: ixpxd invalid [ 63.686316][ T5309] [pid 5311] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5310] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5310] <... futex resumed>) = 0 [pid 5311] rename("./file2", "./file1" [pid 5310] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] <... munmap resumed>) = 0 [pid 5308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5308] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5308] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5308] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5319]}, 88) = 5319 [pid 5308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5308] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5319 attached [pid 5319] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5319] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5314] <... openat resumed>) = 4 [pid 5309] <... rename resumed>) = -1 EIO (Input/output error) [pid 5314] ioctl(4, LOOP_SET_FD, 3 [ 63.720382][ T5311] ERROR: (device loop5): diWrite: ixpxd invalid [ 63.720382][ T5311] [ 63.741468][ T5309] ERROR: (device loop1): remounting filesystem as read-only [ 63.749743][ T5309] ERROR: (device loop1): txAbort: [ 63.749743][ T5309] [ 63.757315][ T5311] ERROR: (device loop5): remounting filesystem as read-only [pid 5309] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5319] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5319] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5319] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] exit_group(0 [pid 5319] <... futex resumed>) = ? [pid 5308] <... exit_group resumed>) = ? [pid 5319] +++ exited with 0 +++ [pid 5314] <... ioctl resumed>) = 0 [pid 5310] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5309] <... futex resumed>) = ? [pid 5310] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5314] close(3 [pid 5310] <... mmap resumed>) = 0x7f91a5066000 [pid 5309] +++ exited with 0 +++ [pid 5308] +++ exited with 0 +++ [pid 5314] <... close resumed>) = 0 [pid 5310] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5314] close(4 [pid 5310] <... mprotect resumed>) = 0 [pid 5310] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5308, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5314] <... close resumed>) = 0 [pid 5310] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5057] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5320]}, 88) = 5320 [pid 5310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5310] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5310] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5311] <... rename resumed>) = -1 EIO (Input/output error) [pid 5311] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5320 attached [pid 5320] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5320] set_robust_list(0x7f91a50869a0, 24 [pid 5314] mkdir("./file2", 0777 [pid 5060] close(3 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5320] <... set_robust_list resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5057] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5320] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] <... openat resumed>) = 3 [pid 5320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5320] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5320] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5314] <... mkdir resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] newfstatat(3, "", [pid 5314] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5320] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5310] <... futex resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5310] exit_group(0 [pid 5057] getdents64(3, [pid 5311] <... futex resumed>) = ? [pid 5310] <... exit_group resumed>) = ? [pid 5311] +++ exited with 0 +++ [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5321 attached [pid 5320] +++ exited with 0 +++ [pid 5310] +++ exited with 0 +++ [pid 5057] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5310, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5321 [pid 5321] set_robust_list(0x5555565206a0, 24 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 63.765078][ T5314] loop3: detected capacity change from 0 to 32768 [ 63.777667][ T5311] ERROR: (device loop5): txAbort: [ 63.777667][ T5311] [pid 5321] <... set_robust_list resumed>) = 0 [pid 5063] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] unlink("./14/binderfs" [pid 5063] <... openat resumed>) = 3 [pid 5321] chdir("./14" [pid 5063] newfstatat(3, "", [pid 5057] <... unlink resumed>) = 0 [pid 5321] <... chdir resumed>) = 0 [pid 5057] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5321] <... prctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5321] setpgid(0, 0 [pid 5063] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5321] <... setpgid resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./14/binderfs") = 0 [pid 5063] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5321] <... openat resumed>) = 3 [pid 5321] write(3, "1000", 4 [pid 5314] <... mount resumed>) = 0 [pid 5321] <... write resumed>) = 4 [pid 5321] close(3) = 0 [pid 5314] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5314] chdir("./file2") = 0 [pid 5314] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5314] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5314] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5313] <... futex resumed>) = 0 [pid 5313] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5314] <... futex resumed>) = 0 [pid 5314] rename("./file2", "./file1" [pid 5321] symlink("/dev/binderfs", "./binderfs" [pid 5313] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5321] <... symlink resumed>) = 0 [pid 5321] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5321] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5321] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5058] <... ioctl resumed>) = 0 [pid 5321] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5058] close(3 [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./14/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./14/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./14/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./14") = 0 [pid 5057] mkdir("./15", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5314] <... rename resumed>) = -1 EIO (Input/output error) [pid 5321] <... mprotect resumed>) = 0 [pid 5313] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5063] <... umount2 resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5313] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5313] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5322]}, 88) = 5322 [pid 5313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5313] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5313] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5314] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5314] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5322 attached [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5323 ./strace-static-x86_64: Process 5323 attached [pid 5322] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5321] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5317] <... write resumed>) = 16777216 [pid 5063] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] set_robust_list(0x5555565206a0, 24) = 0 [pid 5322] <... rseq resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./14/file2", [pid 5322] set_robust_list(0x7f91a50869a0, 24 [pid 5323] chdir("./15" [pid 5322] <... set_robust_list resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 63.851924][ T5314] ERROR: (device loop3): diWrite: ixpxd invalid [ 63.851924][ T5314] [ 63.878854][ T5314] ERROR: (device loop3): remounting filesystem as read-only [ 63.890855][ T5314] ERROR: (device loop3): txAbort: [ 63.890855][ T5314] [pid 5317] munmap(0x7f919cc00000, 138412032 [pid 5323] <... chdir resumed>) = 0 [pid 5322] rt_sigprocmask(SIG_SETMASK, [], [pid 5321] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5322] mkdir(".", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5321] <... clone3 resumed> => {parent_tid=[5324]}, 88) = 5324 ./strace-static-x86_64: Process 5324 attached [pid 5322] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5063] openat(AT_FDCWD, "./14/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5324] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5322] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... openat resumed>) = 4 [pid 5323] <... prctl resumed>) = 0 [pid 5323] setpgid(0, 0 [pid 5324] <... rseq resumed>) = 0 [pid 5324] set_robust_list(0x7f91a50a79a0, 24 [pid 5063] newfstatat(4, "", [pid 5324] <... set_robust_list resumed>) = 0 [pid 5323] <... setpgid resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5324] rt_sigprocmask(SIG_SETMASK, [], [pid 5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5323] <... openat resumed>) = 3 [pid 5322] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5323] write(3, "1000", 4 [pid 5324] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] <... write resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5323] close(3) = 0 [pid 5323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] getdents64(4, [pid 5323] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5322] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5323] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5322] <... futex resumed>) = 1 [pid 5321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5313] <... futex resumed>) = 0 [pid 5063] close(4 [pid 5323] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5322] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5317] <... munmap resumed>) = 0 [pid 5313] exit_group(0 [pid 5063] <... close resumed>) = 0 [pid 5324] <... futex resumed>) = 0 [pid 5323] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5322] <... futex resumed>) = ? [pid 5321] <... futex resumed>) = 1 [pid 5314] <... futex resumed>) = ? [pid 5313] <... exit_group resumed>) = ? [pid 5063] rmdir("./14/file2" [pid 5324] memfd_create("syzkaller", 0 [pid 5323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5322] +++ exited with 0 +++ [pid 5321] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5324] <... memfd_create resumed>) = 3 [pid 5323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5317] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5314] +++ exited with 0 +++ [pid 5313] +++ exited with 0 +++ [pid 5063] <... rmdir resumed>) = 0 [pid 5323] <... mmap resumed>) = 0x7f91a5087000 [pid 5323] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5323] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5313, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [pid 5323] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5325 attached => {parent_tid=[5325]}, 88) = 5325 [pid 5325] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5323] rt_sigprocmask(SIG_SETMASK, [], [pid 5325] <... rseq resumed>) = 0 [pid 5323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5325] set_robust_list(0x7f91a50a79a0, 24 [pid 5323] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... set_robust_list resumed>) = 0 [pid 5323] <... futex resumed>) = 0 [pid 5325] rt_sigprocmask(SIG_SETMASK, [], [pid 5323] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5325] memfd_create("syzkaller", 0 [pid 5059] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5325] <... memfd_create resumed>) = 3 [pid 5059] <... openat resumed>) = 3 [pid 5325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] newfstatat(3, "", [pid 5325] <... mmap resumed>) = 0x7f919cc00000 [pid 5324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5317] <... openat resumed>) = 4 [pid 5063] getdents64(3, [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5317] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] getdents64(3, [pid 5063] close(3 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5324] <... mmap resumed>) = 0x7f919cc00000 [pid 5063] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] rmdir("./14" [pid 5059] unlink("./14/binderfs") = 0 [pid 5059] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./15", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5317] <... ioctl resumed>) = 0 [pid 5317] close(3) = 0 [pid 5317] close(4) = 0 [pid 5317] mkdir("./file2", 0777) = 0 [ 63.969774][ T5317] loop0: detected capacity change from 0 to 32768 [pid 5317] mount("/dev/loop0", "./file2", "jfs", 0, "") = 0 [pid 5317] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5059] <... umount2 resumed>) = 0 [pid 5317] chdir("./file2" [pid 5059] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./14/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./14/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5317] <... chdir resumed>) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5317] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5059] close(4 [pid 5317] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] <... close resumed>) = 0 [pid 5317] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] rmdir("./14/file2") = 0 [pid 5059] getdents64(3, [pid 5317] <... futex resumed>) = 1 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5317] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] close(3) = 0 [pid 5059] rmdir("./14" [pid 5316] <... futex resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./15", 0777 [pid 5316] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5317] <... futex resumed>) = 0 [pid 5316] <... futex resumed>) = 1 [pid 5059] <... openat resumed>) = 3 [pid 5316] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5317] rename("./file2", "./file1" [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5057] <... ioctl resumed>) = 0 [ 64.098370][ T5317] ERROR: (device loop0): diWrite: ixpxd invalid [ 64.098370][ T5317] [ 64.130561][ T5317] ERROR: (device loop0): remounting filesystem as read-only [pid 5057] close(3 [pid 5316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] <... close resumed>) = 0 [pid 5316] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5316] <... futex resumed>) = 0 [pid 5316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5326 ./strace-static-x86_64: Process 5326 attached [pid 5316] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5326] set_robust_list(0x5555565206a0, 24 [pid 5316] <... mprotect resumed>) = 0 [pid 5317] <... rename resumed>) = -1 EIO (Input/output error) [pid 5316] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5326] <... set_robust_list resumed>) = 0 [pid 5317] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5326] chdir("./15" [pid 5317] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5316] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5326] <... chdir resumed>) = 0 [pid 5316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5327 attached [pid 5326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5316] <... clone3 resumed> => {parent_tid=[5327]}, 88) = 5327 [pid 5316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5327] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5326] <... prctl resumed>) = 0 [pid 5316] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] <... rseq resumed>) = 0 [pid 5316] <... futex resumed>) = 0 [pid 5327] set_robust_list(0x7f91a50869a0, 24 [pid 5326] setpgid(0, 0 [pid 5316] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5327] <... set_robust_list resumed>) = 0 [pid 5326] <... setpgid resumed>) = 0 [pid 5327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5327] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5326] <... openat resumed>) = 3 [pid 5327] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5326] write(3, "1000", 4 [pid 5325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5327] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] <... write resumed>) = 4 [pid 5327] <... futex resumed>) = 1 [pid 5326] close(3 [pid 5316] <... futex resumed>) = 0 [pid 5326] <... close resumed>) = 0 [pid 5316] exit_group(0 [pid 5327] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5326] symlink("/dev/binderfs", "./binderfs" [pid 5317] <... futex resumed>) = ? [pid 5316] <... exit_group resumed>) = ? [pid 5327] +++ exited with 0 +++ [pid 5317] +++ exited with 0 +++ [pid 5316] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5316, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5056] restart_syscall(<... resuming interrupted clone ...> [pid 5326] <... symlink resumed>) = 0 [pid 5056] <... restart_syscall resumed>) = 0 [pid 5326] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5326] <... futex resumed>) = 0 [pid 5056] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5326] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5056] <... openat resumed>) = 3 [pid 5326] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5056] newfstatat(3, "", [pid 5326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 64.147245][ T5317] ERROR: (device loop0): txAbort: [ 64.147245][ T5317] [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./15/binderfs") = 0 [pid 5056] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5326] <... mmap resumed>) = 0x7f91a5087000 [pid 5326] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5326] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5328]}, 88) = 5328 [pid 5326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5326] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5328 attached ) = 0 [pid 5326] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5328] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5328] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5328] memfd_create("syzkaller", 0) = 3 [pid 5328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5328] <... mmap resumed>) = 0x7f919cc00000 [pid 5056] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./15/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./15/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./15/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./15") = 0 [pid 5056] mkdir("./16", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] <... openat resumed>) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5329 ./strace-static-x86_64: Process 5329 attached [pid 5329] set_robust_list(0x5555565206a0, 24) = 0 [pid 5329] chdir("./15") = 0 [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5329] setpgid(0, 0) = 0 [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5329] write(3, "1000", 4) = 4 [pid 5329] close(3) = 0 [pid 5329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5329] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5329] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5329] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5330]}, 88) = 5330 [pid 5329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5329] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5330 attached ) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5329] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5331 attached [pid 5330] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5331 [pid 5331] set_robust_list(0x5555565206a0, 24) = 0 [pid 5331] chdir("./15") = 0 [pid 5331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5331] setpgid(0, 0) = 0 [pid 5330] <... rseq resumed>) = 0 [pid 5330] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5330] rt_sigprocmask(SIG_SETMASK, [], [pid 5331] <... openat resumed>) = 3 [pid 5330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5331] write(3, "1000", 4) = 4 [pid 5331] close(3) = 0 [pid 5331] symlink("/dev/binderfs", "./binderfs" [pid 5330] memfd_create("syzkaller", 0 [pid 5331] <... symlink resumed>) = 0 [pid 5330] <... memfd_create resumed>) = 3 [pid 5331] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5331] <... futex resumed>) = 0 [pid 5331] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5330] <... mmap resumed>) = 0x7f919cc00000 [pid 5331] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5331] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5331] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5331] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5332]}, 88) = 5332 [pid 5331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5331] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5332 attached [pid 5332] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5332] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5332] memfd_create("syzkaller", 0) = 3 [pid 5332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5325] <... write resumed>) = 16777216 [pid 5324] <... write resumed>) = 16777216 [pid 5324] munmap(0x7f919cc00000, 138412032) = 0 [pid 5325] munmap(0x7f919cc00000, 138412032) = 0 [pid 5324] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5324] ioctl(4, LOOP_SET_FD, 3 [pid 5325] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5325] ioctl(4, LOOP_SET_FD, 3 [pid 5324] <... ioctl resumed>) = 0 [pid 5324] close(3) = 0 [pid 5324] close(4) = 0 [pid 5324] mkdir("./file2", 0777 [pid 5325] <... ioctl resumed>) = 0 [pid 5325] close(3) = 0 [pid 5325] close(4) = 0 [pid 5324] <... mkdir resumed>) = 0 [pid 5325] mkdir("./file2", 0777) = 0 [pid 5325] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5324] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5325] <... mount resumed>) = 0 [pid 5325] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5325] chdir("./file2") = 0 [pid 5325] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5325] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5325] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] <... futex resumed>) = 0 [ 64.552845][ T5324] loop4: detected capacity change from 0 to 32768 [ 64.556499][ T5325] loop2: detected capacity change from 0 to 32768 [pid 5325] rename("./file2", "./file1" [pid 5323] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5323] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5333 attached [pid 5323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5333 [pid 5333] set_robust_list(0x5555565206a0, 24 [pid 5323] <... mmap resumed>) = 0x7f91a5066000 [pid 5333] <... set_robust_list resumed>) = 0 [pid 5323] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5333] chdir("./16" [pid 5323] <... mprotect resumed>) = 0 [pid 5333] <... chdir resumed>) = 0 [pid 5324] <... mount resumed>) = 0 [pid 5323] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5323] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5333] <... prctl resumed>) = 0 [pid 5323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5333] setpgid(0, 0) = 0 [pid 5323] <... clone3 resumed> => {parent_tid=[5334]}, 88) = 5334 [pid 5333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5324] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5323] rt_sigprocmask(SIG_SETMASK, [], [pid 5333] <... openat resumed>) = 3 [pid 5323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5333] write(3, "1000", 4 [pid 5323] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5334 attached [pid 5333] <... write resumed>) = 4 [ 64.604050][ T5325] ERROR: (device loop2): diWrite: ixpxd invalid [ 64.604050][ T5325] [ 64.618154][ T5325] ERROR: (device loop2): remounting filesystem as read-only [ 64.642032][ T5325] ERROR: (device loop2): txAbort: [ 64.642032][ T5325] [pid 5324] <... openat resumed>) = 3 [pid 5323] <... futex resumed>) = 0 [pid 5333] close(3 [pid 5323] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5334] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5333] <... close resumed>) = 0 [pid 5333] symlink("/dev/binderfs", "./binderfs" [pid 5334] <... rseq resumed>) = 0 [pid 5334] set_robust_list(0x7f91a50869a0, 24 [pid 5333] <... symlink resumed>) = 0 [pid 5334] <... set_robust_list resumed>) = 0 [pid 5324] chdir("./file2" [pid 5334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5334] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5333] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5333] <... futex resumed>) = 0 [pid 5333] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5334] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5333] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5324] <... chdir resumed>) = 0 [pid 5334] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5324] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5324] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5334] <... futex resumed>) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5333] <... mmap resumed>) = 0x7f91a5087000 [pid 5333] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5333] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5334] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5324] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... clone3 resumed> => {parent_tid=[5335]}, 88) = 5335 [pid 5324] <... futex resumed>) = 1 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], [pid 5324] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] <... futex resumed>) = 0 [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5321] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... futex resumed>) = 0 [pid 5321] <... futex resumed>) = 1 [pid 5333] <... futex resumed>) = 0 [pid 5324] rename("./file2", "./file1" [pid 5321] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5333] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5335 attached [pid 5335] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5335] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5335] memfd_create("syzkaller", 0) = 3 [pid 5335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5325] <... rename resumed>) = -1 EIO (Input/output error) [pid 5325] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5325] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] exit_group(0 [pid 5334] <... futex resumed>) = ? [pid 5325] <... futex resumed>) = ? [pid 5323] <... exit_group resumed>) = ? [pid 5334] +++ exited with 0 +++ [pid 5325] +++ exited with 0 +++ [pid 5323] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5323, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=13 /* 0.13 s */} --- [pid 5058] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 64.692918][ T5325] ERROR: (device loop2): remounting filesystem as read-only [ 64.705151][ T5324] ERROR: (device loop4): diWrite: ixpxd invalid [ 64.705151][ T5324] [pid 5058] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./15/binderfs") = 0 [pid 5058] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5058] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./15/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./15/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] getdents64(4, [pid 5321] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5058] close(4 [pid 5321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5058] <... close resumed>) = 0 [pid 5321] <... mmap resumed>) = 0x7f91a5066000 [pid 5058] rmdir("./15/file2" [pid 5321] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5058] <... rmdir resumed>) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./15") = 0 [pid 5058] mkdir("./16", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5324] <... rename resumed>) = -1 EIO (Input/output error) [pid 5324] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5324] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] <... mprotect resumed>) = 0 [pid 5321] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5336]}, 88) = 5336 ./strace-static-x86_64: Process 5336 attached [pid 5321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5321] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5321] <... futex resumed>) = 0 [pid 5336] <... rseq resumed>) = 0 [pid 5321] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5336] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5336] mkdir(".", 0777) = -1 EEXIST (File exists) [ 64.745327][ T5324] ERROR: (device loop4): remounting filesystem as read-only [ 64.772732][ T5324] ERROR: (device loop4): txAbort: [ 64.772732][ T5324] [pid 5336] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5336] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5321] <... futex resumed>) = 0 [pid 5336] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] exit_group(0 [pid 5336] <... futex resumed>) = ? [pid 5324] <... futex resumed>) = ? [pid 5321] <... exit_group resumed>) = ? [pid 5336] +++ exited with 0 +++ [pid 5324] +++ exited with 0 +++ [pid 5321] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5321, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5328] <... write resumed>) = 16777216 [pid 5060] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5328] munmap(0x7f919cc00000, 138412032 [pid 5060] unlink("./14/binderfs" [pid 5328] <... munmap resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5328] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... umount2 resumed>) = 0 [pid 5335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5328] <... ioctl resumed>) = 0 [pid 5060] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5328] close(3 [pid 5060] newfstatat(AT_FDCWD, "./14/file2", [pid 5328] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5328] close(4 [pid 5060] umount2("./14/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5328] mkdir("./file2", 0777 [pid 5060] openat(AT_FDCWD, "./14/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5328] <... mkdir resumed>) = 0 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./14/file2") = 0 [ 64.902345][ T5328] loop1: detected capacity change from 0 to 32768 [pid 5328] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5060] getdents64(3, [pid 5330] <... write resumed>) = 16777216 [pid 5328] <... mount resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5330] munmap(0x7f919cc00000, 138412032 [pid 5328] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] close(3 [pid 5328] <... openat resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 5328] chdir("./file2" [pid 5060] rmdir("./14" [pid 5328] <... chdir resumed>) = 0 [pid 5330] <... munmap resumed>) = 0 [pid 5328] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5060] <... rmdir resumed>) = 0 [pid 5328] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] mkdir("./15", 0777 [pid 5328] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... mkdir resumed>) = 0 [pid 5328] <... futex resumed>) = 1 [pid 5328] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5332] <... write resumed>) = 16777216 [pid 5330] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5332] munmap(0x7f919cc00000, 138412032 [pid 5326] <... futex resumed>) = 0 [pid 5326] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5326] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] <... openat resumed>) = 4 [pid 5328] <... futex resumed>) = 0 [pid 5332] <... munmap resumed>) = 0 [pid 5330] ioctl(4, LOOP_SET_FD, 3 [pid 5328] rename("./file2", "./file1" [pid 5058] <... ioctl resumed>) = 0 [pid 5332] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5330] <... ioctl resumed>) = 0 [pid 5328] <... rename resumed>) = -1 EIO (Input/output error) [pid 5332] <... openat resumed>) = 4 [pid 5330] close(3 [pid 5328] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] close(3 [pid 5332] ioctl(4, LOOP_SET_FD, 3 [pid 5330] <... close resumed>) = 0 [pid 5328] <... futex resumed>) = 1 [pid 5326] <... futex resumed>) = 0 [pid 5326] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5326] <... futex resumed>) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5337 [pid 5326] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5337 attached [pid 5337] set_robust_list(0x5555565206a0, 24) = 0 [pid 5337] chdir("./16") = 0 [pid 5337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5337] setpgid(0, 0) = 0 [pid 5337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5337] write(3, "1000", 4) = 4 [pid 5337] close(3) = 0 [pid 5337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5337] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [ 65.013275][ T5328] ERROR: (device loop1): diWrite: ixpxd invalid [ 65.013275][ T5328] [ 65.022008][ T5330] loop5: detected capacity change from 0 to 32768 [ 65.028461][ T5328] ERROR: (device loop1): remounting filesystem as read-only [ 65.036312][ T5328] ERROR: (device loop1): txAbort: [ 65.036312][ T5328] [pid 5330] close(4 [pid 5328] mkdir(".", 0777 [pid 5337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5337] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5338]}, 88) = 5338 [pid 5337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5337] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5338 attached [pid 5338] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5338] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5338] memfd_create("syzkaller", 0) = 3 [pid 5338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5330] <... close resumed>) = 0 [pid 5328] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5338] <... mmap resumed>) = 0x7f919cc00000 [pid 5332] <... ioctl resumed>) = 0 [pid 5330] mkdir("./file2", 0777 [pid 5328] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5332] close(3 [pid 5330] <... mkdir resumed>) = 0 [pid 5328] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5328] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... close resumed>) = 0 [pid 5330] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5332] close(4 [pid 5328] <... futex resumed>) = 1 [pid 5328] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5332] <... close resumed>) = 0 [pid 5326] <... futex resumed>) = 0 [pid 5332] mkdir("./file2", 0777 [pid 5326] exit_group(0) = ? [pid 5332] <... mkdir resumed>) = 0 [pid 5328] <... futex resumed>) = ? [pid 5332] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5328] +++ exited with 0 +++ [pid 5326] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5326, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [pid 5057] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 65.061345][ T5332] loop3: detected capacity change from 0 to 32768 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./15/binderfs") = 0 [pid 5057] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5332] <... mount resumed>) = 0 [pid 5330] <... mount resumed>) = 0 [pid 5057] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5330] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5332] <... openat resumed>) = 3 [pid 5330] <... openat resumed>) = 3 [pid 5057] newfstatat(AT_FDCWD, "./15/file2", [pid 5332] chdir("./file2" [pid 5330] chdir("./file2" [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5332] <... chdir resumed>) = 0 [pid 5332] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5330] <... chdir resumed>) = 0 [pid 5057] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5330] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5332] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5057] openat(AT_FDCWD, "./15/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5332] <... futex resumed>) = 1 [pid 5331] <... futex resumed>) = 0 [pid 5330] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... openat resumed>) = 4 [pid 5332] rename("./file2", "./file1" [pid 5331] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... futex resumed>) = 1 [pid 5329] <... futex resumed>) = 0 [pid 5057] newfstatat(4, "", [pid 5331] <... futex resumed>) = 0 [pid 5330] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5331] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5329] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] close(4 [pid 5329] <... futex resumed>) = 1 [pid 5330] <... futex resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5330] rename("./file2", "./file1" [pid 5329] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] rmdir("./15/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./15") = 0 [pid 5057] mkdir("./16", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 65.132749][ T5332] ERROR: (device loop3): diWrite: ixpxd invalid [ 65.132749][ T5332] [ 65.147638][ T5330] ERROR: (device loop5): diWrite: ixpxd invalid [ 65.147638][ T5330] [ 65.157995][ T5332] ERROR: (device loop3): remounting filesystem as read-only [ 65.174360][ T5330] ERROR: (device loop5): remounting filesystem as read-only [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5331] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5331] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5331] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5331] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5339]}, 88) = 5339 [pid 5331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5331] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5331] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5329] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5339 attached [pid 5339] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5339] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5339] mkdir(".", 0777 [pid 5329] <... futex resumed>) = 0 [pid 5339] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5339] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5339] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5331] <... futex resumed>) = 0 [pid 5339] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5329] <... mmap resumed>) = 0x7f91a5066000 [pid 5329] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5340]}, 88) = 5340 [pid 5329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5329] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] <... rename resumed>) = -1 EIO (Input/output error) [pid 5330] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5330] <... futex resumed>) = 0 [pid 5330] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5340 attached [pid 5340] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5340] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5340] rt_sigprocmask(SIG_SETMASK, [], [pid 5332] <... rename resumed>) = -1 EIO (Input/output error) [pid 5340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5332] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] mkdir(".", 0777 [pid 5332] <... futex resumed>) = 0 [pid 5340] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5332] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5340] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5331] exit_group(0 [pid 5339] <... futex resumed>) = ? [pid 5332] <... futex resumed>) = ? [pid 5331] <... exit_group resumed>) = ? [pid 5339] +++ exited with 0 +++ [pid 5332] +++ exited with 0 +++ [pid 5331] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5331, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [ 65.176086][ T5332] ERROR: (device loop3): txAbort: [ 65.176086][ T5332] [ 65.201061][ T5330] ERROR: (device loop5): txAbort: [ 65.201061][ T5330] [ 65.212857][ T5332] ERROR: (device loop3): remounting filesystem as read-only [pid 5340] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... ioctl resumed>) = 0 [pid 5059] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5340] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5329] <... futex resumed>) = 0 [pid 5060] close(3 [pid 5059] <... openat resumed>) = 3 [pid 5340] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5329] exit_group(0 [pid 5059] newfstatat(3, "", [pid 5340] <... futex resumed>) = ? [pid 5335] <... write resumed>) = 16777216 [pid 5330] <... futex resumed>) = ? [pid 5329] <... exit_group resumed>) = ? [pid 5060] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5340] +++ exited with 0 +++ [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] getdents64(3, [pid 5330] +++ exited with 0 +++ [pid 5329] +++ exited with 0 +++ [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5329, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=14 /* 0.14 s */} --- [pid 5059] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5341 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5335] munmap(0x7f919cc00000, 138412032 [pid 5059] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5341 attached [pid 5059] unlink("./15/binderfs") = 0 [pid 5063] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] set_robust_list(0x5555565206a0, 24 [pid 5063] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5341] <... set_robust_list resumed>) = 0 [pid 5341] chdir("./15") = 0 [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... openat resumed>) = 3 [pid 5341] <... prctl resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5341] setpgid(0, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5341] <... setpgid resumed>) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5341] write(3, "1000", 4 [pid 5063] getdents64(3, [pid 5341] <... write resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5341] close(3 [pid 5063] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] symlink("/dev/binderfs", "./binderfs" [pid 5335] <... munmap resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5341] <... symlink resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5341] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] unlink("./15/binderfs" [pid 5341] <... futex resumed>) = 0 [pid 5341] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] <... unlink resumed>) = 0 [pid 5341] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5341] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... mmap resumed>) = 0x7f91a5087000 [pid 5341] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5335] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5341] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5342]}, 88) = 5342 [pid 5341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5341] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5335] <... openat resumed>) = 4 [pid 5335] ioctl(4, LOOP_SET_FD, 3 [pid 5338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 5342 attached [pid 5335] <... ioctl resumed>) = 0 [pid 5342] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5342] set_robust_list(0x7f91a50a79a0, 24 [pid 5335] close(3) = 0 [pid 5342] <... set_robust_list resumed>) = 0 [pid 5335] close(4 [pid 5342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5335] <... close resumed>) = 0 [pid 5342] memfd_create("syzkaller", 0 [pid 5335] mkdir("./file2", 0777) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5335] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5342] <... memfd_create resumed>) = 3 [pid 5059] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./15/file2", [pid 5342] <... mmap resumed>) = 0x7f919cc00000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./15/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 65.326009][ T5335] loop0: detected capacity change from 0 to 32768 [pid 5059] getdents64(4, [pid 5063] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./15/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(AT_FDCWD, "./15/file2", [pid 5059] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... close resumed>) = 0 [pid 5063] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./15") = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] mkdir("./16", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5335] <... mount resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./15/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5335] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5335] <... openat resumed>) = 3 [pid 5063] newfstatat(4, "", [pid 5335] chdir("./file2" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5335] <... chdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5335] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5335] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] close(4) = 0 [pid 5335] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] rmdir("./15/file2" [pid 5335] <... futex resumed>) = 1 [pid 5333] <... futex resumed>) = 0 [pid 5333] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5335] rename("./file2", "./file1" [pid 5333] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./15") = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5063] mkdir("./16", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5057] close(3 [pid 5333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] <... close resumed>) = 0 [pid 5333] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5333] <... mmap resumed>) = 0x7f91a5066000 [pid 5333] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [ 65.400323][ T5335] ERROR: (device loop0): diWrite: ixpxd invalid [ 65.400323][ T5335] [ 65.426744][ T5335] ERROR: (device loop0): remounting filesystem as read-only [pid 5333] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5343]}, 88) = 5343 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5333] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5333] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5343 attached [pid 5343] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5343] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5343] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5343] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5343] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5333] <... futex resumed>) = 0 [pid 5343] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5344 ./strace-static-x86_64: Process 5344 attached [pid 5335] <... rename resumed>) = -1 EIO (Input/output error) [pid 5344] set_robust_list(0x5555565206a0, 24) = 0 [pid 5344] chdir("./16") = 0 [pid 5344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5335] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] exit_group(0 [pid 5343] <... futex resumed>) = ? [pid 5333] <... exit_group resumed>) = ? [pid 5343] +++ exited with 0 +++ [pid 5335] <... futex resumed>) = ? [pid 5344] <... prctl resumed>) = 0 [pid 5335] +++ exited with 0 +++ [pid 5333] +++ exited with 0 +++ [pid 5344] setpgid(0, 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5333, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=19 /* 0.19 s */} --- [pid 5344] <... setpgid resumed>) = 0 [pid 5344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5056] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5344] <... openat resumed>) = 3 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 65.466165][ T5335] ERROR: (device loop0): txAbort: [ 65.466165][ T5335] [ 65.502682][ T5335] ERROR: (device loop0): remounting filesystem as read-only [pid 5344] write(3, "1000", 4) = 4 [pid 5056] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5344] close(3 [pid 5056] <... openat resumed>) = 3 [pid 5344] <... close resumed>) = 0 [pid 5056] newfstatat(3, "", [pid 5344] symlink("/dev/binderfs", "./binderfs" [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5344] <... symlink resumed>) = 0 [pid 5056] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./16/binderfs") = 0 [pid 5056] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5344] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5344] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5344] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5344] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5344] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5345 attached [pid 5056] <... umount2 resumed>) = 0 [pid 5344] <... clone3 resumed> => {parent_tid=[5345]}, 88) = 5345 [pid 5344] rt_sigprocmask(SIG_SETMASK, [], [pid 5345] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5345] <... rseq resumed>) = 0 [pid 5345] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5345] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5344] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] newfstatat(AT_FDCWD, "./16/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./16/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", [pid 5344] <... futex resumed>) = 1 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5344] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./16/file2" [pid 5345] <... futex resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5345] memfd_create("syzkaller", 0) = 3 [pid 5056] getdents64(3, [pid 5345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./16") = 0 [pid 5056] mkdir("./17", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5338] <... write resumed>) = 16777216 [pid 5342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5338] munmap(0x7f919cc00000, 138412032 [pid 5059] <... ioctl resumed>) = 0 [pid 5338] <... munmap resumed>) = 0 [pid 5338] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] close(3 [pid 5338] <... openat resumed>) = 4 [pid 5059] <... close resumed>) = 0 [pid 5338] ioctl(4, LOOP_SET_FD, 3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5346 ./strace-static-x86_64: Process 5346 attached [pid 5346] set_robust_list(0x5555565206a0, 24) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5346] chdir("./16") = 0 [pid 5063] close(3) = 0 [pid 5346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5338] <... ioctl resumed>) = 0 [pid 5346] <... prctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5338] close(3 [pid 5346] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5347 attached [pid 5338] <... close resumed>) = 0 [pid 5338] close(4 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5347 [pid 5347] set_robust_list(0x5555565206a0, 24 [pid 5338] <... close resumed>) = 0 [pid 5338] mkdir("./file2", 0777 [pid 5347] <... set_robust_list resumed>) = 0 [pid 5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5347] chdir("./16" [pid 5346] <... openat resumed>) = 3 [pid 5338] <... mkdir resumed>) = 0 [pid 5347] <... chdir resumed>) = 0 [pid 5346] write(3, "1000", 4 [pid 5347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5346] <... write resumed>) = 4 [pid 5338] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5347] <... prctl resumed>) = 0 [ 65.668020][ T5338] loop2: detected capacity change from 0 to 32768 [pid 5346] close(3 [pid 5347] setpgid(0, 0 [pid 5346] <... close resumed>) = 0 [pid 5346] symlink("/dev/binderfs", "./binderfs" [pid 5347] <... setpgid resumed>) = 0 [pid 5347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5346] <... symlink resumed>) = 0 [pid 5346] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5346] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5347] <... openat resumed>) = 3 [pid 5346] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5347] write(3, "1000", 4 [pid 5346] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5347] <... write resumed>) = 4 [pid 5346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5347] close(3 [pid 5346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5347] <... close resumed>) = 0 [pid 5346] <... mmap resumed>) = 0x7f91a5087000 [pid 5347] symlink("/dev/binderfs", "./binderfs" [pid 5346] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5347] <... symlink resumed>) = 0 [pid 5346] <... mprotect resumed>) = 0 [pid 5347] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5347] <... futex resumed>) = 0 [pid 5346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5348 attached [pid 5347] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5348] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5347] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5346] <... clone3 resumed> => {parent_tid=[5348]}, 88) = 5348 [pid 5348] <... rseq resumed>) = 0 [pid 5347] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5346] rt_sigprocmask(SIG_SETMASK, [], [pid 5348] set_robust_list(0x7f91a50a79a0, 24 [pid 5347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5348] <... set_robust_list resumed>) = 0 [pid 5347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5348] rt_sigprocmask(SIG_SETMASK, [], [pid 5347] <... mmap resumed>) = 0x7f91a5087000 [pid 5346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5338] <... mount resumed>) = 0 [pid 5348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5347] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5346] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5346] <... futex resumed>) = 0 [pid 5338] <... openat resumed>) = 3 [pid 5347] <... mprotect resumed>) = 0 [pid 5346] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5338] chdir("./file2" [pid 5347] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5338] <... chdir resumed>) = 0 [pid 5348] memfd_create("syzkaller", 0 [pid 5347] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5338] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5348] <... memfd_create resumed>) = 3 [pid 5347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5338] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5338] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5349 attached ) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5347] <... clone3 resumed> => {parent_tid=[5349]}, 88) = 5349 [pid 5338] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... mmap resumed>) = 0x7f919cc00000 [pid 5338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5337] <... futex resumed>) = 0 [pid 5347] rt_sigprocmask(SIG_SETMASK, [], [pid 5337] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5338] rename("./file2", "./file1" [pid 5347] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5347] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5349] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5349] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5349] memfd_create("syzkaller", 0) = 3 [pid 5349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5342] <... write resumed>) = 16777216 [pid 5337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5337] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5337] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5337] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5350]}, 88) = 5350 [pid 5337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5337] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5350 attached [pid 5350] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5350] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5350] mkdir(".", 0777) = -1 EEXIST (File exists) [ 65.785903][ T5338] ERROR: (device loop2): diWrite: ixpxd invalid [ 65.785903][ T5338] [ 65.821613][ T5338] ERROR: (device loop2): remounting filesystem as read-only [pid 5350] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5350] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5337] <... futex resumed>) = 0 [pid 5338] <... rename resumed>) = -1 EIO (Input/output error) [pid 5338] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5338] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] exit_group(0 [pid 5350] <... futex resumed>) = ? [pid 5338] <... futex resumed>) = ? [pid 5337] <... exit_group resumed>) = ? [pid 5342] munmap(0x7f919cc00000, 138412032 [pid 5338] +++ exited with 0 +++ [pid 5350] +++ exited with 0 +++ [pid 5337] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5337, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=11 /* 0.11 s */} --- [pid 5058] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./16/binderfs") = 0 [pid 5058] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5058] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./16/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./16/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5342] <... munmap resumed>) = 0 [ 65.842872][ T5338] ERROR: (device loop2): txAbort: [ 65.842872][ T5338] [pid 5342] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5058] rmdir("./16/file2" [pid 5342] <... openat resumed>) = 4 [pid 5342] ioctl(4, LOOP_SET_FD, 3 [pid 5058] <... rmdir resumed>) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./16") = 0 [pid 5058] mkdir("./17", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5342] <... ioctl resumed>) = 0 [pid 5342] close(3) = 0 [pid 5342] close(4) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5342] mkdir("./file2", 0777) = 0 [pid 5056] close(3 [pid 5342] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5056] <... close resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5351 attached [pid 5351] set_robust_list(0x5555565206a0, 24) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5351 [pid 5351] chdir("./17") = 0 [pid 5351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 65.904917][ T5342] loop4: detected capacity change from 0 to 32768 [pid 5351] setpgid(0, 0) = 0 [pid 5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5351] write(3, "1000", 4) = 4 [pid 5342] <... mount resumed>) = 0 [pid 5351] close(3) = 0 [pid 5342] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5351] symlink("/dev/binderfs", "./binderfs" [pid 5342] <... openat resumed>) = 3 [pid 5351] <... symlink resumed>) = 0 [pid 5342] chdir("./file2" [pid 5351] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... chdir resumed>) = 0 [pid 5351] <... futex resumed>) = 0 [pid 5351] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5342] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5342] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5351] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5342] rename("./file2", "./file1" [pid 5341] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5341] <... futex resumed>) = 0 [pid 5351] <... mmap resumed>) = 0x7f91a5087000 [pid 5341] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5351] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5351] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5352 attached => {parent_tid=[5352]}, 88) = 5352 [pid 5352] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5351] rt_sigprocmask(SIG_SETMASK, [], [pid 5352] set_robust_list(0x7f91a50a79a0, 24 [pid 5351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5351] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... set_robust_list resumed>) = 0 [ 65.989158][ T5342] ERROR: (device loop4): diWrite: ixpxd invalid [ 65.989158][ T5342] [pid 5352] rt_sigprocmask(SIG_SETMASK, [], [pid 5351] <... futex resumed>) = 0 [pid 5351] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5352] memfd_create("syzkaller", 0) = 3 [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5341] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5341] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5353]}, 88) = 5353 [pid 5341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5341] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5353 attached ) = 0 [pid 5341] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5353] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5353] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 66.034192][ T5342] ERROR: (device loop4): remounting filesystem as read-only [pid 5353] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5342] <... rename resumed>) = -1 EIO (Input/output error) [pid 5353] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5342] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5342] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5353] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5353] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5341] exit_group(0 [pid 5342] <... futex resumed>) = ? [pid 5341] <... exit_group resumed>) = ? [pid 5353] +++ exited with 0 +++ [pid 5342] +++ exited with 0 +++ [pid 5341] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5060] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./15/binderfs") = 0 [ 66.078246][ T5342] ERROR: (device loop4): txAbort: [ 66.078246][ T5342] [pid 5060] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5345] <... write resumed>) = 16777216 [pid 5345] munmap(0x7f919cc00000, 138412032) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5345] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5058] close(3 [pid 5345] <... openat resumed>) = 4 [pid 5058] <... close resumed>) = 0 [pid 5345] ioctl(4, LOOP_SET_FD, 3 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5354 attached [pid 5345] <... ioctl resumed>) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5354 [pid 5354] set_robust_list(0x5555565206a0, 24) = 0 [pid 5354] chdir("./17") = 0 [pid 5354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5354] setpgid(0, 0) = 0 [pid 5354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5354] write(3, "1000", 4) = 4 [pid 5354] close(3 [pid 5345] close(3 [pid 5354] <... close resumed>) = 0 [pid 5354] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5345] <... close resumed>) = 0 [pid 5345] close(4 [pid 5354] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5354] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5354] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5354] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5354] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5355]}, 88) = 5355 [pid 5354] rt_sigprocmask(SIG_SETMASK, [], [pid 5345] <... close resumed>) = 0 [pid 5345] mkdir("./file2", 0777 [pid 5354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5354] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5355 attached ) = 0 [pid 5355] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5354] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5345] <... mkdir resumed>) = 0 [pid 5355] <... rseq resumed>) = 0 [pid 5355] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5355] memfd_create("syzkaller", 0) = 3 [pid 5355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [ 66.222570][ T5345] loop1: detected capacity change from 0 to 32768 [pid 5345] mount("/dev/loop1", "./file2", "jfs", 0, "") = 0 [pid 5345] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5348] <... write resumed>) = 16777216 [pid 5348] munmap(0x7f919cc00000, 138412032 [pid 5345] <... openat resumed>) = 3 [pid 5345] chdir("./file2") = 0 [pid 5348] <... munmap resumed>) = 0 [pid 5345] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5345] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... write resumed>) = 16777216 [pid 5348] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5345] <... futex resumed>) = 1 [pid 5344] <... futex resumed>) = 0 [pid 5345] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5344] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5344] <... futex resumed>) = 0 [pid 5348] <... openat resumed>) = 4 [pid 5345] rename("./file2", "./file1" [pid 5344] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5348] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5349] munmap(0x7f919cc00000, 138412032 [pid 5348] close(3) = 0 [pid 5348] close(4) = 0 [pid 5348] mkdir("./file2", 0777) = 0 [pid 5348] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5349] <... munmap resumed>) = 0 [pid 5349] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 66.339106][ T5348] loop3: detected capacity change from 0 to 32768 [ 66.346115][ T5345] ERROR: (device loop1): diWrite: ixpxd invalid [ 66.346115][ T5345] [ 66.362589][ T5345] ERROR: (device loop1): remounting filesystem as read-only [ 66.382545][ T5349] loop5: detected capacity change from 0 to 32768 [pid 5349] ioctl(4, LOOP_SET_FD, 3 [pid 5344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5344] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5349] <... ioctl resumed>) = 0 [pid 5344] <... mmap resumed>) = 0x7f91a5066000 [pid 5349] close(3 [pid 5344] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5349] <... close resumed>) = 0 [pid 5349] close(4 [pid 5344] <... mprotect resumed>) = 0 [pid 5349] <... close resumed>) = 0 [pid 5344] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5349] mkdir("./file2", 0777 [pid 5344] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5348] <... mount resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5348] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5356 attached [pid 5348] <... openat resumed>) = 3 [pid 5344] <... clone3 resumed> => {parent_tid=[5356]}, 88) = 5356 [pid 5060] newfstatat(AT_FDCWD, "./15/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5349] <... mkdir resumed>) = 0 [pid 5348] chdir("./file2" [pid 5344] rt_sigprocmask(SIG_SETMASK, [], [pid 5356] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5348] <... chdir resumed>) = 0 [pid 5344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5356] <... rseq resumed>) = 0 [pid 5356] set_robust_list(0x7f91a50869a0, 24 [pid 5060] umount2("./15/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5348] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] <... set_robust_list resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./15/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5356] rt_sigprocmask(SIG_SETMASK, [], [pid 5348] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 5356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5348] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5356] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5348] <... futex resumed>) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 5346] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5348] rename("./file2", "./file1" [pid 5346] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 5346] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5344] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] rmdir("./15/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./15") = 0 [pid 5060] mkdir("./16", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5356] <... futex resumed>) = 0 [pid 5345] <... rename resumed>) = -1 EIO (Input/output error) [pid 5344] <... futex resumed>) = 1 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5345] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] mkdir(".", 0777 [pid 5344] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5356] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5345] <... futex resumed>) = 0 [pid 5345] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5356] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5356] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5344] <... futex resumed>) = 0 [pid 5344] exit_group(0 [pid 5356] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5344] <... exit_group resumed>) = ? [pid 5356] <... futex resumed>) = ? [pid 5345] <... futex resumed>) = ? [pid 5345] +++ exited with 0 +++ [pid 5356] +++ exited with 0 +++ [pid 5344] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5344, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=22 /* 0.22 s */} --- [pid 5057] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5057] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./16/binderfs") = 0 [ 66.385989][ T5345] ERROR: (device loop1): txAbort: [ 66.385989][ T5345] [ 66.426229][ T5348] ERROR: (device loop3): diWrite: ixpxd invalid [ 66.426229][ T5348] [pid 5057] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5349] <... mount resumed>) = 0 [pid 5346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5349] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5346] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5346] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5346] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5357]}, 88) = 5357 [pid 5349] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5357 attached [pid 5349] chdir("./file2" [pid 5346] rt_sigprocmask(SIG_SETMASK, [], [pid 5357] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5357] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5357] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] <... chdir resumed>) = 0 [pid 5346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5349] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5346] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5346] <... futex resumed>) = 1 [pid 5349] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... umount2 resumed>) = 0 [pid 5346] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5349] <... futex resumed>) = 1 [pid 5347] <... futex resumed>) = 0 [pid 5347] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5347] <... futex resumed>) = 0 [pid 5349] rename("./file2", "./file1" [pid 5347] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] newfstatat(AT_FDCWD, "./16/file2", [pid 5357] <... futex resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5357] mkdir(".", 0777 [pid 5057] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5357] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5357] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5057] openat(AT_FDCWD, "./16/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5357] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5357] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... openat resumed>) = 4 [pid 5357] <... futex resumed>) = 1 [pid 5346] <... futex resumed>) = 0 [pid 5357] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./16/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./16") = 0 [pid 5057] mkdir("./17", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 66.472921][ T5348] ERROR: (device loop3): remounting filesystem as read-only [ 66.492020][ T5348] ERROR: (device loop3): txAbort: [ 66.492020][ T5348] [ 66.508008][ T5349] ERROR: (device loop5): diWrite: ixpxd invalid [ 66.508008][ T5349] [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5348] <... rename resumed>) = -1 EIO (Input/output error) [pid 5349] <... rename resumed>) = -1 EIO (Input/output error) [pid 5348] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... futex resumed>) = 0 [pid 5347] <... futex resumed>) = 0 [pid 5349] <... futex resumed>) = 1 [pid 5347] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] mkdir(".", 0777 [pid 5347] <... futex resumed>) = 0 [pid 5346] exit_group(0) = ? [pid 5357] <... futex resumed>) = ? [pid 5357] +++ exited with 0 +++ [pid 5347] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5349] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5349] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5348] +++ exited with 0 +++ [pid 5346] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5346, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5349] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5349] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5349] <... futex resumed>) = 1 [pid 5347] <... futex resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 5349] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5347] exit_group(0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5349] <... futex resumed>) = ? [pid 5347] <... exit_group resumed>) = ? [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./16/binderfs") = 0 [pid 5349] +++ exited with 0 +++ [pid 5347] +++ exited with 0 +++ [pid 5059] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5347, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=21 /* 0.21 s */} --- [pid 5063] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./16/binderfs") = 0 [ 66.518203][ T5348] ERROR: (device loop3): remounting filesystem as read-only [ 66.532697][ T5349] ERROR: (device loop5): remounting filesystem as read-only [ 66.540059][ T5349] ERROR: (device loop5): txAbort: [ 66.540059][ T5349] [pid 5063] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./16/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./16/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./16/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./16") = 0 [pid 5059] mkdir("./17", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5352] <... write resumed>) = 16777216 [pid 5352] munmap(0x7f919cc00000, 138412032) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5352] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5352] close(3) = 0 [pid 5352] close(4) = 0 [pid 5352] mkdir("./file2", 0777) = 0 [pid 5352] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5358 attached [pid 5358] set_robust_list(0x5555565206a0, 24 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5358 [pid 5358] <... set_robust_list resumed>) = 0 [pid 5352] <... mount resumed>) = 0 [pid 5358] chdir("./16" [pid 5352] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5358] <... chdir resumed>) = 0 [pid 5352] <... openat resumed>) = 3 [pid 5358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5352] chdir("./file2" [pid 5358] <... prctl resumed>) = 0 [pid 5352] <... chdir resumed>) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5358] setpgid(0, 0 [pid 5352] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 66.656053][ T5352] loop0: detected capacity change from 0 to 32768 [pid 5352] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5358] <... setpgid resumed>) = 0 [pid 5352] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] <... futex resumed>) = 0 [pid 5352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] rename("./file2", "./file1" [pid 5351] <... futex resumed>) = 0 [pid 5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5351] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5358] <... openat resumed>) = 3 [pid 5355] <... write resumed>) = 16777216 [pid 5358] write(3, "1000", 4 [pid 5355] munmap(0x7f919cc00000, 138412032 [pid 5358] <... write resumed>) = 4 [pid 5358] close(3) = 0 [pid 5358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5355] <... munmap resumed>) = 0 [pid 5358] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [ 66.722316][ T5352] ERROR: (device loop0): diWrite: ixpxd invalid [ 66.722316][ T5352] [ 66.751241][ T5352] ERROR: (device loop0): remounting filesystem as read-only [pid 5358] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5355] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5057] <... ioctl resumed>) = 0 [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] close(3 [pid 5355] <... openat resumed>) = 4 [pid 5358] <... mmap resumed>) = 0x7f91a5087000 [pid 5057] <... close resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5358] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5355] ioctl(4, LOOP_SET_FD, 3 [pid 5351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5351] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5351] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5351] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5359]}, 88) = 5359 [pid 5351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5351] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5351] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5359 attached [pid 5358] <... mprotect resumed>) = 0 [pid 5359] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5358] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5355] <... ioctl resumed>) = 0 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5360 [pid 5359] set_robust_list(0x7f91a50869a0, 24 [pid 5358] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5355] close(3 [pid 5359] <... set_robust_list resumed>) = 0 [pid 5358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5355] <... close resumed>) = 0 [pid 5355] close(4./strace-static-x86_64: Process 5361 attached ./strace-static-x86_64: Process 5360 attached [pid 5359] rt_sigprocmask(SIG_SETMASK, [], [pid 5355] <... close resumed>) = 0 [pid 5361] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5360] set_robust_list(0x5555565206a0, 24 [pid 5361] <... rseq resumed>) = 0 [pid 5360] <... set_robust_list resumed>) = 0 [pid 5359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5358] <... clone3 resumed> => {parent_tid=[5361]}, 88) = 5361 [pid 5355] mkdir("./file2", 0777 [pid 5361] set_robust_list(0x7f91a50a79a0, 24 [pid 5360] chdir("./17" [pid 5359] mkdir(".", 0777 [pid 5358] rt_sigprocmask(SIG_SETMASK, [], [pid 5361] <... set_robust_list resumed>) = 0 [pid 5360] <... chdir resumed>) = 0 [pid 5359] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5361] rt_sigprocmask(SIG_SETMASK, [], [pid 5360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5359] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5358] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... mkdir resumed>) = 0 [pid 5361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5360] <... prctl resumed>) = 0 [pid 5360] setpgid(0, 0) = 0 [pid 5359] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5361] memfd_create("syzkaller", 0 [pid 5360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5358] <... futex resumed>) = 0 [pid 5355] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5361] <... memfd_create resumed>) = 3 [pid 5360] <... openat resumed>) = 3 [pid 5360] write(3, "1000", 4) = 4 [pid 5361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5360] close(3 [pid 5359] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5361] <... mmap resumed>) = 0x7f919cc00000 [pid 5360] <... close resumed>) = 0 [pid 5359] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5360] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5359] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5360] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5360] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5360] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5360] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5360] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5360] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5362]}, 88) = 5362 [pid 5360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5360] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5360] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5362 attached [pid 5362] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5362] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5362] memfd_create("syzkaller", 0) = 3 [pid 5362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5352] <... rename resumed>) = -1 EIO (Input/output error) [pid 5352] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5352] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] exit_group(0 [pid 5359] <... futex resumed>) = ? [pid 5352] <... futex resumed>) = ? [pid 5351] <... exit_group resumed>) = ? [pid 5352] +++ exited with 0 +++ [pid 5359] +++ exited with 0 +++ [pid 5351] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5056] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./17/binderfs") = 0 [pid 5056] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5355] <... mount resumed>) = 0 [pid 5355] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5355] chdir("./file2") = 0 [pid 5355] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5355] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5354] <... futex resumed>) = 0 [pid 5354] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 66.769551][ T5352] ERROR: (device loop0): txAbort: [ 66.769551][ T5352] [ 66.778581][ T5355] loop2: detected capacity change from 0 to 32768 [ 66.799711][ T5352] ERROR: (device loop0): remounting filesystem as read-only [pid 5354] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5355] rename("./file2", "./file1" [pid 5056] <... umount2 resumed>) = 0 [pid 5056] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./17/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./17/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./17/file2") = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] <... close resumed>) = 0 [pid 5056] close(3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./17") = 0 [pid 5056] mkdir("./18", 0777 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5363 [pid 5056] <... mkdir resumed>) = 0 [pid 5354] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5063] <... umount2 resumed>) = 0 [pid 5354] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}./strace-static-x86_64: Process 5363 attached ) = -1 ETIMEDOUT (Connection timed out) [pid 5363] set_robust_list(0x5555565206a0, 24) = 0 [pid 5354] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5363] chdir("./17" [pid 5354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5354] <... mmap resumed>) = 0x7f91a5066000 [pid 5063] newfstatat(AT_FDCWD, "./16/file2", [pid 5363] <... chdir resumed>) = 0 [pid 5354] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5354] <... mprotect resumed>) = 0 [pid 5063] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5363] <... prctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./16/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5363] setpgid(0, 0 [pid 5063] <... openat resumed>) = 4 [pid 5363] <... setpgid resumed>) = 0 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(4, [pid 5056] <... openat resumed>) = 3 [pid 5354] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5363] <... openat resumed>) = 3 [pid 5354] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] getdents64(4, [pid 5363] write(3, "1000", 4 [pid 5354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5363] <... write resumed>) = 4 [pid 5063] close(4 [pid 5363] close(3 [pid 5354] <... clone3 resumed> => {parent_tid=[5364]}, 88) = 5364 [pid 5063] <... close resumed>) = 0 ./strace-static-x86_64: Process 5364 attached [pid 5363] <... close resumed>) = 0 [pid 5354] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] rmdir("./16/file2" [pid 5364] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5363] symlink("/dev/binderfs", "./binderfs" [pid 5354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5364] <... rseq resumed>) = 0 [ 66.855816][ T5355] ERROR: (device loop2): diWrite: ixpxd invalid [ 66.855816][ T5355] [ 66.876808][ T5355] ERROR: (device loop2): remounting filesystem as read-only [pid 5354] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 5364] set_robust_list(0x7f91a50869a0, 24 [pid 5354] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5363] <... symlink resumed>) = 0 [pid 5364] <... set_robust_list resumed>) = 0 [pid 5354] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] close(3 [pid 5364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5363] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 5364] mkdir(".", 0777 [pid 5063] rmdir("./16" [pid 5364] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5363] <... futex resumed>) = 0 [pid 5363] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5363] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5364] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5363] <... mmap resumed>) = 0x7f91a5087000 [pid 5363] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] mkdir("./17", 0777 [pid 5363] <... mprotect resumed>) = 0 [pid 5363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] <... mkdir resumed>) = 0 [pid 5363] <... clone3 resumed> => {parent_tid=[5365]}, 88) = 5365 [pid 5363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5363] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5363] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5365 attached [pid 5365] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5365] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5365] memfd_create("syzkaller", 0) = 3 [pid 5365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5364] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5364] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5354] <... futex resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5364] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5355] <... rename resumed>) = -1 EIO (Input/output error) [pid 5355] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5355] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5354] exit_group(0) = ? [pid 5355] <... futex resumed>) = ? [pid 5355] +++ exited with 0 +++ [pid 5364] <... futex resumed>) = ? [pid 5364] +++ exited with 0 +++ [pid 5354] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5354, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5058] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 66.910003][ T5355] ERROR: (device loop2): txAbort: [ 66.910003][ T5355] [ 66.941361][ T5355] ERROR: (device loop2): remounting filesystem as read-only [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./17/binderfs") = 0 [pid 5361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5058] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./17/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./17/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./17/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./17") = 0 [pid 5058] mkdir("./18", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5366 ./strace-static-x86_64: Process 5366 attached [pid 5366] set_robust_list(0x5555565206a0, 24) = 0 [pid 5366] chdir("./18") = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5366] setpgid(0, 0) = 0 [pid 5366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] <... close resumed>) = 0 [pid 5366] write(3, "1000", 4) = 4 [pid 5366] close(3) = 0 [pid 5366] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5366] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5366] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5366] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5366] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5366] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5367 attached [], 8) = 0 [pid 5366] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5368]}, 88) = 5368 [pid 5366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5366] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5367] set_robust_list(0x5555565206a0, 24 [pid 5366] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5367 [pid 5367] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5368 attached [pid 5368] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5368] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5368] memfd_create("syzkaller", 0) = 3 [pid 5367] chdir("./17" [pid 5368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5367] <... chdir resumed>) = 0 [pid 5368] <... mmap resumed>) = 0x7f919cc00000 [pid 5367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5367] setpgid(0, 0) = 0 [pid 5367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5367] write(3, "1000", 4) = 4 [pid 5367] close(3) = 0 [pid 5367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5367] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5367] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5361] <... write resumed>) = 16777216 [pid 5361] munmap(0x7f919cc00000, 138412032) = 0 [pid 5361] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5367] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5367] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5361] <... openat resumed>) = 4 [pid 5361] ioctl(4, LOOP_SET_FD, 3 [pid 5367] <... mmap resumed>) = 0x7f91a5087000 [pid 5367] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5361] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5369 attached [pid 5367] <... clone3 resumed> => {parent_tid=[5369]}, 88) = 5369 [pid 5369] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5361] close(3) = 0 [pid 5361] close(4) = 0 [pid 5367] rt_sigprocmask(SIG_SETMASK, [], [pid 5369] <... rseq resumed>) = 0 [pid 5361] mkdir("./file2", 0777 [pid 5369] set_robust_list(0x7f91a50a79a0, 24 [pid 5361] <... mkdir resumed>) = 0 [pid 5369] <... set_robust_list resumed>) = 0 [pid 5361] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5369] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5367] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5369] <... futex resumed>) = 0 [pid 5367] <... futex resumed>) = 1 [pid 5369] memfd_create("syzkaller", 0 [pid 5367] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5369] <... memfd_create resumed>) = 3 [pid 5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5362] <... write resumed>) = 16777216 [ 67.331457][ T5361] loop4: detected capacity change from 0 to 32768 [pid 5362] munmap(0x7f919cc00000, 138412032 [pid 5361] <... mount resumed>) = 0 [pid 5361] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5361] chdir("./file2") = 0 [pid 5361] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5361] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5361] rename("./file2", "./file1" [pid 5358] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5370 attached [pid 5362] <... munmap resumed>) = 0 [pid 5370] set_robust_list(0x5555565206a0, 24 [pid 5362] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5370 [pid 5370] <... set_robust_list resumed>) = 0 [pid 5362] <... openat resumed>) = 4 [pid 5370] chdir("./18" [pid 5362] ioctl(4, LOOP_SET_FD, 3 [pid 5370] <... chdir resumed>) = 0 [pid 5370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5370] setpgid(0, 0) = 0 [pid 5370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5370] write(3, "1000", 4) = 4 [pid 5370] close(3) = 0 [pid 5370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5370] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] <... ioctl resumed>) = 0 [pid 5358] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5370] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5362] close(3 [pid 5370] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5362] <... close resumed>) = 0 [pid 5370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5362] close(4 [pid 5370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5362] <... close resumed>) = 0 [pid 5358] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5362] mkdir("./file2", 0777 [pid 5358] <... mmap resumed>) = 0x7f91a5066000 [pid 5370] <... mmap resumed>) = 0x7f91a5087000 [pid 5358] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5362] <... mkdir resumed>) = 0 [pid 5358] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5370] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5358] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5371]}, 88) = 5371 [pid 5370] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5358] rt_sigprocmask(SIG_SETMASK, [], [pid 5370] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5362] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5358] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5370] <... clone3 resumed> => {parent_tid=[5372]}, 88) = 5372 [pid 5358] <... futex resumed>) = 0 [pid 5370] rt_sigprocmask(SIG_SETMASK, [], [pid 5358] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5370] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5372 attached ./strace-static-x86_64: Process 5371 attached [pid 5372] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5370] <... futex resumed>) = 0 [pid 5362] <... mount resumed>) = 0 [ 67.400434][ T5361] ERROR: (device loop4): diWrite: ixpxd invalid [ 67.400434][ T5361] [ 67.423422][ T5362] loop1: detected capacity change from 0 to 32768 [ 67.442909][ T5361] ERROR: (device loop4): remounting filesystem as read-only [pid 5372] <... rseq resumed>) = 0 [pid 5371] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5370] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5362] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5371] <... rseq resumed>) = 0 [pid 5362] <... openat resumed>) = 3 [pid 5371] set_robust_list(0x7f91a50869a0, 24 [pid 5372] set_robust_list(0x7f91a50a79a0, 24 [pid 5371] <... set_robust_list resumed>) = 0 [pid 5372] <... set_robust_list resumed>) = 0 [pid 5371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5371] mkdir(".", 0777 [pid 5372] rt_sigprocmask(SIG_SETMASK, [], [pid 5371] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5371] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5362] chdir("./file2" [pid 5372] memfd_create("syzkaller", 0 [pid 5371] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5365] <... write resumed>) = 16777216 [pid 5362] <... chdir resumed>) = 0 [pid 5372] <... memfd_create resumed>) = 3 [pid 5371] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5371] <... futex resumed>) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5371] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5362] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] <... mmap resumed>) = 0x7f919cc00000 [pid 5365] munmap(0x7f919cc00000, 138412032 [pid 5362] <... futex resumed>) = 1 [pid 5360] <... futex resumed>) = 0 [pid 5360] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] rename("./file2", "./file1" [pid 5360] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5365] <... munmap resumed>) = 0 [ 67.487779][ T5361] ERROR: (device loop4): txAbort: [ 67.487779][ T5361] [ 67.504523][ T5362] ERROR: (device loop1): diWrite: ixpxd invalid [ 67.504523][ T5362] [ 67.507541][ T5361] ERROR: (device loop4): remounting filesystem as read-only [pid 5365] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5365] ioctl(4, LOOP_SET_FD, 3 [pid 5361] <... rename resumed>) = -1 EIO (Input/output error) [pid 5361] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5361] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5358] exit_group(0 [pid 5371] <... futex resumed>) = ? [pid 5361] <... futex resumed>) = ? [pid 5358] <... exit_group resumed>) = ? [pid 5371] +++ exited with 0 +++ [pid 5361] +++ exited with 0 +++ [pid 5358] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5358, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5362] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5362] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5360] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5360] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] newfstatat(3, "", [pid 5360] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 5362] mkdir(".", 0777 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5362] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5060] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5362] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5362] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5362] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5360] <... futex resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5360] exit_group(0 [pid 5060] unlink("./16/binderfs" [pid 5365] <... ioctl resumed>) = 0 [pid 5360] <... exit_group resumed>) = ? [pid 5060] <... unlink resumed>) = 0 [pid 5060] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5362] +++ exited with 0 +++ [pid 5360] +++ exited with 0 +++ [pid 5365] close(3 [pid 5060] <... umount2 resumed>) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5360, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5365] <... close resumed>) = 0 [pid 5057] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5057] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./17/binderfs" [pid 5365] close(4 [pid 5057] <... unlink resumed>) = 0 [pid 5365] <... close resumed>) = 0 [pid 5057] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./16/file2", [pid 5365] mkdir("./file2", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./16/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5365] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./16/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [pid 5365] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 67.531295][ T5362] ERROR: (device loop1): remounting filesystem as read-only [ 67.542673][ T5365] loop3: detected capacity change from 0 to 32768 [ 67.551076][ T5362] ERROR: (device loop1): txAbort: [ 67.551076][ T5362] [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./16/file2" [pid 5365] <... mount resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5365] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./16" [pid 5365] <... openat resumed>) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5060] mkdir("./17", 0777 [pid 5057] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... mkdir resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5365] chdir("./file2" [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5057] newfstatat(AT_FDCWD, "./17/file2", [pid 5365] <... chdir resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5365] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5057] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5365] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5365] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] openat(AT_FDCWD, "./17/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5365] <... futex resumed>) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5057] <... openat resumed>) = 4 [pid 5365] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5363] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] newfstatat(4, "", [pid 5365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5363] <... futex resumed>) = 0 [pid 5365] rename("./file2", "./file1" [pid 5363] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./17/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./17") = 0 [pid 5057] mkdir("./18", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5365] <... rename resumed>) = -1 EIO (Input/output error) [pid 5363] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5363] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5363] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5373]}, 88) = 5373 [pid 5363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5363] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5363] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5373 attached [pid 5373] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5373] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5373] mkdir(".", 0777) = -1 EEXIST (File exists) [ 67.625757][ T5365] ERROR: (device loop3): diWrite: ixpxd invalid [ 67.625757][ T5365] [ 67.651198][ T5365] ERROR: (device loop3): remounting filesystem as read-only [ 67.658563][ T5365] ERROR: (device loop3): txAbort: [ 67.658563][ T5365] [pid 5373] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5365] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5363] exit_group(0) = ? [pid 5365] <... futex resumed>) = ? [pid 5373] +++ exited with 0 +++ [pid 5365] +++ exited with 0 +++ [pid 5363] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5363, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} --- [pid 5059] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./17/binderfs") = 0 [pid 5059] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5059] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./17/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./17/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./17/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./17") = 0 [pid 5059] mkdir("./18", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5368] <... write resumed>) = 16777216 [pid 5368] munmap(0x7f919cc00000, 138412032) = 0 [pid 5368] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5368] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5374 [pid 5057] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5374 attached [pid 5057] close(3 [pid 5374] set_robust_list(0x5555565206a0, 24 [pid 5057] <... close resumed>) = 0 [pid 5374] <... set_robust_list resumed>) = 0 [pid 5368] <... ioctl resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5374] chdir("./17" [pid 5368] close(3 [pid 5374] <... chdir resumed>) = 0 [pid 5368] <... close resumed>) = 0 [pid 5374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5368] close(4 [pid 5374] <... prctl resumed>) = 0 [pid 5368] <... close resumed>) = 0 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5375 [pid 5374] setpgid(0, 0) = 0 [pid 5374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5374] write(3, "1000", 4./strace-static-x86_64: Process 5375 attached ) = 4 [pid 5374] close(3) = 0 [pid 5374] symlink("/dev/binderfs", "./binderfs" [pid 5368] mkdir("./file2", 0777 [pid 5375] set_robust_list(0x5555565206a0, 24 [pid 5374] <... symlink resumed>) = 0 [pid 5368] <... mkdir resumed>) = 0 [pid 5374] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5374] <... futex resumed>) = 0 [pid 5374] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5374] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5375] <... set_robust_list resumed>) = 0 [pid 5374] <... mprotect resumed>) = 0 [pid 5375] chdir("./18" [pid 5374] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5376]}, 88) = 5376 [pid 5368] <... mount resumed>) = 0 [pid 5375] <... chdir resumed>) = 0 [pid 5374] rt_sigprocmask(SIG_SETMASK, [], [pid 5375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5368] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5376 attached [pid 5375] <... prctl resumed>) = 0 [pid 5374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5368] <... openat resumed>) = 3 [pid 5376] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5374] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5375] setpgid(0, 0 [pid 5368] chdir("./file2" [pid 5376] <... rseq resumed>) = 0 [pid 5374] <... futex resumed>) = 0 [pid 5376] set_robust_list(0x7f91a50a79a0, 24 [pid 5375] <... setpgid resumed>) = 0 [pid 5374] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5368] <... chdir resumed>) = 0 [pid 5376] <... set_robust_list resumed>) = 0 [pid 5368] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5376] rt_sigprocmask(SIG_SETMASK, [], [pid 5375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5375] <... openat resumed>) = 3 [ 67.912632][ T5368] loop0: detected capacity change from 0 to 32768 [pid 5368] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] memfd_create("syzkaller", 0 [pid 5375] write(3, "1000", 4 [pid 5372] <... write resumed>) = 16777216 [pid 5366] <... futex resumed>) = 0 [pid 5368] <... futex resumed>) = 1 [pid 5376] <... memfd_create resumed>) = 3 [pid 5366] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5368] rename("./file2", "./file1" [pid 5366] <... futex resumed>) = 0 [pid 5376] <... mmap resumed>) = 0x7f919cc00000 [pid 5366] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5372] munmap(0x7f919cc00000, 138412032 [pid 5375] <... write resumed>) = 4 [pid 5375] close(3) = 0 [pid 5375] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5375] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5375] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5369] <... write resumed>) = 16777216 [pid 5375] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5369] munmap(0x7f919cc00000, 138412032 [pid 5375] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5372] <... munmap resumed>) = 0 [pid 5372] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5375] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5372] <... openat resumed>) = 4 [pid 5375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5372] ioctl(4, LOOP_SET_FD, 3 [pid 5375] <... mmap resumed>) = 0x7f91a5087000 [pid 5375] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5375] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5375] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5377]}, 88) = 5377 [pid 5375] rt_sigprocmask(SIG_SETMASK, [], [pid 5372] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5377 attached [pid 5375] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5369] <... munmap resumed>) = 0 [pid 5366] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5377] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5375] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5366] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5377] <... rseq resumed>) = 0 [pid 5375] <... futex resumed>) = 0 [pid 5369] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5366] <... futex resumed>) = 0 [pid 5377] set_robust_list(0x7f91a50a79a0, 24 [pid 5375] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5377] <... set_robust_list resumed>) = 0 [pid 5369] <... openat resumed>) = 4 [pid 5366] <... mmap resumed>) = 0x7f91a5066000 [pid 5372] close(3) = 0 [pid 5366] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5377] rt_sigprocmask(SIG_SETMASK, [], [ 67.968602][ T5368] ERROR: (device loop0): diWrite: ixpxd invalid [ 67.968602][ T5368] [ 67.996746][ T5368] ERROR: (device loop0): remounting filesystem as read-only [ 68.008321][ T5372] loop2: detected capacity change from 0 to 32768 [pid 5372] close(4 [pid 5377] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5372] <... close resumed>) = 0 [pid 5369] ioctl(4, LOOP_SET_FD, 3 [pid 5366] <... mprotect resumed>) = 0 [pid 5372] mkdir("./file2", 0777) = 0 [pid 5372] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5377] memfd_create("syzkaller", 0 [pid 5366] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5377] <... memfd_create resumed>) = 3 [pid 5366] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5366] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5378]}, 88) = 5378 [pid 5366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5366] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5366] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5378 attached [pid 5377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5372] <... mount resumed>) = 0 [pid 5369] <... ioctl resumed>) = 0 [pid 5377] <... mmap resumed>) = 0x7f919cc00000 [pid 5369] close(3 [pid 5378] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5372] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5378] <... rseq resumed>) = 0 [pid 5372] <... openat resumed>) = 3 [pid 5378] set_robust_list(0x7f91a50869a0, 24 [pid 5372] chdir("./file2" [pid 5369] <... close resumed>) = 0 [pid 5378] <... set_robust_list resumed>) = 0 [pid 5372] <... chdir resumed>) = 0 [pid 5369] close(4 [pid 5378] rt_sigprocmask(SIG_SETMASK, [], [pid 5372] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5369] <... close resumed>) = 0 [pid 5378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5372] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5369] mkdir("./file2", 0777 [pid 5378] mkdir(".", 0777 [pid 5372] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5378] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5372] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5369] <... mkdir resumed>) = 0 [pid 5370] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5378] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5372] rename("./file2", "./file1" [pid 5370] <... futex resumed>) = 0 [pid 5378] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5370] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5368] <... rename resumed>) = -1 EIO (Input/output error) [pid 5378] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5368] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5366] <... futex resumed>) = 0 [pid 5368] <... futex resumed>) = 0 [pid 5378] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5369] <... mount resumed>) = 0 [pid 5368] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5366] exit_group(0 [pid 5369] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5378] <... futex resumed>) = ? [pid 5366] <... exit_group resumed>) = ? [pid 5369] <... openat resumed>) = 3 [pid 5368] <... futex resumed>) = ? [pid 5378] +++ exited with 0 +++ [pid 5369] chdir("./file2" [pid 5368] +++ exited with 0 +++ [pid 5366] +++ exited with 0 +++ [pid 5369] <... chdir resumed>) = 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5366, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=17 /* 0.17 s */} --- [pid 5369] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5369] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5369] <... futex resumed>) = 1 [pid 5367] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5367] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5369] rename("./file2", "./file1" [pid 5367] <... futex resumed>) = 0 [pid 5056] <... openat resumed>) = 3 [ 68.037686][ T5368] ERROR: (device loop0): txAbort: [ 68.037686][ T5368] [ 68.046254][ T5369] loop5: detected capacity change from 0 to 32768 [ 68.072666][ T5372] ERROR: (device loop2): diWrite: ixpxd invalid [ 68.072666][ T5372] [pid 5056] newfstatat(3, "", [pid 5367] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5370] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] getdents64(3, [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5370] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5370] <... clone3 resumed> => {parent_tid=[5379]}, 88) = 5379 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5370] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] unlink("./18/binderfs" [pid 5370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5370] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... unlink resumed>) = 0 [pid 5370] <... futex resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5056] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5370] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5379 attached [pid 5379] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5379] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5379] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5379] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [ 68.102447][ T5369] ERROR: (device loop5): diWrite: ixpxd invalid [ 68.102447][ T5369] [ 68.111579][ T5372] ERROR: (device loop2): remounting filesystem as read-only [ 68.128035][ T5372] ERROR: (device loop2): txAbort: [ 68.128035][ T5372] [pid 5379] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5379] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5379] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5380 ./strace-static-x86_64: Process 5380 attached [pid 5380] set_robust_list(0x5555565206a0, 24) = 0 [pid 5380] chdir("./18") = 0 [pid 5380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5380] setpgid(0, 0) = 0 [pid 5380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5380] write(3, "1000", 4) = 4 [ 68.146053][ T5369] ERROR: (device loop5): remounting filesystem as read-only [pid 5380] close(3 [pid 5367] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] <... umount2 resumed>) = 0 [pid 5367] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5367] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5381 attached [pid 5381] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5367] <... clone3 resumed> => {parent_tid=[5381]}, 88) = 5381 [pid 5056] newfstatat(AT_FDCWD, "./18/file2", [pid 5367] rt_sigprocmask(SIG_SETMASK, [], [pid 5380] <... close resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5380] symlink("/dev/binderfs", "./binderfs" [pid 5381] <... rseq resumed>) = 0 [pid 5367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5381] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5380] <... symlink resumed>) = 0 [pid 5367] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] rt_sigprocmask(SIG_SETMASK, [], [pid 5380] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5380] <... futex resumed>) = 0 [pid 5367] <... futex resumed>) = 0 [pid 5381] mkdir(".", 0777 [pid 5380] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5367] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5372] <... rename resumed>) = -1 EIO (Input/output error) [pid 5380] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5056] openat(AT_FDCWD, "./18/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5381] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5369] <... rename resumed>) = -1 EIO (Input/output error) [pid 5381] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5369] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... openat resumed>) = 4 [pid 5380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5369] <... futex resumed>) = 0 [pid 5056] newfstatat(4, "", [pid 5381] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] <... mmap resumed>) = 0x7f91a5087000 [pid 5369] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5381] <... futex resumed>) = 1 [pid 5380] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5367] <... futex resumed>) = 0 [pid 5056] getdents64(4, [pid 5381] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5367] exit_group(0 [pid 5380] <... mprotect resumed>) = 0 [pid 5367] <... exit_group resumed>) = ? [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5369] <... futex resumed>) = ? [pid 5381] <... futex resumed>) = ? [pid 5381] +++ exited with 0 +++ [pid 5369] +++ exited with 0 +++ [pid 5056] getdents64(4, [pid 5372] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5372] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] close(4 [pid 5370] exit_group(0 [pid 5379] <... futex resumed>) = ? [pid 5372] <... futex resumed>) = ? [pid 5370] <... exit_group resumed>) = ? [pid 5380] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5379] +++ exited with 0 +++ [pid 5372] +++ exited with 0 +++ [pid 5370] +++ exited with 0 +++ [pid 5367] +++ exited with 0 +++ [pid 5056] <... close resumed>) = 0 [pid 5380] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5367, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=20 /* 0.20 s */} --- [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5370, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=16 /* 0.16 s */} --- [pid 5056] rmdir("./18/file2" [pid 5380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5058] restart_syscall(<... resuming interrupted clone ...>) = 0 ./strace-static-x86_64: Process 5382 attached [pid 5056] <... rmdir resumed>) = 0 [pid 5380] <... clone3 resumed> => {parent_tid=[5382]}, 88) = 5382 [pid 5056] getdents64(3, [pid 5380] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5380] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] close(3 [pid 5380] <... futex resumed>) = 0 [pid 5063] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5380] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... close resumed>) = 0 [pid 5382] <... rseq resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] rmdir("./18" [pid 5382] set_robust_list(0x7f91a50a79a0, 24 [pid 5063] <... openat resumed>) = 3 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5382] <... set_robust_list resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5058] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5382] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] <... openat resumed>) = 3 [pid 5382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] getdents64(3, [pid 5058] newfstatat(3, "", [pid 5056] <... rmdir resumed>) = 0 [pid 5382] memfd_create("syzkaller", 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] mkdir("./19", 0777 [pid 5382] <... memfd_create resumed>) = 3 [pid 5063] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] getdents64(3, [ 68.173320][ T5372] ERROR: (device loop2): remounting filesystem as read-only [ 68.174479][ T5369] ERROR: (device loop5): txAbort: [ 68.174479][ T5369] [pid 5382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] <... mkdir resumed>) = 0 [pid 5382] <... mmap resumed>) = 0x7f919cc00000 [pid 5063] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5058] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5063] unlink("./17/binderfs" [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./18/binderfs" [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... unlink resumed>) = 0 [pid 5058] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5058] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./18/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./18/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, [pid 5377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] <... umount2 resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4 [pid 5063] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] rmdir("./18/file2" [pid 5063] newfstatat(AT_FDCWD, "./17/file2", [pid 5058] <... rmdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5063] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] rmdir("./18" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./17/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] mkdir("./19", 0777 [pid 5063] <... openat resumed>) = 4 [pid 5058] <... mkdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./17/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./17") = 0 [pid 5063] mkdir("./18", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5376] <... write resumed>) = 16777216 [pid 5056] <... ioctl resumed>) = 0 [pid 5376] munmap(0x7f919cc00000, 138412032 [pid 5056] close(3 [pid 5376] <... munmap resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5383 attached [pid 5376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5383] set_robust_list(0x5555565206a0, 24 [pid 5376] <... openat resumed>) = 4 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5383 [pid 5383] <... set_robust_list resumed>) = 0 [pid 5383] chdir("./19" [pid 5377] <... write resumed>) = 16777216 [pid 5376] ioctl(4, LOOP_SET_FD, 3 [pid 5383] <... chdir resumed>) = 0 [pid 5377] munmap(0x7f919cc00000, 138412032 [pid 5383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5377] <... munmap resumed>) = 0 [pid 5383] setpgid(0, 0 [pid 5377] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5383] <... setpgid resumed>) = 0 [pid 5383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5377] <... openat resumed>) = 4 [pid 5376] <... ioctl resumed>) = 0 [pid 5376] close(3 [pid 5383] <... openat resumed>) = 3 [pid 5377] ioctl(4, LOOP_SET_FD, 3 [pid 5383] write(3, "1000", 4 [pid 5376] <... close resumed>) = 0 [pid 5376] close(4 [pid 5383] <... write resumed>) = 4 [pid 5383] close(3 [pid 5376] <... close resumed>) = 0 [pid 5383] <... close resumed>) = 0 [pid 5383] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5383] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] mkdir("./file2", 0777 [pid 5383] <... futex resumed>) = 0 [pid 5376] <... mkdir resumed>) = 0 [pid 5383] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5376] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5383] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5383] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5383] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5384]}, 88) = 5384 ./strace-static-x86_64: Process 5384 attached [pid 5384] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5383] rt_sigprocmask(SIG_SETMASK, [], [pid 5384] <... rseq resumed>) = 0 [pid 5383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5384] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5384] rt_sigprocmask(SIG_SETMASK, [], [pid 5383] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5384] memfd_create("syzkaller", 0 [pid 5383] <... futex resumed>) = 0 [pid 5383] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5384] <... memfd_create resumed>) = 3 [pid 5384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5377] <... ioctl resumed>) = 0 [pid 5376] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3) = 0 [pid 5376] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5377] close(3) = 0 [pid 5377] close(4) = 0 [pid 5377] mkdir("./file2", 0777./strace-static-x86_64: Process 5385 attached ) = 0 [pid 5376] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5385] set_robust_list(0x5555565206a0, 24 [pid 5376] chdir("./file2" [pid 5385] <... set_robust_list resumed>) = 0 [pid 5376] <... chdir resumed>) = 0 [pid 5385] chdir("./19" [ 68.561283][ T5376] loop4: detected capacity change from 0 to 32768 [ 68.594226][ T5377] loop1: detected capacity change from 0 to 32768 [pid 5376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5385] <... chdir resumed>) = 0 [pid 5376] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... close resumed>) = 0 [pid 5385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5376] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5385] <... prctl resumed>) = 0 [pid 5376] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5386 attached [pid 5385] setpgid(0, 0 [pid 5374] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] rename("./file2", "./file1" [pid 5385] <... setpgid resumed>) = 0 [pid 5374] <... futex resumed>) = 0 [pid 5374] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5386 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5385 [pid 5377] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5386] set_robust_list(0x5555565206a0, 24) = 0 [pid 5386] chdir("./18") = 0 [pid 5386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5385] <... openat resumed>) = 3 [pid 5386] <... prctl resumed>) = 0 [pid 5386] setpgid(0, 0 [pid 5385] write(3, "1000", 4 [pid 5386] <... setpgid resumed>) = 0 [pid 5385] <... write resumed>) = 4 [pid 5386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5385] close(3 [pid 5386] <... openat resumed>) = 3 [pid 5386] write(3, "1000", 4 [pid 5385] <... close resumed>) = 0 [pid 5386] <... write resumed>) = 4 [pid 5385] symlink("/dev/binderfs", "./binderfs" [pid 5386] close(3) = 0 [pid 5385] <... symlink resumed>) = 0 [pid 5386] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5385] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5385] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5385] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5386] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5385] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5386] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5385] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5386] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5386] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 68.644854][ T5376] ERROR: (device loop4): diWrite: ixpxd invalid [ 68.644854][ T5376] [ 68.664599][ T5376] ERROR: (device loop4): remounting filesystem as read-only [pid 5385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5374] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5374] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5385] <... mmap resumed>) = 0x7f91a5087000 [pid 5385] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5385] <... mprotect resumed>) = 0 [pid 5376] <... rename resumed>) = -1 EIO (Input/output error) [pid 5374] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5386] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5385] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5377] <... mount resumed>) = 0 [pid 5376] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5386] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5385] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5377] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5376] <... futex resumed>) = 0 [pid 5374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5386] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5376] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] <... clone3 resumed> => {parent_tid=[5387]}, 88) = 5387 [pid 5386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5377] <... openat resumed>) = 3 [pid 5374] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5377] chdir("./file2" [pid 5374] <... futex resumed>) = 0 [pid 5385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5377] <... chdir resumed>) = 0 [pid 5374] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5377] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5389 attached [pid 5386] <... clone3 resumed> => {parent_tid=[5388]}, 88) = 5388 [pid 5377] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5377] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] rt_sigprocmask(SIG_SETMASK, [], [pid 5389] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5377] <... futex resumed>) = 1 [pid 5389] <... rseq resumed>) = 0 [pid 5375] <... futex resumed>) = 0 [pid 5389] set_robust_list(0x7f91a50a79a0, 24 [pid 5386] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5377] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5375] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... set_robust_list resumed>) = 0 [pid 5377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5375] <... futex resumed>) = 0 [pid 5389] rt_sigprocmask(SIG_SETMASK, [], [pid 5377] rename("./file2", "./file1" [pid 5375] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5388 attached ./strace-static-x86_64: Process 5387 attached [pid 5389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5385] <... clone3 resumed> => {parent_tid=[5389]}, 88) = 5389 [pid 5387] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5389] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5386] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5385] rt_sigprocmask(SIG_SETMASK, [], [pid 5387] <... rseq resumed>) = 0 [pid 5385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5388] <... rseq resumed>) = 0 [pid 5387] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5388] set_robust_list(0x7f91a50a79a0, 24 [pid 5387] rt_sigprocmask(SIG_SETMASK, [], [pid 5388] <... set_robust_list resumed>) = 0 [pid 5387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5385] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] rt_sigprocmask(SIG_SETMASK, [], [pid 5387] mkdir(".", 0777 [pid 5385] <... futex resumed>) = 1 [pid 5389] <... futex resumed>) = 0 [pid 5389] memfd_create("syzkaller", 0 [pid 5388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5387] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5385] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5389] <... memfd_create resumed>) = 3 [pid 5388] memfd_create("syzkaller", 0 [pid 5387] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5388] <... memfd_create resumed>) = 3 [pid 5387] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5389] <... mmap resumed>) = 0x7f919cc00000 [pid 5388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5387] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5388] <... mmap resumed>) = 0x7f919cc00000 [pid 5387] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] exit_group(0 [pid 5387] <... futex resumed>) = ? [pid 5374] <... exit_group resumed>) = ? [pid 5387] +++ exited with 0 +++ [pid 5376] <... futex resumed>) = ? [pid 5376] +++ exited with 0 +++ [pid 5374] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5374, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5060] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 68.691194][ T5376] ERROR: (device loop4): txAbort: [ 68.691194][ T5376] [ 68.708443][ T5377] ERROR: (device loop1): diWrite: ixpxd invalid [ 68.708443][ T5377] [pid 5060] unlink("./17/binderfs") = 0 [pid 5060] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5375] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5375] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5375] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5375] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./17/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./17/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./17/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", [pid 5375] <... mprotect resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5375] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5375] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./17/file2") = 0 [pid 5060] getdents64(3, [pid 5375] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5375] <... clone3 resumed> => {parent_tid=[5390]}, 88) = 5390 [pid 5060] rmdir("./17" [pid 5375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5375] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] mkdir("./18", 0777 [pid 5375] <... futex resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5390 attached [pid 5375] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5390] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5390] set_robust_list(0x7f91a50869a0, 24) = 0 [ 68.744885][ T5377] ERROR: (device loop1): remounting filesystem as read-only [ 68.761992][ T5377] ERROR: (device loop1): txAbort: [ 68.761992][ T5377] [pid 5390] rt_sigprocmask(SIG_SETMASK, [], [pid 5377] <... rename resumed>) = -1 EIO (Input/output error) [pid 5390] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5377] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5377] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5390] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5390] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5390] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5375] <... futex resumed>) = 0 [pid 5390] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5375] exit_group(0 [pid 5390] <... futex resumed>) = ? [pid 5375] <... exit_group resumed>) = ? [pid 5390] +++ exited with 0 +++ [pid 5377] <... futex resumed>) = ? [pid 5377] +++ exited with 0 +++ [pid 5375] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5375, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=19 /* 0.19 s */} --- [pid 5057] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5382] <... write resumed>) = 16777216 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./18/binderfs") = 0 [pid 5057] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] munmap(0x7f919cc00000, 138412032) = 0 [pid 5384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5382] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5057] newfstatat(AT_FDCWD, "./18/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5382] <... openat resumed>) = 4 [pid 5382] ioctl(4, LOOP_SET_FD, 3 [pid 5057] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5382] <... ioctl resumed>) = 0 [pid 5057] openat(AT_FDCWD, "./18/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5382] close(3 [pid 5057] <... openat resumed>) = 4 [pid 5057] newfstatat(4, "", [pid 5382] <... close resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5382] close(4 [pid 5057] getdents64(4, [pid 5382] <... close resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5382] mkdir("./file2", 0777) = 0 [pid 5382] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./18/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3 [pid 5382] <... mount resumed>) = 0 [pid 5057] <... close resumed>) = 0 [ 68.901559][ T5382] loop3: detected capacity change from 0 to 32768 [pid 5382] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5057] rmdir("./18" [pid 5382] <... openat resumed>) = 3 [pid 5382] chdir("./file2" [pid 5057] <... rmdir resumed>) = 0 [pid 5382] <... chdir resumed>) = 0 [pid 5382] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5382] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] mkdir("./19", 0777 [pid 5382] <... futex resumed>) = 1 [pid 5380] <... futex resumed>) = 0 [pid 5057] <... mkdir resumed>) = 0 [pid 5380] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5382] rename("./file2", "./file1" [pid 5380] <... futex resumed>) = 0 [pid 5380] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... openat resumed>) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5060] <... ioctl resumed>) = 0 [pid 5380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 68.995071][ T5382] ERROR: (device loop3): diWrite: ixpxd invalid [ 68.995071][ T5382] [pid 5380] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5380] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5391 attached [pid 5391] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5380] <... clone3 resumed> => {parent_tid=[5391]}, 88) = 5391 [pid 5380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5380] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5380] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5391] <... rseq resumed>) = 0 [pid 5391] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5391] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5391] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5392 attached [pid 5382] <... rename resumed>) = -1 EIO (Input/output error) [pid 5392] set_robust_list(0x5555565206a0, 24) = 0 [pid 5392] chdir("./18") = 0 [pid 5392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5392 [pid 5392] <... prctl resumed>) = 0 [pid 5392] setpgid(0, 0) = 0 [pid 5382] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5382] <... futex resumed>) = 0 [pid 5392] <... openat resumed>) = 3 [pid 5382] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5392] write(3, "1000", 4) = 4 [pid 5392] close(3) = 0 [pid 5392] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5392] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5392] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5392] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5392] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5392] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5391] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5391] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5380] <... futex resumed>) = 0 [pid 5391] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5380] exit_group(0 [pid 5392] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5391] <... futex resumed>) = ? [pid 5382] <... futex resumed>) = ? [pid 5380] <... exit_group resumed>) = ? [pid 5392] <... clone3 resumed> => {parent_tid=[5393]}, 88) = 5393 [pid 5382] +++ exited with 0 +++ [pid 5392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5393 attached [pid 5393] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5393] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5393] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5392] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5393] <... futex resumed>) = 0 [pid 5391] +++ exited with 0 +++ [pid 5380] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5380, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=22 /* 0.22 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5393] memfd_create("syzkaller", 0 [pid 5392] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... restart_syscall resumed>) = 0 [pid 5059] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5393] <... memfd_create resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 5393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5393] <... mmap resumed>) = 0x7f919cc00000 [ 69.069496][ T5382] ERROR: (device loop3): remounting filesystem as read-only [ 69.101122][ T5382] ERROR: (device loop3): txAbort: [ 69.101122][ T5382] [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./18/binderfs") = 0 [pid 5059] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5384] <... write resumed>) = 16777216 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5384] munmap(0x7f919cc00000, 138412032 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./18/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./18/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./18/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./18" [pid 5384] <... munmap resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./19", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5384] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5059] <... openat resumed>) = 3 [pid 5384] <... openat resumed>) = 4 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5384] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5389] <... write resumed>) = 16777216 [pid 5388] <... write resumed>) = 16777216 [pid 5384] close(3) = 0 [pid 5389] munmap(0x7f919cc00000, 138412032 [pid 5388] munmap(0x7f919cc00000, 138412032 [pid 5384] close(4) = 0 [pid 5384] mkdir("./file2", 0777) = 0 [pid 5384] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5389] <... munmap resumed>) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5394 [ 69.232509][ T5384] loop0: detected capacity change from 0 to 32768 ./strace-static-x86_64: Process 5394 attached [pid 5384] <... mount resumed>) = 0 [pid 5384] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5384] chdir("./file2") = 0 [pid 5384] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5384] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5384] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5394] set_robust_list(0x5555565206a0, 24) = 0 [pid 5394] chdir("./19") = 0 [pid 5394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5394] setpgid(0, 0) = 0 [pid 5394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5394] write(3, "1000", 4) = 4 [pid 5394] close(3) = 0 [pid 5394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5394] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... munmap resumed>) = 0 [pid 5383] <... futex resumed>) = 0 [pid 5389] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5383] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5394] <... futex resumed>) = 0 [pid 5394] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5394] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5384] <... futex resumed>) = 0 [pid 5383] <... futex resumed>) = 1 [pid 5389] <... openat resumed>) = 4 [pid 5389] ioctl(4, LOOP_SET_FD, 3 [pid 5384] rename("./file2", "./file1" [pid 5383] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5394] <... mmap resumed>) = 0x7f91a5087000 [pid 5394] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5394] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5395]}, 88) = 5395 [pid 5394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5394] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5394] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5395 attached [pid 5395] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5395] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5395] memfd_create("syzkaller", 0) = 3 [pid 5388] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5388] <... openat resumed>) = 4 [pid 5395] <... mmap resumed>) = 0x7f919cc00000 [pid 5388] ioctl(4, LOOP_SET_FD, 3 [pid 5389] <... ioctl resumed>) = 0 [ 69.303766][ T5384] ERROR: (device loop0): diWrite: ixpxd invalid [ 69.303766][ T5384] [ 69.304226][ T5389] loop2: detected capacity change from 0 to 32768 [ 69.321446][ T5384] ERROR: (device loop0): remounting filesystem as read-only [pid 5389] close(3 [pid 5383] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5389] <... close resumed>) = 0 [pid 5383] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] close(4 [pid 5383] <... futex resumed>) = 0 [pid 5383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5389] <... close resumed>) = 0 [pid 5384] <... rename resumed>) = -1 EIO (Input/output error) [pid 5383] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5389] mkdir("./file2", 0777 [pid 5388] <... ioctl resumed>) = 0 [pid 5384] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] <... mprotect resumed>) = 0 [pid 5384] <... futex resumed>) = 0 [pid 5383] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5389] <... mkdir resumed>) = 0 [pid 5388] close(3 [pid 5384] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5383] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5388] <... close resumed>) = 0 [pid 5383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5388] close(4) = 0 [pid 5383] <... clone3 resumed> => {parent_tid=[5396]}, 88) = 5396 [pid 5388] mkdir("./file2", 0777 [pid 5383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5388] <... mkdir resumed>) = 0 [pid 5383] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5383] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5396 attached [pid 5396] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5389] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5388] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5396] <... rseq resumed>) = 0 [pid 5396] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5396] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5396] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5396] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5383] <... futex resumed>) = 0 [pid 5388] <... mount resumed>) = 0 [pid 5396] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5383] exit_group(0 [pid 5396] <... futex resumed>) = ? [pid 5388] <... openat resumed>) = 3 [pid 5384] <... futex resumed>) = ? [pid 5383] <... exit_group resumed>) = ? [pid 5396] +++ exited with 0 +++ [pid 5384] +++ exited with 0 +++ [ 69.347525][ T5388] loop5: detected capacity change from 0 to 32768 [ 69.350078][ T5384] ERROR: (device loop0): txAbort: [ 69.350078][ T5384] [pid 5388] chdir("./file2" [pid 5383] +++ exited with 0 +++ [pid 5388] <... chdir resumed>) = 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5383, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=18 /* 0.18 s */} --- [pid 5388] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5056] restart_syscall(<... resuming interrupted clone ...> [pid 5388] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5388] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... restart_syscall resumed>) = 0 [pid 5388] <... futex resumed>) = 1 [pid 5386] <... futex resumed>) = 0 [pid 5388] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5386] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5386] <... futex resumed>) = 0 [pid 5388] rename("./file2", "./file1" [pid 5386] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./19/binderfs") = 0 [pid 5389] <... mount resumed>) = 0 [pid 5056] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5389] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5389] chdir("./file2") = 0 [pid 5389] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5389] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5385] <... futex resumed>) = 0 [pid 5389] rename("./file2", "./file1" [pid 5385] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 69.420066][ T5388] ERROR: (device loop5): diWrite: ixpxd invalid [ 69.420066][ T5388] [ 69.441178][ T5388] ERROR: (device loop5): remounting filesystem as read-only [ 69.448465][ T5388] ERROR: (device loop5): txAbort: [ 69.448465][ T5388] [pid 5385] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] <... rename resumed>) = -1 EIO (Input/output error) [pid 5386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5388] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 0 [pid 5388] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5389] <... rename resumed>) = -1 EIO (Input/output error) [pid 5386] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5389] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... mprotect resumed>) = 0 [pid 5389] <... futex resumed>) = 1 [pid 5386] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5385] <... futex resumed>) = 0 [pid 5389] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5386] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5385] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5385] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5397 attached [pid 5389] mkdir(".", 0777 [pid 5385] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5397] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5389] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5386] <... clone3 resumed> => {parent_tid=[5397]}, 88) = 5397 [pid 5397] <... rseq resumed>) = 0 [pid 5389] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5386] rt_sigprocmask(SIG_SETMASK, [], [pid 5397] set_robust_list(0x7f91a50869a0, 24 [pid 5386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5397] <... set_robust_list resumed>) = 0 [pid 5389] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5386] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] rt_sigprocmask(SIG_SETMASK, [], [pid 5386] <... futex resumed>) = 0 [pid 5397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5389] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5397] mkdir(".", 0777 [pid 5389] <... futex resumed>) = 1 [pid 5385] <... futex resumed>) = 0 [pid 5397] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5389] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5385] exit_group(0 [pid 5059] <... ioctl resumed>) = 0 [pid 5397] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5389] <... futex resumed>) = ? [pid 5385] <... exit_group resumed>) = ? [pid 5389] +++ exited with 0 +++ [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5398 attached [pid 5385] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5385, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=15 /* 0.15 s */} --- [pid 5398] set_robust_list(0x5555565206a0, 24) = 0 [pid 5058] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5398] chdir("./19" [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5398 [pid 5058] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5398] <... chdir resumed>) = 0 [pid 5398] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5397] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... openat resumed>) = 3 [pid 5397] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5386] <... futex resumed>) = 0 [pid 5397] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5386] exit_group(0 [pid 5397] <... futex resumed>) = ? [pid 5388] <... futex resumed>) = ? [pid 5386] <... exit_group resumed>) = ? [pid 5398] <... prctl resumed>) = 0 [pid 5397] +++ exited with 0 +++ [pid 5388] +++ exited with 0 +++ [pid 5386] +++ exited with 0 +++ [pid 5058] newfstatat(3, "", [pid 5398] setpgid(0, 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5386, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=23 /* 0.23 s */} --- [pid 5398] <... setpgid resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 69.467201][ T5389] ERROR: (device loop2): diWrite: ixpxd invalid [ 69.467201][ T5389] [ 69.491185][ T5389] ERROR: (device loop2): remounting filesystem as read-only [ 69.498474][ T5389] ERROR: (device loop2): txAbort: [ 69.498474][ T5389] [pid 5058] getdents64(3, [pid 5063] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(3, "", [pid 5058] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5398] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, [pid 5058] unlink("./19/binderfs" [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] <... unlink resumed>) = 0 [pid 5063] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5398] write(3, "1000", 4) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5398] close(3) = 0 [pid 5063] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5398] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5398] <... symlink resumed>) = 0 [pid 5063] unlink("./18/binderfs" [pid 5398] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5398] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5398] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5399 attached => {parent_tid=[5399]}, 88) = 5399 [pid 5399] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5398] rt_sigprocmask(SIG_SETMASK, [], [pid 5399] <... rseq resumed>) = 0 [pid 5399] set_robust_list(0x7f91a50a79a0, 24 [pid 5398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5398] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5398] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] <... set_robust_list resumed>) = 0 [pid 5399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5399] memfd_create("syzkaller", 0) = 3 [pid 5399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5063] <... umount2 resumed>) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./19/file2", [pid 5063] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./18/file2", [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./19/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... openat resumed>) = 4 [pid 5063] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] newfstatat(4, "", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./18/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(4, "", [pid 5058] close(4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5058] rmdir("./19/file2") = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] getdents64(3, [pid 5063] close(4) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./18/file2") = 0 [pid 5058] close(3) = 0 [pid 5063] getdents64(3, [pid 5058] rmdir("./19") = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5058] mkdir("./20", 0777) = 0 [pid 5063] rmdir("./18") = 0 [pid 5063] mkdir("./19", 0777 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5393] <... write resumed>) = 16777216 [pid 5063] <... mkdir resumed>) = 0 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5393] munmap(0x7f919cc00000, 138412032 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5393] <... munmap resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5393] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5393] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5393] close(3) = 0 [pid 5393] close(4) = 0 [pid 5393] mkdir("./file2", 0777) = 0 [pid 5393] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5056] <... umount2 resumed>) = 0 [pid 5393] <... mount resumed>) = 0 [pid 5393] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5393] chdir("./file2") = 0 [ 69.659169][ T5393] loop4: detected capacity change from 0 to 32768 [pid 5393] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5056] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./19/file2", [pid 5393] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./19/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5393] <... futex resumed>) = 1 [pid 5056] <... openat resumed>) = 4 [pid 5393] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./19/file2") = 0 [pid 5392] <... futex resumed>) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./19" [pid 5392] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... rmdir resumed>) = 0 [pid 5393] <... futex resumed>) = 0 [pid 5392] <... futex resumed>) = 1 [pid 5393] rename("./file2", "./file1" [pid 5056] mkdir("./20", 0777 [pid 5392] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... mkdir resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [ 69.725900][ T5393] ERROR: (device loop4): diWrite: ixpxd invalid [ 69.725900][ T5393] [ 69.763114][ T5393] ERROR: (device loop4): remounting filesystem as read-only [pid 5399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5392] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5392] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5392] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [ 69.778215][ T5393] ERROR: (device loop4): txAbort: [ 69.778215][ T5393] [pid 5393] <... rename resumed>) = -1 EIO (Input/output error) [pid 5392] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5393] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5392] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5393] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5392] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5400 attached => {parent_tid=[5400]}, 88) = 5400 [pid 5400] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5392] rt_sigprocmask(SIG_SETMASK, [], [pid 5400] <... rseq resumed>) = 0 [pid 5392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5392] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5392] <... futex resumed>) = 0 [pid 5400] rt_sigprocmask(SIG_SETMASK, [], [pid 5392] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5400] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5400] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5400] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5392] <... futex resumed>) = 0 [pid 5400] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5392] exit_group(0 [pid 5400] <... futex resumed>) = ? [pid 5393] <... futex resumed>) = ? [pid 5392] <... exit_group resumed>) = ? [pid 5400] +++ exited with 0 +++ [pid 5393] +++ exited with 0 +++ [pid 5392] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5392, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5060] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./18/binderfs") = 0 [pid 5060] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5395] <... write resumed>) = 16777216 [pid 5058] <... ioctl resumed>) = 0 [pid 5395] munmap(0x7f919cc00000, 138412032 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5401 attached [pid 5401] set_robust_list(0x5555565206a0, 24 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5401 [pid 5401] <... set_robust_list resumed>) = 0 [pid 5401] chdir("./20") = 0 [pid 5401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5395] <... munmap resumed>) = 0 [pid 5395] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5395] ioctl(4, LOOP_SET_FD, 3 [pid 5401] <... prctl resumed>) = 0 [pid 5401] setpgid(0, 0) = 0 [pid 5401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5401] write(3, "1000", 4) = 4 [pid 5401] close(3) = 0 [pid 5401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5401] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5395] <... ioctl resumed>) = 0 [pid 5401] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5395] close(3 [pid 5401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5395] <... close resumed>) = 0 [pid 5401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5395] close(4 [pid 5401] <... mmap resumed>) = 0x7f91a5087000 [pid 5395] <... close resumed>) = 0 [pid 5401] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5395] mkdir("./file2", 0777 [pid 5401] <... mprotect resumed>) = 0 [pid 5395] <... mkdir resumed>) = 0 [pid 5401] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5395] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5401] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5402]}, 88) = 5402 [pid 5063] <... ioctl resumed>) = 0 [pid 5401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5401] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5402 attached [pid 5402] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5402] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5402] memfd_create("syzkaller", 0) = 3 [pid 5063] close(3 [pid 5402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5399] <... write resumed>) = 16777216 [pid 5395] <... mount resumed>) = 0 [pid 5402] <... mmap resumed>) = 0x7f919cc00000 [pid 5395] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5395] chdir("./file2") = 0 [pid 5063] <... close resumed>) = 0 [pid 5395] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5395] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5395] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5395] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5394] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5403 attached [pid 5394] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] set_robust_list(0x5555565206a0, 24) = 0 [pid 5403] chdir("./19" [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5403 [pid 5403] <... chdir resumed>) = 0 [pid 5403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5394] <... futex resumed>) = 1 [pid 5394] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5403] setpgid(0, 0 [pid 5395] <... futex resumed>) = 0 [pid 5403] <... setpgid resumed>) = 0 [ 69.918975][ T5395] loop1: detected capacity change from 0 to 32768 [pid 5395] rename("./file2", "./file1" [pid 5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5399] munmap(0x7f919cc00000, 138412032 [pid 5403] <... openat resumed>) = 3 [pid 5403] write(3, "1000", 4) = 4 [pid 5403] close(3) = 0 [pid 5403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5403] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5403] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5403] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5404]}, 88) = 5404 [pid 5403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5403] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5403] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5404 attached [pid 5404] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5404] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5404] memfd_create("syzkaller", 0) = 3 [pid 5404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5399] <... munmap resumed>) = 0 [pid 5394] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] <... ioctl resumed>) = 0 [pid 5394] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5056] close(3 [pid 5394] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] <... close resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5394] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5405 [pid 5394] <... mprotect resumed>) = 0 [ 69.973667][ T5395] ERROR: (device loop1): diWrite: ixpxd invalid [ 69.973667][ T5395] [ 70.000549][ T5395] ERROR: (device loop1): remounting filesystem as read-only [pid 5394] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5405 attached [], 8) = 0 [pid 5405] set_robust_list(0x5555565206a0, 24 [pid 5394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5405] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5406 attached [pid 5406] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5406] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5406] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] chdir("./20" [pid 5394] <... clone3 resumed> => {parent_tid=[5406]}, 88) = 5406 [pid 5405] <... chdir resumed>) = 0 [pid 5394] rt_sigprocmask(SIG_SETMASK, [], [pid 5405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5399] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5394] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... futex resumed>) = 0 [pid 5394] <... futex resumed>) = 1 [pid 5406] mkdir(".", 0777 [pid 5405] <... prctl resumed>) = 0 [pid 5399] <... openat resumed>) = 4 [pid 5406] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5406] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5405] setpgid(0, 0 [pid 5399] ioctl(4, LOOP_SET_FD, 3 [pid 5394] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5406] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5405] <... setpgid resumed>) = 0 [pid 5406] <... futex resumed>) = 0 [pid 5394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5406] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5405] write(3, "1000", 4 [pid 5395] <... rename resumed>) = -1 EIO (Input/output error) [pid 5405] <... write resumed>) = 4 [pid 5399] <... ioctl resumed>) = 0 [pid 5405] close(3) = 0 [pid 5405] symlink("/dev/binderfs", "./binderfs" [pid 5395] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5395] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] <... symlink resumed>) = 0 [pid 5399] close(3 [pid 5405] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5399] <... close resumed>) = 0 [pid 5394] exit_group(0 [pid 5406] <... futex resumed>) = ? [pid 5405] <... futex resumed>) = 0 [pid 5399] close(4 [pid 5395] <... futex resumed>) = ? [pid 5394] <... exit_group resumed>) = ? [pid 5406] +++ exited with 0 +++ [pid 5405] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5399] <... close resumed>) = 0 [pid 5395] +++ exited with 0 +++ [pid 5405] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5399] mkdir("./file2", 0777) = 0 [pid 5405] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5405] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5405] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5394] +++ exited with 0 +++ [pid 5399] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5405] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5394, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5057] restart_syscall(<... resuming interrupted clone ...> [pid 5405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5407 attached [pid 5057] <... restart_syscall resumed>) = 0 [pid 5405] <... clone3 resumed> => {parent_tid=[5407]}, 88) = 5407 [pid 5399] <... mount resumed>) = 0 [pid 5399] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5405] rt_sigprocmask(SIG_SETMASK, [], [pid 5399] <... openat resumed>) = 3 [pid 5399] chdir("./file2" [pid 5057] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] <... chdir resumed>) = 0 [pid 5399] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5399] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5399] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5399] <... futex resumed>) = 1 [pid 5399] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5407] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5057] <... openat resumed>) = 3 [ 70.025608][ T5395] ERROR: (device loop1): txAbort: [ 70.025608][ T5395] [ 70.042153][ T5395] ERROR: (device loop1): remounting filesystem as read-only [ 70.042261][ T5399] loop3: detected capacity change from 0 to 32768 [pid 5057] newfstatat(3, "", [pid 5407] set_robust_list(0x7f91a50a79a0, 24 [pid 5405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5398] <... futex resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5405] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5405] <... futex resumed>) = 0 [pid 5057] getdents64(3, [pid 5405] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5399] <... futex resumed>) = 0 [pid 5398] <... futex resumed>) = 1 [pid 5399] rename("./file2", "./file1" [pid 5057] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5398] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5407] <... set_robust_list resumed>) = 0 [pid 5407] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] unlink("./19/binderfs" [pid 5407] memfd_create("syzkaller", 0) = 3 [pid 5407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5057] <... unlink resumed>) = 0 [pid 5402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5057] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./18/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./18/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./18/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./18/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./18") = 0 [pid 5060] mkdir("./19", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 70.110086][ T5399] ERROR: (device loop3): diWrite: ixpxd invalid [ 70.110086][ T5399] [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5398] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5398] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5398] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5408]}, 88) = 5408 [pid 5398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5408 attached [pid 5408] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5398] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] <... rseq resumed>) = 0 [pid 5398] <... futex resumed>) = 0 [pid 5408] set_robust_list(0x7f91a50869a0, 24 [pid 5398] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5408] <... set_robust_list resumed>) = 0 [pid 5408] rt_sigprocmask(SIG_SETMASK, [], [pid 5404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5408] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5408] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./19/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./19/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5399] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] <... openat resumed>) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5408] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5399] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] getdents64(4, [pid 5399] <... futex resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4 [pid 5399] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5408] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... close resumed>) = 0 [pid 5057] rmdir("./19/file2" [pid 5408] <... futex resumed>) = 1 [pid 5398] <... futex resumed>) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5398] exit_group(0) = ? [pid 5408] +++ exited with 0 +++ [pid 5399] <... futex resumed>) = ? [pid 5057] getdents64(3, [pid 5399] +++ exited with 0 +++ [pid 5398] +++ exited with 0 +++ [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5398, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=19 /* 0.19 s */} --- [pid 5057] close(3 [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5059] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./19/binderfs") = 0 [ 70.159684][ T5399] ERROR: (device loop3): remounting filesystem as read-only [ 70.185054][ T5399] ERROR: (device loop3): txAbort: [ 70.185054][ T5399] [pid 5059] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5057] rmdir("./19" [pid 5059] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... rmdir resumed>) = 0 [pid 5057] mkdir("./20", 0777 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... mkdir resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./19/file2", [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] <... openat resumed>) = 3 [pid 5059] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./19/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5402] <... write resumed>) = 16777216 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5402] munmap(0x7f919cc00000, 138412032 [pid 5059] getdents64(4, [pid 5407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5402] <... munmap resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./19/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./19") = 0 [pid 5059] mkdir("./20", 0777 [pid 5402] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... mkdir resumed>) = 0 [pid 5404] <... write resumed>) = 16777216 [pid 5404] munmap(0x7f919cc00000, 138412032 [pid 5402] <... openat resumed>) = 4 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5402] ioctl(4, LOOP_SET_FD, 3 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5404] <... munmap resumed>) = 0 [pid 5402] <... ioctl resumed>) = 0 [pid 5404] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5402] close(3 [pid 5404] <... openat resumed>) = 4 [pid 5402] <... close resumed>) = 0 [pid 5404] ioctl(4, LOOP_SET_FD, 3 [pid 5402] close(4 [pid 5404] <... ioctl resumed>) = 0 [pid 5402] <... close resumed>) = 0 [pid 5404] close(3 [pid 5402] mkdir("./file2", 0777 [pid 5060] <... ioctl resumed>) = 0 [pid 5404] <... close resumed>) = 0 [pid 5404] close(4 [pid 5402] <... mkdir resumed>) = 0 [pid 5060] close(3 [pid 5404] <... close resumed>) = 0 [pid 5402] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5060] <... close resumed>) = 0 [pid 5402] <... mount resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5402] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5404] mkdir("./file2", 0777 [pid 5402] <... openat resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5409 [pid 5402] chdir("./file2" [pid 5404] <... mkdir resumed>) = 0 [pid 5402] <... chdir resumed>) = 0 [pid 5404] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5402] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 70.407371][ T5402] loop2: detected capacity change from 0 to 32768 [ 70.432386][ T5404] loop5: detected capacity change from 0 to 32768 [pid 5402] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5409 attached [pid 5404] <... mount resumed>) = 0 [pid 5404] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5402] <... futex resumed>) = 1 [pid 5401] <... futex resumed>) = 0 [pid 5404] <... openat resumed>) = 3 [pid 5402] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5401] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] chdir("./file2" [pid 5402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5401] <... futex resumed>) = 0 [pid 5404] <... chdir resumed>) = 0 [pid 5402] rename("./file2", "./file1" [pid 5401] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5409] set_robust_list(0x5555565206a0, 24 [pid 5404] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5409] <... set_robust_list resumed>) = 0 [pid 5409] chdir("./19") = 0 [pid 5409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5404] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] setpgid(0, 0 [pid 5404] <... futex resumed>) = 1 [pid 5403] <... futex resumed>) = 0 [pid 5409] <... setpgid resumed>) = 0 [pid 5404] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5409] <... openat resumed>) = 3 [pid 5404] rename("./file2", "./file1" [pid 5409] write(3, "1000", 4) = 4 [pid 5409] close(3) = 0 [pid 5409] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5409] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5409] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5409] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5409] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5409] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5410]}, 88) = 5410 [pid 5409] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5409] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5409] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5410 attached [pid 5410] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5410] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5410] memfd_create("syzkaller", 0) = 3 [pid 5410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [ 70.483304][ T5402] ERROR: (device loop2): diWrite: ixpxd invalid [ 70.483304][ T5402] [ 70.500690][ T5404] ERROR: (device loop5): diWrite: ixpxd invalid [ 70.500690][ T5404] [ 70.522419][ T5402] ERROR: (device loop2): remounting filesystem as read-only [pid 5403] <... futex resumed>) = 0 [pid 5407] <... write resumed>) = 16777216 [pid 5403] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5407] munmap(0x7f919cc00000, 138412032 [pid 5401] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5401] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5411]}, 88) = 5411 [pid 5401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5401] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5411 attached ) = 0 [pid 5401] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5411] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5402] <... rename resumed>) = -1 EIO (Input/output error) [pid 5402] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5402] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5411] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5411] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5411] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5407] <... munmap resumed>) = 0 [pid 5411] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 70.535520][ T5404] ERROR: (device loop5): remounting filesystem as read-only [ 70.542118][ T5402] ERROR: (device loop2): txAbort: [ 70.542118][ T5402] [ 70.571678][ T5404] ERROR: (device loop5): txAbort: [ 70.571678][ T5404] [pid 5407] ioctl(4, LOOP_SET_FD, 3 [pid 5403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5411] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5403] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5411] <... futex resumed>) = 1 [pid 5404] <... rename resumed>) = -1 EIO (Input/output error) [pid 5403] <... futex resumed>) = 0 [pid 5401] <... futex resumed>) = 0 [pid 5403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5401] exit_group(0 [pid 5403] <... mmap resumed>) = 0x7f91a5066000 [pid 5402] <... futex resumed>) = ? [pid 5401] <... exit_group resumed>) = ? [pid 5403] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5402] +++ exited with 0 +++ [pid 5403] <... mprotect resumed>) = 0 [pid 5403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5404] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5404] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5412 attached [pid 5412] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5412] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5403] <... clone3 resumed> => {parent_tid=[5412]}, 88) = 5412 [pid 5412] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5403] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] <... futex resumed>) = 0 [pid 5403] <... futex resumed>) = 1 [pid 5412] mkdir(".", 0777 [pid 5403] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5412] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5412] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5412] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5411] +++ exited with 0 +++ [pid 5401] +++ exited with 0 +++ [pid 5412] <... futex resumed>) = 1 [pid 5407] <... ioctl resumed>) = 0 [pid 5403] <... futex resumed>) = 0 [pid 5412] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5401, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5058] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5403] exit_group(0 [pid 5058] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5404] <... futex resumed>) = ? [pid 5403] <... exit_group resumed>) = ? [pid 5404] +++ exited with 0 +++ [pid 5058] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", [pid 5407] close(3 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5407] <... close resumed>) = 0 [pid 5058] getdents64(3, [pid 5407] close(4 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5407] <... close resumed>) = 0 [pid 5058] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5407] mkdir("./file2", 0777 [pid 5058] unlink("./20/binderfs") = 0 [pid 5407] <... mkdir resumed>) = 0 [pid 5058] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5407] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5412] <... futex resumed>) = ? [pid 5412] +++ exited with 0 +++ [pid 5403] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5403, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5063] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5407] <... mount resumed>) = 0 [pid 5063] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5407] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5407] chdir("./file2" [pid 5063] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5407] <... chdir resumed>) = 0 [pid 5407] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./19/binderfs" [pid 5407] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5407] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5405] <... futex resumed>) = 0 [pid 5407] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5405] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5405] <... futex resumed>) = 0 [ 70.588667][ T5407] loop0: detected capacity change from 0 to 32768 [pid 5407] rename("./file2", "./file1" [pid 5405] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5413 attached [pid 5063] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5413 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5413] set_robust_list(0x5555565206a0, 24) = 0 [ 70.638951][ T5407] ERROR: (device loop0): diWrite: ixpxd invalid [ 70.638951][ T5407] [ 70.668782][ T5407] ERROR: (device loop0): remounting filesystem as read-only [pid 5413] chdir("./20") = 0 [pid 5405] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5063] newfstatat(AT_FDCWD, "./19/file2", [pid 5405] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5405] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5407] <... rename resumed>) = -1 EIO (Input/output error) [pid 5405] <... mmap resumed>) = 0x7f91a5066000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5407] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5407] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5407] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] openat(AT_FDCWD, "./19/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5405] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5405] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5405] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] getdents64(4, [pid 5059] <... ioctl resumed>) = 0 [pid 5413] <... prctl resumed>) = 0 [pid 5405] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5414 attached [pid 5413] setpgid(0, 0 [pid 5063] getdents64(4, [pid 5059] close(3 [pid 5414] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5413] <... setpgid resumed>) = 0 [pid 5405] <... clone3 resumed> => {parent_tid=[5414]}, 88) = 5414 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] <... close resumed>) = 0 [pid 5414] <... rseq resumed>) = 0 [pid 5063] close(4 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5414] set_robust_list(0x7f91a50869a0, 24 [pid 5063] <... close resumed>) = 0 [pid 5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5414] <... set_robust_list resumed>) = 0 [pid 5405] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] rmdir("./19/file2" [pid 5414] rt_sigprocmask(SIG_SETMASK, [], [pid 5413] <... openat resumed>) = 3 [pid 5405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5414] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5413] write(3, "1000", 4 [pid 5405] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 5414] mkdir(".", 0777 [pid 5413] <... write resumed>) = 4 [pid 5405] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5413] close(3 [pid 5405] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5414] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5413] <... close resumed>) = 0 [pid 5063] close(3 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5415 [pid 5414] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5413] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5415 attached ) = 0 [pid 5063] <... close resumed>) = 0 [pid 5415] set_robust_list(0x5555565206a0, 24 [pid 5413] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] <... set_robust_list resumed>) = 0 [pid 5414] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5413] <... futex resumed>) = 0 [pid 5063] rmdir("./19" [pid 5415] chdir("./20" [pid 5414] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5415] <... chdir resumed>) = 0 [pid 5414] <... futex resumed>) = 1 [pid 5413] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5405] <... futex resumed>) = 0 [pid 5415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5414] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5415] <... prctl resumed>) = 0 [pid 5413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5405] exit_group(0 [pid 5415] setpgid(0, 0 [pid 5413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5407] <... futex resumed>) = ? [pid 5405] <... exit_group resumed>) = ? [pid 5063] <... rmdir resumed>) = 0 [pid 5415] <... setpgid resumed>) = 0 [pid 5414] <... futex resumed>) = ? [pid 5413] <... mmap resumed>) = 0x7f91a5087000 [pid 5407] +++ exited with 0 +++ [pid 5063] mkdir("./20", 0777 [pid 5415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5413] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5415] <... openat resumed>) = 3 [pid 5413] <... mprotect resumed>) = 0 [pid 5415] write(3, "1000", 4 [pid 5413] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5415] <... write resumed>) = 4 [pid 5414] +++ exited with 0 +++ [pid 5413] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5405] +++ exited with 0 +++ [pid 5063] <... mkdir resumed>) = 0 [pid 5415] close(3 [pid 5413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5405, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=20 /* 0.20 s */} --- ./strace-static-x86_64: Process 5416 attached [pid 5415] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5416] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5415] symlink("/dev/binderfs", "./binderfs" [pid 5413] <... clone3 resumed> => {parent_tid=[5416]}, 88) = 5416 [ 70.701080][ T5407] ERROR: (device loop0): txAbort: [ 70.701080][ T5407] [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5416] <... rseq resumed>) = 0 [pid 5415] <... symlink resumed>) = 0 [pid 5413] rt_sigprocmask(SIG_SETMASK, [], [pid 5416] set_robust_list(0x7f91a50a79a0, 24 [pid 5413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] <... set_robust_list resumed>) = 0 [pid 5413] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5416] rt_sigprocmask(SIG_SETMASK, [], [pid 5413] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5413] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5416] memfd_create("syzkaller", 0 [pid 5415] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5415] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5056] <... openat resumed>) = 3 [pid 5416] <... memfd_create resumed>) = 3 [pid 5415] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5056] newfstatat(3, "", [pid 5416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5415] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5416] <... mmap resumed>) = 0x7f919cc00000 [pid 5415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] getdents64(3, [pid 5415] <... mmap resumed>) = 0x7f91a5087000 [pid 5415] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5415] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5415] <... clone3 resumed> => {parent_tid=[5417]}, 88) = 5417 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./20/binderfs" [pid 5415] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] <... unlink resumed>) = 0 [pid 5415] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5417 attached [pid 5415] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5415] <... futex resumed>) = 0 [pid 5417] <... rseq resumed>) = 0 [pid 5415] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5417] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5417] memfd_create("syzkaller", 0) = 3 [pid 5417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5056] <... umount2 resumed>) = 0 [pid 5056] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./20/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./20/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./20/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./20") = 0 [pid 5056] mkdir("./21", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5410] <... write resumed>) = 16777216 [pid 5410] munmap(0x7f919cc00000, 138412032) = 0 [pid 5410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5058] <... umount2 resumed>) = 0 [pid 5410] <... openat resumed>) = 4 [pid 5058] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./20/file2", [pid 5410] ioctl(4, LOOP_SET_FD, 3 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5410] <... ioctl resumed>) = 0 [pid 5058] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./20/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, [pid 5410] close(3 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5410] <... close resumed>) = 0 [pid 5410] close(4 [pid 5058] getdents64(4, [pid 5410] <... close resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./20/file2") = 0 [pid 5410] mkdir("./file2", 0777) = 0 [pid 5410] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./20") = 0 [ 70.932855][ T5410] loop4: detected capacity change from 0 to 32768 [pid 5058] mkdir("./21", 0777 [pid 5410] <... mount resumed>) = 0 [pid 5058] <... mkdir resumed>) = 0 [pid 5410] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5410] <... openat resumed>) = 3 [pid 5058] <... openat resumed>) = 3 [pid 5410] chdir("./file2") = 0 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5410] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5410] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5409] <... futex resumed>) = 0 [pid 5409] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5410] rename("./file2", "./file1" [pid 5409] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... ioctl resumed>) = 0 [pid 5417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5418 ./strace-static-x86_64: Process 5418 attached [pid 5418] set_robust_list(0x5555565206a0, 24) = 0 [pid 5418] chdir("./20") = 0 [pid 5418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5418] setpgid(0, 0) = 0 [pid 5418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5418] write(3, "1000", 4) = 4 [pid 5418] close(3) = 0 [pid 5418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5418] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5418] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5418] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5419]}, 88) = 5419 [pid 5418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5418] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5419 attached [pid 5056] <... ioctl resumed>) = 0 [pid 5419] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5409] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5419] <... rseq resumed>) = 0 [pid 5409] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5419] memfd_create("syzkaller", 0) = 3 [pid 5419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5409] <... futex resumed>) = 0 [pid 5409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5419] <... mmap resumed>) = 0x7f919cc00000 [pid 5409] <... mmap resumed>) = 0x7f91a5066000 [pid 5409] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5420 ./strace-static-x86_64: Process 5420 attached [pid 5420] set_robust_list(0x5555565206a0, 24) = 0 [pid 5420] chdir("./21") = 0 [pid 5420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5420] setpgid(0, 0) = 0 [ 71.055926][ T5410] ERROR: (device loop4): diWrite: ixpxd invalid [ 71.055926][ T5410] [ 71.078556][ T5410] ERROR: (device loop4): remounting filesystem as read-only [pid 5420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5409] <... mprotect resumed>) = 0 [pid 5420] <... openat resumed>) = 3 [pid 5420] write(3, "1000", 4) = 4 [pid 5420] close(3) = 0 [pid 5420] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5420] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5420] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5420] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5420] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5420] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5409] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5420] <... clone3 resumed> => {parent_tid=[5421]}, 88) = 5421 [pid 5420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5420] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5420] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5421 attached [pid 5421] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5421] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5421] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5421] memfd_create("syzkaller", 0) = 3 [pid 5421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5409] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5409] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5422 attached [pid 5422] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5409] <... clone3 resumed> => {parent_tid=[5422]}, 88) = 5422 [pid 5409] rt_sigprocmask(SIG_SETMASK, [], [pid 5422] <... rseq resumed>) = 0 [pid 5409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5409] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] set_robust_list(0x7f91a50869a0, 24 [pid 5409] <... futex resumed>) = 0 [pid 5422] <... set_robust_list resumed>) = 0 [pid 5422] rt_sigprocmask(SIG_SETMASK, [], [pid 5409] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5422] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5422] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5422] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5422] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5409] <... futex resumed>) = 0 [ 71.139079][ T5410] ERROR: (device loop4): txAbort: [ 71.139079][ T5410] [pid 5422] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5416] <... write resumed>) = 16777216 [pid 5410] <... rename resumed>) = -1 EIO (Input/output error) [pid 5416] munmap(0x7f919cc00000, 138412032) = 0 [pid 5410] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 71.181568][ T5410] ERROR: (device loop4): remounting filesystem as read-only [pid 5410] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5416] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5409] exit_group(0 [pid 5416] ioctl(4, LOOP_SET_FD, 3 [pid 5422] <... futex resumed>) = ? [pid 5410] <... futex resumed>) = ? [pid 5409] <... exit_group resumed>) = ? [pid 5422] +++ exited with 0 +++ [pid 5410] +++ exited with 0 +++ [pid 5409] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5409, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5416] <... ioctl resumed>) = 0 [pid 5416] close(3) = 0 [pid 5060] getdents64(3, [pid 5416] close(4) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5416] mkdir("./file2", 0777 [pid 5060] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5416] mount("/dev/loop1", "./file2", "jfs", 0, "" [ 71.245388][ T5416] loop1: detected capacity change from 0 to 32768 [pid 5060] unlink("./19/binderfs") = 0 [pid 5060] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5416] <... mount resumed>) = 0 [pid 5416] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] chdir("./file2") = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5416] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5060] newfstatat(AT_FDCWD, "./19/file2", [pid 5416] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5416] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./19/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] <... futex resumed>) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5416] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5413] <... futex resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./19/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5413] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5416] rename("./file2", "./file1" [pid 5060] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 5058] <... ioctl resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5058] close(3) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./19/file2" [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5423 ./strace-static-x86_64: Process 5423 attached [pid 5423] set_robust_list(0x5555565206a0, 24) = 0 [pid 5423] chdir("./21") = 0 [pid 5423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5423] setpgid(0, 0) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./19" [ 71.330271][ T5416] ERROR: (device loop1): diWrite: ixpxd invalid [ 71.330271][ T5416] [ 71.346575][ T5416] ERROR: (device loop1): remounting filesystem as read-only [pid 5423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5423] write(3, "1000", 4) = 4 [pid 5423] close(3) = 0 [pid 5423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5423] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5423] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5423] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5423] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5423] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5413] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5424]}, 88) = 5424 [pid 5423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5423] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] <... futex resumed>) = 0 [pid 5423] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5413] <... mmap resumed>) = 0x7f91a5066000 [pid 5413] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5424 attached ) = 0 [pid 5060] mkdir("./20", 0777 [pid 5413] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5424] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053./strace-static-x86_64: Process 5425 attached ) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5424] set_robust_list(0x7f91a50a79a0, 24 [pid 5413] <... clone3 resumed> => {parent_tid=[5425]}, 88) = 5425 [pid 5425] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5424] <... set_robust_list resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5425] <... rseq resumed>) = 0 [pid 5413] rt_sigprocmask(SIG_SETMASK, [], [pid 5425] set_robust_list(0x7f91a50869a0, 24 [pid 5424] rt_sigprocmask(SIG_SETMASK, [], [pid 5413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5416] <... rename resumed>) = -1 EIO (Input/output error) [pid 5425] <... set_robust_list resumed>) = 0 [pid 5413] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5425] rt_sigprocmask(SIG_SETMASK, [], [pid 5419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5416] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5416] <... futex resumed>) = 0 [pid 5413] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5425] mkdir(".", 0777 [pid 5424] memfd_create("syzkaller", 0 [pid 5416] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5425] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5424] <... memfd_create resumed>) = 3 [pid 5425] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5425] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5424] <... mmap resumed>) = 0x7f919cc00000 [pid 5425] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5425] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5413] exit_group(0 [pid 5425] <... futex resumed>) = ? [pid 5416] <... futex resumed>) = ? [pid 5413] <... exit_group resumed>) = ? [pid 5425] +++ exited with 0 +++ [pid 5416] +++ exited with 0 +++ [pid 5413] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5413, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5057] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 71.376759][ T5416] ERROR: (device loop1): txAbort: [ 71.376759][ T5416] [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5417] <... write resumed>) = 16777216 [pid 5057] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5417] munmap(0x7f919cc00000, 138412032 [pid 5057] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./20/binderfs") = 0 [pid 5417] <... munmap resumed>) = 0 [pid 5057] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5417] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5417] close(3) = 0 [pid 5417] close(4 [pid 5057] <... umount2 resumed>) = 0 [pid 5417] <... close resumed>) = 0 [pid 5057] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] mkdir("./file2", 0777) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5417] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5057] newfstatat(AT_FDCWD, "./20/file2", [pid 5417] <... mount resumed>) = 0 [pid 5417] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5417] chdir("./file2") = 0 [pid 5417] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5417] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5417] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 71.497832][ T5417] loop3: detected capacity change from 0 to 32768 [pid 5415] <... futex resumed>) = 0 [pid 5057] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5415] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5417] <... futex resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5417] rename("./file2", "./file1" [pid 5415] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] openat(AT_FDCWD, "./20/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./20/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./20") = 0 [pid 5057] mkdir("./21", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 71.552616][ T5417] ERROR: (device loop3): diWrite: ixpxd invalid [ 71.552616][ T5417] [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5415] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5415] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5415] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5415] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5415] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5415] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5426]}, 88) = 5426 ./strace-static-x86_64: Process 5426 attached [pid 5415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5415] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5415] <... futex resumed>) = 0 [pid 5426] <... rseq resumed>) = 0 [pid 5415] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5426] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5426] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5419] <... write resumed>) = 16777216 [pid 5417] <... rename resumed>) = -1 EIO (Input/output error) [pid 5417] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] munmap(0x7f919cc00000, 138412032 [pid 5426] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5417] <... futex resumed>) = 0 [pid 5417] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5419] <... munmap resumed>) = 0 [pid 5426] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5426] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5415] <... futex resumed>) = 0 [pid 5426] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5415] exit_group(0 [pid 5419] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 71.593097][ T5417] ERROR: (device loop3): remounting filesystem as read-only [ 71.621403][ T5417] ERROR: (device loop3): txAbort: [ 71.621403][ T5417] [pid 5415] <... exit_group resumed>) = ? [pid 5426] <... futex resumed>) = ? [pid 5426] +++ exited with 0 +++ [pid 5419] ioctl(4, LOOP_SET_FD, 3 [pid 5417] <... futex resumed>) = ? [pid 5417] +++ exited with 0 +++ [pid 5415] +++ exited with 0 +++ [pid 5421] <... write resumed>) = 16777216 [pid 5060] <... ioctl resumed>) = 0 [pid 5419] <... ioctl resumed>) = 0 [pid 5421] munmap(0x7f919cc00000, 138412032 [pid 5419] close(3 [pid 5060] close(3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5415, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5421] <... munmap resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", [pid 5419] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5419] close(4 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5427 attached [pid 5059] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5427] set_robust_list(0x5555565206a0, 24 [pid 5059] unlink("./20/binderfs" [pid 5421] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5059] <... unlink resumed>) = 0 [ 71.677527][ T5419] loop5: detected capacity change from 0 to 32768 [pid 5427] <... set_robust_list resumed>) = 0 [pid 5421] <... openat resumed>) = 4 [pid 5419] <... close resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5427 [pid 5059] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5421] ioctl(4, LOOP_SET_FD, 3 [pid 5427] chdir("./20" [pid 5419] mkdir("./file2", 0777 [pid 5427] <... chdir resumed>) = 0 [pid 5419] <... mkdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./20/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./20/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5427] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5419] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5059] <... openat resumed>) = 4 [pid 5427] <... prctl resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5427] setpgid(0, 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5421] <... ioctl resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5427] <... setpgid resumed>) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5421] close(3 [pid 5059] close(4 [pid 5421] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5421] close(4 [pid 5059] rmdir("./20/file2" [pid 5427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5421] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5421] mkdir("./file2", 0777 [pid 5059] getdents64(3, [pid 5421] <... mkdir resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5421] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5059] rmdir("./20" [pid 5427] <... openat resumed>) = 3 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./21", 0777) = 0 [pid 5427] write(3, "1000", 4 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5427] <... write resumed>) = 4 [pid 5059] <... openat resumed>) = 3 [pid 5427] close(3) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5427] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5421] <... mount resumed>) = 0 [pid 5421] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5427] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5421] <... openat resumed>) = 3 [pid 5427] <... futex resumed>) = 0 [pid 5421] chdir("./file2" [pid 5427] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5421] <... chdir resumed>) = 0 [pid 5419] <... mount resumed>) = 0 [pid 5427] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5421] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5419] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5427] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5421] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5419] <... openat resumed>) = 3 [pid 5427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5419] chdir("./file2" [pid 5427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5421] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5421] <... futex resumed>) = 1 [pid 5420] <... futex resumed>) = 0 [pid 5420] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 71.730259][ T5421] loop0: detected capacity change from 0 to 32768 [pid 5420] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5421] rename("./file2", "./file1" [pid 5427] <... mprotect resumed>) = 0 [pid 5419] <... chdir resumed>) = 0 [pid 5427] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5419] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3 [pid 5427] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5419] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5057] <... close resumed>) = 0 ./strace-static-x86_64: Process 5428 attached [pid 5427] <... clone3 resumed> => {parent_tid=[5428]}, 88) = 5428 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5428] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5427] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5429 attached [pid 5428] <... rseq resumed>) = 0 [pid 5427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5420] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5419] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5428] set_robust_list(0x7f91a50a79a0, 24 [pid 5427] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... futex resumed>) = 1 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5429 [pid 5429] set_robust_list(0x5555565206a0, 24 [pid 5428] <... set_robust_list resumed>) = 0 [pid 5427] <... futex resumed>) = 0 [pid 5429] <... set_robust_list resumed>) = 0 [pid 5428] rt_sigprocmask(SIG_SETMASK, [], [pid 5427] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5429] chdir("./21" [pid 5428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5420] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] <... futex resumed>) = 0 [pid 5420] <... futex resumed>) = 0 [pid 5418] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5428] memfd_create("syzkaller", 0 [pid 5420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5419] rename("./file2", "./file1" [pid 5418] <... futex resumed>) = 0 [pid 5429] <... chdir resumed>) = 0 [pid 5428] <... memfd_create resumed>) = 3 [pid 5420] <... mmap resumed>) = 0x7f91a5066000 [pid 5418] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 71.772210][ T5421] ERROR: (device loop0): diWrite: ixpxd invalid [ 71.772210][ T5421] [ 71.787588][ T5421] ERROR: (device loop0): remounting filesystem as read-only [pid 5420] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5429] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5420] <... mprotect resumed>) = 0 [pid 5429] <... prctl resumed>) = 0 [pid 5428] <... mmap resumed>) = 0x7f919cc00000 [pid 5420] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5429] setpgid(0, 0 [pid 5420] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5430]}, 88) = 5430 [pid 5420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5420] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5420] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5430 attached [pid 5430] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5430] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5430] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5429] <... setpgid resumed>) = 0 [pid 5430] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5429] write(3, "1000", 4) = 4 [pid 5429] close(3) = 0 [pid 5429] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5429] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 71.832524][ T5419] ERROR: (device loop5): diWrite: ixpxd invalid [ 71.832524][ T5419] [ 71.852170][ T5421] ERROR: (device loop0): txAbort: [ 71.852170][ T5421] [ 71.871820][ T5419] ERROR: (device loop5): remounting filesystem as read-only [pid 5429] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5421] <... rename resumed>) = -1 EIO (Input/output error) [pid 5418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5429] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5421] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5421] <... futex resumed>) = 0 [pid 5429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5421] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... mmap resumed>) = 0x7f91a5087000 [pid 5429] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5424] <... write resumed>) = 16777216 [pid 5418] <... futex resumed>) = 0 [pid 5429] <... mprotect resumed>) = 0 [pid 5418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5429] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5418] <... mmap resumed>) = 0x7f91a5066000 [pid 5429] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5429] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5418] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 5431 attached [pid 5424] munmap(0x7f919cc00000, 138412032 [pid 5418] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5431] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5430] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5429] <... clone3 resumed> => {parent_tid=[5431]}, 88) = 5431 [pid 5419] <... rename resumed>) = -1 EIO (Input/output error) [pid 5431] <... rseq resumed>) = 0 [pid 5430] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] rt_sigprocmask(SIG_SETMASK, [], [pid 5419] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5431] set_robust_list(0x7f91a50a79a0, 24 [pid 5430] <... futex resumed>) = 1 [pid 5429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5420] <... futex resumed>) = 0 [pid 5419] <... futex resumed>) = 0 [pid 5418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5431] <... set_robust_list resumed>) = 0 [pid 5430] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5429] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5420] exit_group(0 [pid 5419] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5432 attached [pid 5431] rt_sigprocmask(SIG_SETMASK, [], [pid 5430] <... futex resumed>) = ? [pid 5429] <... futex resumed>) = 0 [pid 5421] <... futex resumed>) = ? [pid 5420] <... exit_group resumed>) = ? [pid 5431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5430] +++ exited with 0 +++ [pid 5429] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5418] <... clone3 resumed> => {parent_tid=[5432]}, 88) = 5432 [pid 5418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5418] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5421] +++ exited with 0 +++ [pid 5420] +++ exited with 0 +++ [pid 5432] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5431] memfd_create("syzkaller", 0 [pid 5432] <... rseq resumed>) = 0 [pid 5431] <... memfd_create resumed>) = 3 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5420, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=14 /* 0.14 s */} --- [pid 5432] set_robust_list(0x7f91a50869a0, 24 [pid 5431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5056] restart_syscall(<... resuming interrupted clone ...> [pid 5432] <... set_robust_list resumed>) = 0 [pid 5431] <... mmap resumed>) = 0x7f919cc00000 [ 71.879148][ T5419] ERROR: (device loop5): txAbort: [ 71.879148][ T5419] [pid 5432] rt_sigprocmask(SIG_SETMASK, [], [pid 5424] <... munmap resumed>) = 0 [pid 5056] <... restart_syscall resumed>) = 0 [pid 5432] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./21/binderfs") = 0 [pid 5056] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5432] mkdir(".", 0777 [pid 5056] <... umount2 resumed>) = 0 [pid 5432] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5056] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5432] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./21/file2", [pid 5432] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./21/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5432] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] getdents64(4, [pid 5432] <... futex resumed>) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5432] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5424] <... openat resumed>) = 4 [pid 5418] exit_group(0 [pid 5056] getdents64(4, [pid 5432] <... futex resumed>) = ? [pid 5424] ioctl(4, LOOP_SET_FD, 3 [pid 5419] <... futex resumed>) = ? [pid 5418] <... exit_group resumed>) = ? [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5432] +++ exited with 0 +++ [pid 5419] +++ exited with 0 +++ [pid 5418] +++ exited with 0 +++ [pid 5056] close(4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5418, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./21/file2") = 0 [pid 5063] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5056] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5056] rmdir("./21" [pid 5424] <... ioctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5424] close(3) = 0 [pid 5063] getdents64(3, [pid 5056] mkdir("./22", 0777 [pid 5424] close(4) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] <... mkdir resumed>) = 0 [pid 5063] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./20/binderfs") = 0 [pid 5063] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5424] mkdir("./file2", 0777 [pid 5063] <... umount2 resumed>) = 0 [pid 5424] <... mkdir resumed>) = 0 [pid 5063] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5424] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./20/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./20/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./20/file2") = 0 [ 71.963803][ T5424] loop2: detected capacity change from 0 to 32768 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./20") = 0 [pid 5063] mkdir("./21", 0777) = 0 [pid 5428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5424] <... mount resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5424] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5424] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5424] chdir("./file2") = 0 [pid 5424] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5424] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5424] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5423] <... futex resumed>) = 0 [pid 5423] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5424] <... futex resumed>) = 0 [pid 5423] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5424] rename("./file2", "./file1" [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5433 ./strace-static-x86_64: Process 5433 attached [pid 5433] set_robust_list(0x5555565206a0, 24) = 0 [pid 5431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5433] chdir("./21") = 0 [pid 5433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5433] setpgid(0, 0) = 0 [pid 5423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5423] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5423] <... futex resumed>) = 0 [pid 5423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5423] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5423] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5433] <... openat resumed>) = 3 [pid 5433] write(3, "1000", 4 [pid 5423] <... clone3 resumed> => {parent_tid=[5434]}, 88) = 5434 [pid 5423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5423] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5423] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5434 attached [ 72.062726][ T5424] ERROR: (device loop2): diWrite: ixpxd invalid [ 72.062726][ T5424] [ 72.101639][ T5424] ERROR: (device loop2): remounting filesystem as read-only [pid 5434] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5433] <... write resumed>) = 4 [pid 5434] <... rseq resumed>) = 0 [pid 5434] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5434] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5434] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5434] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5423] <... futex resumed>) = 0 [pid 5434] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] close(3) = 0 [pid 5433] symlink("/dev/binderfs", "./binderfs" [pid 5424] <... rename resumed>) = -1 EIO (Input/output error) [pid 5433] <... symlink resumed>) = 0 [pid 5433] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5433] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5433] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5433] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5433] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 72.125771][ T5424] ERROR: (device loop2): txAbort: [ 72.125771][ T5424] [ 72.161065][ T5424] ERROR: (device loop2): remounting filesystem as read-only [pid 5433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5424] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5433] <... clone3 resumed> => {parent_tid=[5435]}, 88) = 5435 [pid 5433] rt_sigprocmask(SIG_SETMASK, [], [pid 5424] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5435 attached [pid 5423] exit_group(0 [pid 5424] <... futex resumed>) = ? [pid 5423] <... exit_group resumed>) = ? [pid 5424] +++ exited with 0 +++ [pid 5435] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5435] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5435] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] <... futex resumed>) = ? [pid 5434] +++ exited with 0 +++ [pid 5423] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5423, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=14 /* 0.14 s */} --- [pid 5058] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] getdents64(3, [pid 5433] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... futex resumed>) = 0 [pid 5433] <... futex resumed>) = 1 [pid 5433] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5435] memfd_create("syzkaller", 0 [pid 5058] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5435] <... memfd_create resumed>) = 3 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5058] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5435] <... mmap resumed>) = 0x7f919cc00000 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./21/binderfs") = 0 [pid 5058] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5058] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3 [pid 5058] newfstatat(AT_FDCWD, "./21/file2", [pid 5056] <... close resumed>) = 0 [pid 5428] <... write resumed>) = 16777216 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5436 attached [pid 5428] munmap(0x7f919cc00000, 138412032 [pid 5058] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5436] set_robust_list(0x5555565206a0, 24 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5436 [pid 5436] <... set_robust_list resumed>) = 0 [pid 5058] openat(AT_FDCWD, "./21/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5436] chdir("./22") = 0 [pid 5436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5436] setpgid(0, 0 [pid 5058] <... openat resumed>) = 4 [pid 5436] <... setpgid resumed>) = 0 [pid 5058] newfstatat(4, "", [pid 5436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5436] <... openat resumed>) = 3 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5436] write(3, "1000", 4) = 4 [pid 5058] close(4) = 0 [pid 5436] close(3) = 0 [pid 5058] rmdir("./21/file2" [pid 5436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5436] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... rmdir resumed>) = 0 [pid 5436] <... futex resumed>) = 0 [pid 5436] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5058] getdents64(3, [pid 5436] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] close(3 [pid 5436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5436] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5436] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] rmdir("./21" [pid 5436] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5437]}, 88) = 5437 ./strace-static-x86_64: Process 5437 attached [pid 5436] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] <... rmdir resumed>) = 0 [pid 5437] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5436] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... rseq resumed>) = 0 [pid 5436] <... futex resumed>) = 0 [pid 5428] <... munmap resumed>) = 0 [pid 5063] close(3 [pid 5058] mkdir("./22", 0777 [pid 5437] set_robust_list(0x7f91a50a79a0, 24 [pid 5436] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5428] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5428] <... openat resumed>) = 4 [pid 5428] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5438 [pid 5437] <... set_robust_list resumed>) = 0 [pid 5437] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5438 attached [pid 5438] set_robust_list(0x5555565206a0, 24) = 0 [pid 5438] chdir("./21") = 0 [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5438] setpgid(0, 0) = 0 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5437] memfd_create("syzkaller", 0 [pid 5438] <... openat resumed>) = 3 [pid 5438] write(3, "1000", 4) = 4 [pid 5438] close(3) = 0 [pid 5438] symlink("/dev/binderfs", "./binderfs" [pid 5437] <... memfd_create resumed>) = 3 [pid 5058] <... mkdir resumed>) = 0 [pid 5438] <... symlink resumed>) = 0 [pid 5437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5438] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... mmap resumed>) = 0x7f919cc00000 [pid 5438] <... futex resumed>) = 0 [pid 5438] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5438] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5438] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5428] <... ioctl resumed>) = 0 [pid 5428] close(3) = 0 [ 72.320606][ T5428] loop4: detected capacity change from 0 to 32768 [pid 5428] close(4 [pid 5438] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5431] <... write resumed>) = 16777216 [pid 5431] munmap(0x7f919cc00000, 138412032 [pid 5428] <... close resumed>) = 0 [pid 5438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5431] <... munmap resumed>) = 0 [pid 5428] mkdir("./file2", 0777./strace-static-x86_64: Process 5439 attached ) = 0 [pid 5439] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5438] <... clone3 resumed> => {parent_tid=[5439]}, 88) = 5439 [pid 5439] <... rseq resumed>) = 0 [pid 5438] rt_sigprocmask(SIG_SETMASK, [], [pid 5439] set_robust_list(0x7f91a50a79a0, 24 [pid 5438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5439] <... set_robust_list resumed>) = 0 [pid 5438] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] rt_sigprocmask(SIG_SETMASK, [], [pid 5438] <... futex resumed>) = 0 [pid 5439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5438] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5439] memfd_create("syzkaller", 0) = 3 [pid 5428] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5428] <... mount resumed>) = 0 [pid 5428] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5431] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5431] <... openat resumed>) = 4 [pid 5428] <... openat resumed>) = 3 [pid 5431] ioctl(4, LOOP_SET_FD, 3 [pid 5428] chdir("./file2") = 0 [pid 5428] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5428] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5427] <... futex resumed>) = 0 [pid 5428] rename("./file2", "./file1" [pid 5427] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5427] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] <... ioctl resumed>) = 0 [ 72.428490][ T5431] loop1: detected capacity change from 0 to 32768 [ 72.446475][ T5428] ERROR: (device loop4): diWrite: ixpxd invalid [ 72.446475][ T5428] [pid 5431] close(3) = 0 [pid 5427] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5427] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5431] close(4 [pid 5427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5431] <... close resumed>) = 0 [pid 5427] <... mmap resumed>) = 0x7f91a5066000 [pid 5431] mkdir("./file2", 0777 [pid 5427] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5431] <... mkdir resumed>) = 0 [pid 5427] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5431] mount("/dev/loop1", "./file2", "jfs", 0, ""./strace-static-x86_64: Process 5440 attached [pid 5440] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5427] <... clone3 resumed> => {parent_tid=[5440]}, 88) = 5440 [pid 5440] <... rseq resumed>) = 0 [pid 5428] <... rename resumed>) = -1 EIO (Input/output error) [pid 5427] rt_sigprocmask(SIG_SETMASK, [], [pid 5440] set_robust_list(0x7f91a50869a0, 24 [pid 5427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5440] <... set_robust_list resumed>) = 0 [pid 5440] rt_sigprocmask(SIG_SETMASK, [], [pid 5428] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5428] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5427] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5427] <... futex resumed>) = 0 [ 72.481314][ T5428] ERROR: (device loop4): remounting filesystem as read-only [ 72.488606][ T5428] ERROR: (device loop4): txAbort: [ 72.488606][ T5428] [pid 5440] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5431] <... mount resumed>) = 0 [pid 5427] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5440] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5431] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5440] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5431] <... openat resumed>) = 3 [pid 5440] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5431] chdir("./file2" [pid 5440] <... futex resumed>) = 1 [pid 5431] <... chdir resumed>) = 0 [pid 5427] <... futex resumed>) = 0 [pid 5427] exit_group(0 [pid 5431] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5428] <... futex resumed>) = ? [pid 5427] <... exit_group resumed>) = ? [pid 5440] +++ exited with 0 +++ [pid 5431] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5428] +++ exited with 0 +++ [pid 5431] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5429] <... futex resumed>) = 0 [pid 5429] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5429] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5431] rename("./file2", "./file1" [pid 5427] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5427, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5060] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./20/binderfs") = 0 [pid 5060] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5429] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5429] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5429] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... umount2 resumed>) = 0 [pid 5429] <... mprotect resumed>) = 0 [pid 5060] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5429] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./20/file2", [pid 5429] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5429] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./20/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5441 attached [pid 5429] <... clone3 resumed> => {parent_tid=[5441]}, 88) = 5441 [pid 5060] openat(AT_FDCWD, "./20/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5441] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5429] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... openat resumed>) = 4 [pid 5441] <... rseq resumed>) = 0 [pid 5429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] newfstatat(4, "", [pid 5441] set_robust_list(0x7f91a50869a0, 24 [pid 5431] <... rename resumed>) = -1 EIO (Input/output error) [pid 5429] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5431] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5431] <... futex resumed>) = 0 [pid 5429] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 72.552060][ T5431] ERROR: (device loop1): diWrite: ixpxd invalid [ 72.552060][ T5431] [ 72.573689][ T5431] ERROR: (device loop1): remounting filesystem as read-only [ 72.590636][ T5431] ERROR: (device loop1): txAbort: [ 72.590636][ T5431] [pid 5431] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] getdents64(4, [pid 5441] <... set_robust_list resumed>) = 0 [pid 5441] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] getdents64(4, [pid 5441] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5441] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5441] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5441] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5429] <... futex resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5441] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5429] exit_group(0 [pid 5060] rmdir("./20/file2") = 0 [pid 5431] <... futex resumed>) = ? [pid 5429] <... exit_group resumed>) = ? [pid 5060] getdents64(3, [pid 5441] <... futex resumed>) = ? [pid 5431] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5441] +++ exited with 0 +++ [pid 5429] +++ exited with 0 +++ [pid 5060] close(3) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5429, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=14 /* 0.14 s */} --- [pid 5060] rmdir("./20") = 0 [pid 5057] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] mkdir("./21", 0777 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5057] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5057] <... openat resumed>) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./21/binderfs") = 0 [pid 5057] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] <... ioctl resumed>) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] close(3 [pid 5057] newfstatat(AT_FDCWD, "./21/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... close resumed>) = 0 [pid 5057] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./21/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 5442 attached [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5442 [pid 5057] newfstatat(4, "", [pid 5442] set_robust_list(0x5555565206a0, 24) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5442] chdir("./22" [pid 5057] getdents64(4, [pid 5442] <... chdir resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5057] getdents64(4, [pid 5442] <... prctl resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4 [pid 5442] setpgid(0, 0 [pid 5057] <... close resumed>) = 0 [pid 5442] <... setpgid resumed>) = 0 [pid 5057] rmdir("./21/file2" [pid 5442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5057] <... rmdir resumed>) = 0 [pid 5442] <... openat resumed>) = 3 [pid 5057] getdents64(3, [pid 5442] write(3, "1000", 4 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5442] <... write resumed>) = 4 [pid 5442] close(3 [pid 5057] close(3 [pid 5442] <... close resumed>) = 0 [pid 5442] symlink("/dev/binderfs", "./binderfs" [pid 5057] <... close resumed>) = 0 [pid 5442] <... symlink resumed>) = 0 [pid 5057] rmdir("./21" [pid 5442] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... rmdir resumed>) = 0 [pid 5442] <... futex resumed>) = 0 [pid 5442] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] mkdir("./22", 0777 [pid 5442] <... mmap resumed>) = 0x7f91a5087000 [pid 5057] <... mkdir resumed>) = 0 [pid 5442] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5435] <... write resumed>) = 16777216 [pid 5442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5435] munmap(0x7f919cc00000, 138412032 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5435] <... munmap resumed>) = 0 [pid 5057] <... openat resumed>) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5443 attached => {parent_tid=[5443]}, 88) = 5443 [pid 5443] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5442] rt_sigprocmask(SIG_SETMASK, [], [pid 5443] <... rseq resumed>) = 0 [pid 5442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5443] set_robust_list(0x7f91a50a79a0, 24 [pid 5442] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... set_robust_list resumed>) = 0 [pid 5442] <... futex resumed>) = 0 [pid 5443] rt_sigprocmask(SIG_SETMASK, [], [pid 5442] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5443] memfd_create("syzkaller", 0) = 3 [pid 5443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5435] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5435] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5435] close(3) = 0 [pid 5435] close(4) = 0 [pid 5435] mkdir("./file2", 0777) = 0 [pid 5435] mount("/dev/loop3", "./file2", "jfs", 0, "") = 0 [pid 5435] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5435] chdir("./file2") = 0 [pid 5435] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5435] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5433] <... futex resumed>) = 0 [pid 5435] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5433] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] rename("./file2", "./file1" [pid 5433] <... futex resumed>) = 0 [ 72.771764][ T5435] loop3: detected capacity change from 0 to 32768 [ 72.795937][ T5435] ERROR: (device loop3): diWrite: ixpxd invalid [ 72.795937][ T5435] [pid 5433] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] <... write resumed>) = 16777216 [pid 5437] munmap(0x7f919cc00000, 138412032 [pid 5433] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5433] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5433] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5433] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5444 attached [pid 5444] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5435] <... rename resumed>) = -1 EIO (Input/output error) [pid 5444] <... rseq resumed>) = 0 [pid 5444] set_robust_list(0x7f91a50869a0, 24 [pid 5435] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] <... set_robust_list resumed>) = 0 [pid 5435] <... futex resumed>) = 0 [pid 5444] rt_sigprocmask(SIG_SETMASK, [], [pid 5437] <... munmap resumed>) = 0 [pid 5435] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] <... clone3 resumed> => {parent_tid=[5444]}, 88) = 5444 [pid 5444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5444] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] rt_sigprocmask(SIG_SETMASK, [], [pid 5437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5433] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5444] <... futex resumed>) = 0 [pid 5433] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5444] mkdir(".", 0777 [ 72.821637][ T5435] ERROR: (device loop3): remounting filesystem as read-only [ 72.846320][ T5435] ERROR: (device loop3): txAbort: [ 72.846320][ T5435] [pid 5437] ioctl(4, LOOP_SET_FD, 3 [pid 5444] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5444] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5444] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5444] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] <... futex resumed>) = 0 [pid 5433] exit_group(0 [pid 5444] <... futex resumed>) = ? [pid 5435] <... futex resumed>) = ? [pid 5433] <... exit_group resumed>) = ? [pid 5435] +++ exited with 0 +++ [pid 5444] +++ exited with 0 +++ [pid 5433] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5433, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./21/binderfs") = 0 [pid 5059] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5437] close(3 [pid 5059] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./21/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./21/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./21/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./21" [pid 5437] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./22", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5437] close(4) = 0 [ 72.880765][ T5437] loop0: detected capacity change from 0 to 32768 [pid 5437] mkdir("./file2", 0777) = 0 [pid 5437] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5060] <... ioctl resumed>) = 0 [pid 5439] <... write resumed>) = 16777216 [pid 5060] close(3 [pid 5439] munmap(0x7f919cc00000, 138412032) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5445 [pid 5437] <... mount resumed>) = 0 [pid 5437] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5445 attached [pid 5445] set_robust_list(0x5555565206a0, 24 [pid 5443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5437] <... openat resumed>) = 3 [pid 5445] <... set_robust_list resumed>) = 0 [pid 5437] chdir("./file2" [pid 5445] chdir("./21" [pid 5437] <... chdir resumed>) = 0 [pid 5445] <... chdir resumed>) = 0 [pid 5437] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5445] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5437] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5439] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5439] ioctl(4, LOOP_SET_FD, 3 [pid 5445] <... prctl resumed>) = 0 [pid 5437] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... ioctl resumed>) = 0 [pid 5445] setpgid(0, 0 [pid 5437] <... futex resumed>) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5445] <... setpgid resumed>) = 0 [pid 5437] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5436] <... futex resumed>) = 0 [pid 5437] rename("./file2", "./file1" [pid 5436] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5439] <... ioctl resumed>) = 0 [pid 5445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5057] close(3 [pid 5439] close(3) = 0 [pid 5439] close(4) = 0 [pid 5439] mkdir("./file2", 0777) = 0 [pid 5439] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5445] <... openat resumed>) = 3 [pid 5057] <... close resumed>) = 0 [pid 5445] write(3, "1000", 4 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5445] <... write resumed>) = 4 [pid 5439] <... mount resumed>) = 0 [pid 5439] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5446 attached [pid 5445] close(3 [pid 5439] chdir("./file2" [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5446 [pid 5446] set_robust_list(0x5555565206a0, 24 [pid 5445] <... close resumed>) = 0 [pid 5439] <... chdir resumed>) = 0 [pid 5446] <... set_robust_list resumed>) = 0 [pid 5445] symlink("/dev/binderfs", "./binderfs" [pid 5446] chdir("./22" [ 73.034566][ T5439] loop5: detected capacity change from 0 to 32768 [ 73.042562][ T5437] ERROR: (device loop0): diWrite: ixpxd invalid [ 73.042562][ T5437] [ 73.061424][ T5437] ERROR: (device loop0): remounting filesystem as read-only [ 73.069179][ T5437] ERROR: (device loop0): txAbort: [ 73.069179][ T5437] [pid 5439] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5446] <... chdir resumed>) = 0 [pid 5445] <... symlink resumed>) = 0 [pid 5439] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5445] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5439] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5446] <... prctl resumed>) = 0 [pid 5445] <... futex resumed>) = 0 [pid 5439] <... futex resumed>) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5437] <... rename resumed>) = -1 EIO (Input/output error) [pid 5446] setpgid(0, 0 [pid 5445] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5439] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5446] <... setpgid resumed>) = 0 [pid 5445] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] <... futex resumed>) = 0 [pid 5437] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5439] rename("./file2", "./file1" [pid 5438] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5437] <... futex resumed>) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5446] <... openat resumed>) = 3 [pid 5445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5437] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5446] write(3, "1000", 4 [pid 5445] <... mmap resumed>) = 0x7f91a5087000 [pid 5446] <... write resumed>) = 4 [pid 5437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5436] <... futex resumed>) = 0 [pid 5446] close(3 [pid 5436] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5446] <... close resumed>) = 0 [pid 5446] symlink("/dev/binderfs", "./binderfs" [pid 5445] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5437] mkdir(".", 0777 [pid 5445] <... mprotect resumed>) = 0 [pid 5437] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5437] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5446] <... symlink resumed>) = 0 [pid 5445] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5437] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5446] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5437] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5446] <... futex resumed>) = 0 [pid 5446] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5437] <... futex resumed>) = 1 [pid 5436] <... futex resumed>) = 0 [pid 5446] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5447 attached [ 73.086140][ T5439] ERROR: (device loop5): diWrite: ixpxd invalid [ 73.086140][ T5439] [ 73.115759][ T5439] ERROR: (device loop5): remounting filesystem as read-only [pid 5446] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5438] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5436] exit_group(0 [pid 5447] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5445] <... clone3 resumed> => {parent_tid=[5447]}, 88) = 5447 [pid 5438] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = ? [pid 5436] <... exit_group resumed>) = ? [pid 5447] <... rseq resumed>) = 0 [pid 5446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5445] rt_sigprocmask(SIG_SETMASK, [], [pid 5437] +++ exited with 0 +++ [pid 5447] set_robust_list(0x7f91a50a79a0, 24 [pid 5446] <... mmap resumed>) = 0x7f91a5087000 [pid 5447] <... set_robust_list resumed>) = 0 [pid 5446] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5447] rt_sigprocmask(SIG_SETMASK, [], [pid 5446] <... mprotect resumed>) = 0 [pid 5445] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5445] <... futex resumed>) = 0 [pid 5438] <... mmap resumed>) = 0x7f91a5066000 [pid 5446] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5445] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5438] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5447] memfd_create("syzkaller", 0 [pid 5438] <... mprotect resumed>) = 0 [pid 5446] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5448]}, 88) = 5448 [pid 5438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5438] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5438] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5448 attached [pid 5448] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5436] +++ exited with 0 +++ [pid 5448] <... rseq resumed>) = 0 [pid 5447] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 5449 attached [pid 5448] set_robust_list(0x7f91a50869a0, 24 [pid 5447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5436, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- [pid 5449] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5448] <... set_robust_list resumed>) = 0 [pid 5447] <... mmap resumed>) = 0x7f919cc00000 [pid 5446] <... clone3 resumed> => {parent_tid=[5449]}, 88) = 5449 [pid 5056] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5056] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5446] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] getdents64(3, [pid 5446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5446] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5446] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5446] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5448] rt_sigprocmask(SIG_SETMASK, [], [pid 5439] <... rename resumed>) = -1 EIO (Input/output error) [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] unlink("./22/binderfs" [pid 5449] set_robust_list(0x7f91a50a79a0, 24 [pid 5448] mkdir(".", 0777 [pid 5056] <... unlink resumed>) = 0 [pid 5449] <... set_robust_list resumed>) = 0 [pid 5448] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5439] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5449] rt_sigprocmask(SIG_SETMASK, [], [pid 5448] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5439] <... futex resumed>) = 0 [pid 5449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5448] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5439] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5449] memfd_create("syzkaller", 0 [pid 5448] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... umount2 resumed>) = 0 [pid 5438] <... futex resumed>) = 0 [pid 5438] exit_group(0 [pid 5448] <... futex resumed>) = ? [pid 5439] <... futex resumed>) = ? [pid 5438] <... exit_group resumed>) = ? [pid 5448] +++ exited with 0 +++ [pid 5439] +++ exited with 0 +++ [pid 5438] +++ exited with 0 +++ [pid 5449] <... memfd_create resumed>) = 3 [pid 5449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5438, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=21 /* 0.21 s */} --- [pid 5056] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./22/file2", [pid 5063] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5056] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] openat(AT_FDCWD, "./22/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5056] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] newfstatat(4, "", [pid 5063] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] getdents64(4, [pid 5063] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] getdents64(4, [pid 5063] unlink("./21/binderfs" [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5056] close(4 [pid 5063] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./22/file2" [pid 5443] <... write resumed>) = 16777216 [pid 5063] <... umount2 resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./22") = 0 [ 73.145877][ T5439] ERROR: (device loop5): txAbort: [ 73.145877][ T5439] [pid 5443] munmap(0x7f919cc00000, 138412032 [pid 5063] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] mkdir("./23", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... mkdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./21/file2", [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5063] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./21/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./21/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./21") = 0 [pid 5063] mkdir("./22", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... ioctl resumed>) = 0 [pid 5443] <... munmap resumed>) = 0 [pid 5059] close(3 [pid 5443] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5450 attached [pid 5443] <... openat resumed>) = 4 [pid 5450] set_robust_list(0x5555565206a0, 24 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5450 [pid 5450] <... set_robust_list resumed>) = 0 [pid 5443] ioctl(4, LOOP_SET_FD, 3 [pid 5450] chdir("./22") = 0 [pid 5450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5450] setpgid(0, 0 [pid 5443] <... ioctl resumed>) = 0 [pid 5443] close(3 [pid 5450] <... setpgid resumed>) = 0 [pid 5443] <... close resumed>) = 0 [pid 5443] close(4 [pid 5450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5443] <... close resumed>) = 0 [pid 5450] <... openat resumed>) = 3 [pid 5443] mkdir("./file2", 0777 [pid 5450] write(3, "1000", 4) = 4 [pid 5443] <... mkdir resumed>) = 0 [pid 5450] close(3) = 0 [pid 5450] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5450] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5450] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5450] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5443] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5450] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [ 73.271795][ T5443] loop2: detected capacity change from 0 to 32768 [pid 5450] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5450] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5451]}, 88) = 5451 [pid 5450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5450] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5451 attached [pid 5451] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5450] <... futex resumed>) = 0 [pid 5451] <... rseq resumed>) = 0 [pid 5451] set_robust_list(0x7f91a50a79a0, 24 [pid 5450] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5451] <... set_robust_list resumed>) = 0 [pid 5451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5451] memfd_create("syzkaller", 0) = 3 [pid 5451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5443] <... mount resumed>) = 0 [pid 5443] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5443] chdir("./file2") = 0 [pid 5443] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5443] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5443] <... futex resumed>) = 1 [pid 5442] <... futex resumed>) = 0 [pid 5443] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5442] <... futex resumed>) = 0 [pid 5443] rename("./file2", "./file1" [ 73.429007][ T5443] ERROR: (device loop2): diWrite: ixpxd invalid [ 73.429007][ T5443] [pid 5442] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5442] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5056] <... ioctl resumed>) = 0 [pid 5442] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] close(3 [pid 5442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... close resumed>) = 0 [pid 5056] close(3 [pid 5442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5452 ./strace-static-x86_64: Process 5452 attached [pid 5452] set_robust_list(0x5555565206a0, 24) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5452] chdir("./22") = 0 [pid 5452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5452] setpgid(0, 0) = 0 [pid 5452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5453 attached ./strace-static-x86_64: Process 5454 attached [pid 5453] set_robust_list(0x5555565206a0, 24 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5453 [pid 5454] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5453] <... set_robust_list resumed>) = 0 [pid 5452] <... openat resumed>) = 3 [pid 5452] write(3, "1000", 4) = 4 [pid 5452] close(3) = 0 [pid 5452] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5453] chdir("./23" [pid 5454] <... rseq resumed>) = 0 [pid 5453] <... chdir resumed>) = 0 [pid 5454] set_robust_list(0x7f91a50869a0, 24 [pid 5453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5454] <... set_robust_list resumed>) = 0 [pid 5453] <... prctl resumed>) = 0 [pid 5454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5453] setpgid(0, 0 [pid 5452] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5453] <... setpgid resumed>) = 0 [pid 5452] <... futex resumed>) = 0 [pid 5453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5452] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5453] <... openat resumed>) = 3 [pid 5452] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5453] write(3, "1000", 4 [pid 5442] <... clone3 resumed> => {parent_tid=[5454]}, 88) = 5454 [pid 5453] <... write resumed>) = 4 [pid 5452] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5442] rt_sigprocmask(SIG_SETMASK, [], [pid 5452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5453] close(3 [pid 5452] <... mmap resumed>) = 0x7f91a5087000 [pid 5443] <... rename resumed>) = -1 EIO (Input/output error) [pid 5442] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... futex resumed>) = 0 [pid 5452] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5443] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] <... futex resumed>) = 1 [pid 5454] mkdir(".", 0777 [pid 5453] <... close resumed>) = 0 [pid 5452] <... mprotect resumed>) = 0 [pid 5443] <... futex resumed>) = 0 [pid 5442] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5454] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5453] symlink("/dev/binderfs", "./binderfs" [pid 5452] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5443] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5454] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5453] <... symlink resumed>) = 0 [pid 5452] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5453] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5454] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5453] <... futex resumed>) = 0 [pid 5452] <... clone3 resumed> => {parent_tid=[5455]}, 88) = 5455 [pid 5452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5454] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5453] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5452] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] <... futex resumed>) = 1 [pid 5452] <... futex resumed>) = 0 [pid 5454] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5453] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5452] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5453] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5442] <... futex resumed>) = 0 [pid 5453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5442] exit_group(0./strace-static-x86_64: Process 5455 attached [pid 5453] <... mmap resumed>) = 0x7f91a5087000 [pid 5453] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5455] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5453] <... mprotect resumed>) = 0 [pid 5455] <... rseq resumed>) = 0 [pid 5455] set_robust_list(0x7f91a50a79a0, 24 [pid 5453] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5455] <... set_robust_list resumed>) = 0 [pid 5455] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5456 attached NULL, 8) = 0 [pid 5455] memfd_create("syzkaller", 0 [pid 5456] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5454] <... futex resumed>) = ? [pid 5453] <... clone3 resumed> => {parent_tid=[5456]}, 88) = 5456 [pid 5443] <... futex resumed>) = ? [pid 5442] <... exit_group resumed>) = ? [pid 5456] <... rseq resumed>) = 0 [pid 5454] +++ exited with 0 +++ [pid 5453] rt_sigprocmask(SIG_SETMASK, [], [pid 5443] +++ exited with 0 +++ [pid 5456] set_robust_list(0x7f91a50a79a0, 24 [pid 5455] <... memfd_create resumed>) = 3 [pid 5453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5456] <... set_robust_list resumed>) = 0 [pid 5455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 73.471317][ T5443] ERROR: (device loop2): remounting filesystem as read-only [ 73.502168][ T5443] ERROR: (device loop2): txAbort: [ 73.502168][ T5443] [pid 5453] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] rt_sigprocmask(SIG_SETMASK, [], [pid 5455] <... mmap resumed>) = 0x7f919cc00000 [pid 5453] <... futex resumed>) = 0 [pid 5456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5442] +++ exited with 0 +++ [pid 5453] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5456] memfd_create("syzkaller", 0 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5442, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5058] restart_syscall(<... resuming interrupted clone ...> [pid 5456] <... memfd_create resumed>) = 3 [pid 5058] <... restart_syscall resumed>) = 0 [pid 5058] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5058] getdents64(3, [pid 5456] <... mmap resumed>) = 0x7f919cc00000 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./22/binderfs") = 0 [pid 5058] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5058] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./22/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./22/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./22/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./22") = 0 [pid 5058] mkdir("./23", 0777 [pid 5451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] <... mkdir resumed>) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5449] <... write resumed>) = 16777216 [pid 5449] munmap(0x7f919cc00000, 138412032) = 0 [pid 5447] <... write resumed>) = 16777216 [pid 5447] munmap(0x7f919cc00000, 138412032 [pid 5449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5447] <... munmap resumed>) = 0 [pid 5449] <... openat resumed>) = 4 [pid 5449] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5449] close(3) = 0 [pid 5447] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5449] close(4 [pid 5447] ioctl(4, LOOP_SET_FD, 3 [pid 5449] <... close resumed>) = 0 [pid 5449] mkdir("./file2", 0777) = 0 [pid 5447] <... ioctl resumed>) = 0 [pid 5447] close(3) = 0 [pid 5447] close(4) = 0 [pid 5447] mkdir("./file2", 0777 [pid 5449] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5447] <... mkdir resumed>) = 0 [pid 5447] mount("/dev/loop4", "./file2", "jfs", 0, "") = 0 [pid 5447] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5447] chdir("./file2") = 0 [pid 5447] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5447] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5447] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5447] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] <... futex resumed>) = 0 [pid 5447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5445] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 73.751607][ T5449] loop1: detected capacity change from 0 to 32768 [ 73.760633][ T5447] loop4: detected capacity change from 0 to 32768 [pid 5447] rename("./file2", "./file1" [pid 5445] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5449] <... mount resumed>) = 0 [pid 5449] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5449] chdir("./file2") = 0 [pid 5449] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 73.812897][ T5447] ERROR: (device loop4): diWrite: ixpxd invalid [ 73.812897][ T5447] [pid 5449] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5446] <... futex resumed>) = 0 [pid 5445] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5449] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5446] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5446] <... futex resumed>) = 0 [pid 5445] <... futex resumed>) = 0 [pid 5446] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5449] rename("./file2", "./file1" [pid 5445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5445] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5451] <... write resumed>) = 16777216 [pid 5445] <... mprotect resumed>) = 0 [pid 5445] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] <... ioctl resumed>) = 0 [pid 5451] munmap(0x7f919cc00000, 138412032 [pid 5447] <... rename resumed>) = -1 EIO (Input/output error) [pid 5445] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5058] close(3 [pid 5447] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... close resumed>) = 0 [pid 5447] <... futex resumed>) = 0 [pid 5445] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5458 attached [pid 5447] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] set_robust_list(0x5555565206a0, 24) = 0 [pid 5458] chdir("./23") = 0 [pid 5445] <... clone3 resumed> => {parent_tid=[5457]}, 88) = 5457 [pid 5445] rt_sigprocmask(SIG_SETMASK, [], [pid 5458] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5458] <... prctl resumed>) = 0 [pid 5445] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5457 attached [pid 5458] setpgid(0, 0 [pid 5445] <... futex resumed>) = 0 [pid 5458] <... setpgid resumed>) = 0 [pid 5458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5457] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5445] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5458] <... openat resumed>) = 3 [pid 5457] <... rseq resumed>) = 0 [pid 5458] write(3, "1000", 4 [pid 5457] set_robust_list(0x7f91a50869a0, 24 [pid 5458] <... write resumed>) = 4 [pid 5457] <... set_robust_list resumed>) = 0 [pid 5458] close(3 [pid 5457] rt_sigprocmask(SIG_SETMASK, [], [pid 5458] <... close resumed>) = 0 [pid 5458] symlink("/dev/binderfs", "./binderfs" [pid 5457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5458] <... symlink resumed>) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5458 [pid 5458] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] mkdir(".", 0777 [pid 5458] <... futex resumed>) = 0 [ 73.861859][ T5447] ERROR: (device loop4): remounting filesystem as read-only [ 73.870552][ T5449] ERROR: (device loop1): diWrite: ixpxd invalid [ 73.870552][ T5449] [ 73.882030][ T5447] ERROR: (device loop4): txAbort: [ 73.882030][ T5447] [ 73.898188][ T5449] ERROR: (device loop1): remounting filesystem as read-only [pid 5458] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5457] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5458] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5458] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5458] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5459]}, 88) = 5459 ./strace-static-x86_64: Process 5459 attached [pid 5458] rt_sigprocmask(SIG_SETMASK, [], [pid 5459] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5459] <... rseq resumed>) = 0 [pid 5458] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] set_robust_list(0x7f91a50a79a0, 24 [pid 5458] <... futex resumed>) = 0 [pid 5459] <... set_robust_list resumed>) = 0 [pid 5458] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5459] memfd_create("syzkaller", 0) = 3 [pid 5446] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5457] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5446] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5459] <... mmap resumed>) = 0x7f919cc00000 [pid 5446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5457] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5457] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5451] <... munmap resumed>) = 0 [pid 5446] <... mmap resumed>) = 0x7f91a5066000 [pid 5457] <... futex resumed>) = 1 [pid 5446] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5445] <... futex resumed>) = 0 [pid 5446] <... mprotect resumed>) = 0 [pid 5445] exit_group(0 [pid 5451] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5447] <... futex resumed>) = ? [pid 5446] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5445] <... exit_group resumed>) = ? [pid 5447] +++ exited with 0 +++ [pid 5446] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5460 attached [pid 5460] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5460] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5460] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5446] <... clone3 resumed> => {parent_tid=[5460]}, 88) = 5460 [pid 5446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5446] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5460] <... futex resumed>) = 0 [pid 5446] <... futex resumed>) = 1 [pid 5460] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5460] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5446] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5451] <... openat resumed>) = 4 [pid 5460] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5460] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5446] <... futex resumed>) = 0 [pid 5457] +++ exited with 0 +++ [pid 5445] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5445, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5060] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [ 73.918618][ T5449] ERROR: (device loop1): txAbort: [ 73.918618][ T5449] [pid 5451] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5451] <... ioctl resumed>) = 0 [pid 5449] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] getdents64(3, [pid 5451] close(3 [pid 5449] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5451] <... close resumed>) = 0 [pid 5449] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5451] close(4 [pid 5449] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5451] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5451] mkdir("./file2", 0777 [pid 5446] exit_group(0 [pid 5460] <... futex resumed>) = ? [pid 5449] <... futex resumed>) = ? [pid 5446] <... exit_group resumed>) = ? [pid 5460] +++ exited with 0 +++ [pid 5451] <... mkdir resumed>) = 0 [pid 5451] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5449] +++ exited with 0 +++ [pid 5446] +++ exited with 0 +++ [pid 5060] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5446, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5060] unlink("./21/binderfs" [pid 5057] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... unlink resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5451] <... mount resumed>) = 0 [pid 5060] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5451] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5451] <... openat resumed>) = 3 [pid 5057] getdents64(3, [pid 5451] chdir("./file2" [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5451] <... chdir resumed>) = 0 [pid 5057] unlink("./22/binderfs" [pid 5451] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5057] <... unlink resumed>) = 0 [pid 5451] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5451] <... futex resumed>) = 1 [pid 5450] <... futex resumed>) = 0 [pid 5451] rename("./file2", "./file1" [pid 5450] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 73.962666][ T5449] ERROR: (device loop1): remounting filesystem as read-only [ 73.970455][ T5451] loop3: detected capacity change from 0 to 32768 [pid 5450] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./21/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./21/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./21/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./21/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./21") = 0 [pid 5060] mkdir("./22", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5450] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5450] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [ 74.021681][ T5451] ERROR: (device loop3): diWrite: ixpxd invalid [ 74.021681][ T5451] [ 74.044765][ T5451] ERROR: (device loop3): remounting filesystem as read-only [pid 5450] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5455] <... write resumed>) = 16777216 [pid 5451] <... rename resumed>) = -1 EIO (Input/output error) [pid 5450] <... mprotect resumed>) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5450] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5057] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./22/file2", [pid 5456] <... write resumed>) = 16777216 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5450] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5057] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5461 attached [pid 5456] munmap(0x7f919cc00000, 138412032 [pid 5451] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5450] <... clone3 resumed> => {parent_tid=[5461]}, 88) = 5461 [pid 5057] openat(AT_FDCWD, "./22/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5451] <... futex resumed>) = 0 [pid 5455] munmap(0x7f919cc00000, 138412032 [pid 5461] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5456] <... munmap resumed>) = 0 [pid 5451] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] newfstatat(4, "", [pid 5461] <... rseq resumed>) = 0 [pid 5461] set_robust_list(0x7f91a50869a0, 24 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5461] <... set_robust_list resumed>) = 0 [pid 5057] getdents64(4, [pid 5461] rt_sigprocmask(SIG_SETMASK, [], [pid 5450] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5450] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] getdents64(4, [pid 5461] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5450] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5450] <... futex resumed>) = 0 [pid 5057] close(4 [pid 5461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5450] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5461] mkdir(".", 0777 [pid 5057] <... close resumed>) = 0 [pid 5461] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5461] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5057] rmdir("./22/file2" [pid 5455] <... munmap resumed>) = 0 [pid 5455] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 74.081119][ T5451] ERROR: (device loop3): txAbort: [ 74.081119][ T5451] [pid 5455] ioctl(4, LOOP_SET_FD, 3 [pid 5461] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5456] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5057] <... rmdir resumed>) = 0 [pid 5461] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] <... openat resumed>) = 4 [pid 5461] <... futex resumed>) = 1 [pid 5456] ioctl(4, LOOP_SET_FD, 3 [pid 5450] <... futex resumed>) = 0 [pid 5057] getdents64(3, [pid 5450] exit_group(0) = ? [pid 5455] <... ioctl resumed>) = 0 [pid 5459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5456] <... ioctl resumed>) = 0 [pid 5451] <... futex resumed>) = ? [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5461] +++ exited with 0 +++ [pid 5455] close(3) = 0 [pid 5455] close(4 [pid 5456] close(3 [pid 5451] +++ exited with 0 +++ [pid 5450] +++ exited with 0 +++ [pid 5057] close(3 [pid 5456] <... close resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5450, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=14 /* 0.14 s */} --- [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5456] close(4 [pid 5059] <... restart_syscall resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5456] <... close resumed>) = 0 [pid 5057] rmdir("./22" [pid 5456] mkdir("./file2", 0777 [pid 5057] <... rmdir resumed>) = 0 [pid 5059] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5456] <... mkdir resumed>) = 0 [pid 5455] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5057] mkdir("./23", 0777 [pid 5455] mkdir("./file2", 0777 [pid 5059] newfstatat(3, "", [pid 5455] <... mkdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] <... mkdir resumed>) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./22/binderfs") = 0 [pid 5059] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5455] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5456] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5057] <... openat resumed>) = 3 [pid 5455] <... mount resumed>) = 0 [ 74.136126][ T5455] loop5: detected capacity change from 0 to 32768 [ 74.146825][ T5456] loop0: detected capacity change from 0 to 32768 [pid 5455] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5455] <... openat resumed>) = 3 [pid 5455] chdir("./file2") = 0 [pid 5455] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5455] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5452] <... futex resumed>) = 0 [pid 5455] rename("./file2", "./file1" [pid 5452] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5452] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5456] <... mount resumed>) = 0 [pid 5456] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5456] chdir("./file2" [pid 5059] <... umount2 resumed>) = 0 [pid 5456] <... chdir resumed>) = 0 [pid 5456] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5456] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5456] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5453] <... futex resumed>) = 0 [pid 5059] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5453] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] <... futex resumed>) = 0 [pid 5453] <... futex resumed>) = 1 [pid 5456] rename("./file2", "./file1" [pid 5453] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./22/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./22/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./22/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./22") = 0 [pid 5059] mkdir("./23", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 74.193417][ T5455] ERROR: (device loop5): diWrite: ixpxd invalid [ 74.193417][ T5455] [ 74.227879][ T5455] ERROR: (device loop5): remounting filesystem as read-only [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5452] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5452] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5452] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5455] <... rename resumed>) = -1 EIO (Input/output error) [pid 5452] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5455] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... futex resumed>) = 0 [pid 5452] <... futex resumed>) = 0 [pid 5455] mkdir(".", 0777 [pid 5452] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5455] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5455] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5455] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5452] <... futex resumed>) = 0 [pid 5455] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5452] exit_group(0) = ? [pid 5455] <... futex resumed>) = ? [pid 5455] +++ exited with 0 +++ [pid 5452] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5452, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=15 /* 0.15 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./22/binderfs") = 0 [ 74.252892][ T5456] ERROR: (device loop0): diWrite: ixpxd invalid [ 74.252892][ T5456] [ 74.254080][ T5455] ERROR: (device loop5): txAbort: [ 74.254080][ T5455] [pid 5063] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5063] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./22/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./22/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5453] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] close(3 [pid 5453] <... futex resumed>) = 0 [pid 5453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... close resumed>) = 0 [pid 5453] <... mmap resumed>) = 0x7f91a5066000 [pid 5453] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5453] <... mprotect resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./22/file2") = 0 [pid 5063] getdents64(3, [pid 5453] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5453] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] close(3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5462 attached [pid 5453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5063] <... close resumed>) = 0 [ 74.296253][ T5456] ERROR: (device loop0): remounting filesystem as read-only [ 74.317345][ T5456] ERROR: (device loop0): txAbort: [ 74.317345][ T5456] [pid 5063] rmdir("./22" [pid 5462] set_robust_list(0x5555565206a0, 24 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5462 [pid 5453] <... clone3 resumed> => {parent_tid=[5463]}, 88) = 5463 [pid 5063] mkdir("./23", 0777 [pid 5462] <... set_robust_list resumed>) = 0 [pid 5453] rt_sigprocmask(SIG_SETMASK, [], [pid 5462] chdir("./22" [pid 5453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5462] <... chdir resumed>) = 0 [pid 5453] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5453] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5462] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5463 attached [pid 5463] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5463] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5463] rt_sigprocmask(SIG_SETMASK, [], [pid 5462] setpgid(0, 0 [pid 5463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5463] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5463] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5462] <... setpgid resumed>) = 0 [pid 5463] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5463] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5462] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5462] write(3, "1000", 4) = 4 [pid 5462] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5462] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5463] <... futex resumed>) = 1 [pid 5453] <... futex resumed>) = 0 [pid 5463] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5462] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] <... write resumed>) = 16777216 [pid 5456] <... rename resumed>) = -1 EIO (Input/output error) [pid 5462] <... futex resumed>) = 0 [pid 5459] munmap(0x7f919cc00000, 138412032) = 0 [pid 5462] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5462] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [ 74.355917][ T5456] ERROR: (device loop0): remounting filesystem as read-only [pid 5462] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5456] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5462] <... mprotect resumed>) = 0 [pid 5453] exit_group(0) = ? [pid 5456] <... futex resumed>) = ? [pid 5463] <... futex resumed>) = ? [pid 5463] +++ exited with 0 +++ [pid 5462] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5456] +++ exited with 0 +++ [pid 5453] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5453, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- [pid 5056] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5462] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5056] newfstatat(3, "", ./strace-static-x86_64: Process 5464 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5462] <... clone3 resumed> => {parent_tid=[5464]}, 88) = 5464 [pid 5056] getdents64(3, [pid 5462] rt_sigprocmask(SIG_SETMASK, [], [pid 5464] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5462] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5464] set_robust_list(0x7f91a50a79a0, 24 [pid 5056] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5462] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] <... set_robust_list resumed>) = 0 [pid 5464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5464] memfd_create("syzkaller", 0 [pid 5462] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5462] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5464] <... memfd_create resumed>) = 3 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5459] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] unlink("./23/binderfs" [pid 5464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5056] <... unlink resumed>) = 0 [pid 5464] <... mmap resumed>) = 0x7f919cc00000 [pid 5056] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] <... openat resumed>) = 4 [pid 5459] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5459] close(3 [pid 5059] <... ioctl resumed>) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5459] <... close resumed>) = 0 [pid 5056] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] close(4 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./23/file2", [pid 5459] <... close resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] mkdir("./file2", 0777 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5459] <... mkdir resumed>) = 0 [pid 5059] close(3 [pid 5056] openat(AT_FDCWD, "./23/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5465 [pid 5056] <... openat resumed>) = 4 [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [ 74.443356][ T5459] loop2: detected capacity change from 0 to 32768 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5466 attached ./strace-static-x86_64: Process 5465 attached [pid 5459] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5056] newfstatat(4, "", [pid 5465] set_robust_list(0x5555565206a0, 24 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5466 [pid 5466] set_robust_list(0x5555565206a0, 24 [pid 5465] <... set_robust_list resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5466] <... set_robust_list resumed>) = 0 [pid 5465] chdir("./23" [pid 5466] chdir("./23" [pid 5056] getdents64(4, [pid 5465] <... chdir resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5056] getdents64(4, [pid 5466] <... chdir resumed>) = 0 [pid 5465] <... prctl resumed>) = 0 [pid 5466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5465] setpgid(0, 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5466] <... prctl resumed>) = 0 [pid 5465] <... setpgid resumed>) = 0 [pid 5056] close(4 [pid 5466] setpgid(0, 0 [pid 5465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5056] <... close resumed>) = 0 [pid 5466] <... setpgid resumed>) = 0 [pid 5466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5466] write(3, "1000", 4) = 4 [pid 5466] close(3) = 0 [pid 5466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5466] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] <... openat resumed>) = 3 [pid 5056] rmdir("./23/file2" [pid 5466] <... futex resumed>) = 0 [pid 5466] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5466] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5466] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5466] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5465] write(3, "1000", 4 [pid 5056] getdents64(3, [pid 5466] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5465] <... write resumed>) = 4 [pid 5466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5465] close(3 [pid 5466] <... clone3 resumed> => {parent_tid=[5467]}, 88) = 5467 [pid 5465] <... close resumed>) = 0 [pid 5056] close(3 [pid 5466] rt_sigprocmask(SIG_SETMASK, [], [pid 5465] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5467 attached [pid 5466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5467] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5466] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] <... symlink resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5467] <... rseq resumed>) = 0 [pid 5466] <... futex resumed>) = 0 [pid 5465] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] rmdir("./23" [pid 5465] <... futex resumed>) = 0 [pid 5467] set_robust_list(0x7f91a50a79a0, 24 [pid 5466] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5467] <... set_robust_list resumed>) = 0 [pid 5467] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] <... rmdir resumed>) = 0 [pid 5467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5467] memfd_create("syzkaller", 0 [pid 5465] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5056] mkdir("./24", 0777 [pid 5467] <... memfd_create resumed>) = 3 [pid 5465] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5465] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5467] <... mmap resumed>) = 0x7f919cc00000 [pid 5465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5459] <... mount resumed>) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5459] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5465] <... mmap resumed>) = 0x7f91a5087000 [pid 5459] <... openat resumed>) = 3 [pid 5465] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5459] chdir("./file2" [pid 5465] <... mprotect resumed>) = 0 [pid 5459] <... chdir resumed>) = 0 [pid 5459] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5465] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5459] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5465] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5459] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5468 attached [pid 5459] <... futex resumed>) = 1 [pid 5458] <... futex resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5468] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5465] <... clone3 resumed> => {parent_tid=[5468]}, 88) = 5468 [pid 5459] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] <... rseq resumed>) = 0 [pid 5465] rt_sigprocmask(SIG_SETMASK, [], [pid 5459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5458] <... futex resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5459] rename("./file2", "./file1" [pid 5468] set_robust_list(0x7f91a50a79a0, 24 [pid 5465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5458] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5465] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5468] <... set_robust_list resumed>) = 0 [pid 5465] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5468] memfd_create("syzkaller", 0) = 3 [pid 5468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] close(3 [pid 5468] <... mmap resumed>) = 0x7f919cc00000 [pid 5063] <... close resumed>) = 0 [pid 5464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5469 attached [pid 5469] set_robust_list(0x5555565206a0, 24) = 0 [pid 5469] chdir("./23") = 0 [pid 5469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5469] setpgid(0, 0) = 0 [ 74.574215][ T5459] ERROR: (device loop2): diWrite: ixpxd invalid [ 74.574215][ T5459] [pid 5469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5469] write(3, "1000", 4) = 4 [pid 5469] close(3) = 0 [pid 5469] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5469] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5469] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5469] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5469] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5470]}, 88) = 5470 [pid 5469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5469] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5470 attached [pid 5470] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5470] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5470] memfd_create("syzkaller", 0) = 3 [pid 5470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5458] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5469 [pid 5458] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5458] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5471]}, 88) = 5471 [pid 5458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5458] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5458] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5471 attached [pid 5471] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5471] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5471] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5471] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5471] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5471] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5458] <... futex resumed>) = 0 [ 74.621380][ T5459] ERROR: (device loop2): remounting filesystem as read-only [ 74.628665][ T5459] ERROR: (device loop2): txAbort: [ 74.628665][ T5459] [pid 5471] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5459] <... rename resumed>) = -1 EIO (Input/output error) [pid 5459] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5459] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] exit_group(0 [pid 5471] <... futex resumed>) = ? [pid 5458] <... exit_group resumed>) = ? [pid 5471] +++ exited with 0 +++ [pid 5459] <... futex resumed>) = ? [pid 5459] +++ exited with 0 +++ [pid 5458] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5458, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- [pid 5058] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 74.686268][ T5459] ERROR: (device loop2): remounting filesystem as read-only [pid 5058] unlink("./23/binderfs") = 0 [pid 5058] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5058] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./23/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./23/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./23/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./23") = 0 [pid 5058] mkdir("./24", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5472 attached , child_tidptr=0x555556520690) = 5472 [pid 5472] set_robust_list(0x5555565206a0, 24 [pid 5464] <... write resumed>) = 16777216 [pid 5472] <... set_robust_list resumed>) = 0 [pid 5472] chdir("./24") = 0 [pid 5472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5464] munmap(0x7f919cc00000, 138412032 [pid 5472] <... prctl resumed>) = 0 [pid 5472] setpgid(0, 0) = 0 [pid 5472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5472] write(3, "1000", 4) = 4 [pid 5472] close(3) = 0 [pid 5472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5472] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5472] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5472] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5473]}, 88) = 5473 [pid 5472] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5473 attached NULL, 8) = 0 [pid 5473] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5472] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... rseq resumed>) = 0 [pid 5472] <... futex resumed>) = 0 [pid 5473] set_robust_list(0x7f91a50a79a0, 24 [pid 5472] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5473] <... set_robust_list resumed>) = 0 [pid 5473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5473] memfd_create("syzkaller", 0) = 3 [pid 5464] <... munmap resumed>) = 0 [pid 5473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5464] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5464] close(3) = 0 [pid 5464] close(4) = 0 [ 74.955756][ T5464] loop4: detected capacity change from 0 to 32768 [pid 5464] mkdir("./file2", 0777) = 0 [pid 5464] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5058] <... ioctl resumed>) = 0 [pid 5464] <... mount resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5464] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5474 attached [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5474 [pid 5464] <... openat resumed>) = 3 [pid 5474] set_robust_list(0x5555565206a0, 24 [pid 5464] chdir("./file2" [pid 5474] <... set_robust_list resumed>) = 0 [pid 5464] <... chdir resumed>) = 0 [pid 5474] chdir("./24" [pid 5464] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5474] <... chdir resumed>) = 0 [pid 5474] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5464] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5474] setpgid(0, 0 [pid 5464] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] <... setpgid resumed>) = 0 [pid 5464] <... futex resumed>) = 1 [pid 5474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5464] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5474] <... openat resumed>) = 3 [pid 5474] write(3, "1000", 4) = 4 [pid 5474] close(3) = 0 [pid 5474] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5474] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5462] <... futex resumed>) = 0 [pid 5474] <... futex resumed>) = 0 [pid 5462] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5464] <... futex resumed>) = 0 [pid 5462] <... futex resumed>) = 1 [pid 5474] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5464] rename("./file2", "./file1" [pid 5462] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5474] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5474] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5474] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5475]}, 88) = 5475 [pid 5474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5474] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5474] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5475 attached [pid 5475] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5475] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5475] memfd_create("syzkaller", 0) = 3 [pid 5475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5467] <... write resumed>) = 16777216 [pid 5467] munmap(0x7f919cc00000, 138412032 [pid 5462] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5462] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5462] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5462] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5462] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5470] <... write resumed>) = 16777216 [pid 5468] <... write resumed>) = 16777216 [pid 5462] <... clone3 resumed> => {parent_tid=[5476]}, 88) = 5476 [ 75.111142][ T5464] ERROR: (device loop4): diWrite: ixpxd invalid [ 75.111142][ T5464] [ 75.146804][ T5464] ERROR: (device loop4): remounting filesystem as read-only [pid 5462] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5476 attached [pid 5470] munmap(0x7f919cc00000, 138412032 [pid 5468] munmap(0x7f919cc00000, 138412032 [pid 5462] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5462] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5476] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5476] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5476] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5462] <... futex resumed>) = 0 [pid 5476] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5462] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5476] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5470] <... munmap resumed>) = 0 [pid 5467] <... munmap resumed>) = 0 [pid 5467] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5468] <... munmap resumed>) = 0 [pid 5470] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5468] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5467] <... openat resumed>) = 4 [pid 5464] <... rename resumed>) = -1 EIO (Input/output error) [pid 5468] <... openat resumed>) = 4 [pid 5467] ioctl(4, LOOP_SET_FD, 3 [pid 5464] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] <... openat resumed>) = 4 [pid 5468] ioctl(4, LOOP_SET_FD, 3 [pid 5464] <... futex resumed>) = 0 [pid 5464] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 75.172424][ T5464] ERROR: (device loop4): txAbort: [ 75.172424][ T5464] [ 75.198195][ T5464] ERROR: (device loop4): remounting filesystem as read-only [ 75.211461][ T5467] loop1: detected capacity change from 0 to 32768 [pid 5462] exit_group(0) = ? [pid 5476] <... futex resumed>) = ? [pid 5470] ioctl(4, LOOP_SET_FD, 3 [pid 5464] <... futex resumed>) = ? [pid 5476] +++ exited with 0 +++ [pid 5464] +++ exited with 0 +++ [pid 5462] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5462, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5060] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5467] close(3) = 0 [pid 5467] close(4 [pid 5470] <... ioctl resumed>) = 0 [pid 5468] <... ioctl resumed>) = 0 [pid 5467] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5470] close(3 [pid 5468] close(3 [pid 5470] <... close resumed>) = 0 [pid 5468] <... close resumed>) = 0 [pid 5468] close(4 [pid 5470] close(4 [pid 5467] mkdir("./file2", 0777 [pid 5060] <... openat resumed>) = 3 [pid 5470] <... close resumed>) = 0 [pid 5468] <... close resumed>) = 0 [pid 5467] <... mkdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5470] mkdir("./file2", 0777 [pid 5468] mkdir("./file2", 0777 [pid 5467] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5470] <... mkdir resumed>) = 0 [pid 5468] <... mkdir resumed>) = 0 [pid 5467] <... mount resumed>) = 0 [pid 5060] getdents64(3, [pid 5470] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5468] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5467] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5467] <... openat resumed>) = 3 [pid 5060] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] chdir("./file2" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5467] <... chdir resumed>) = 0 [ 75.218534][ T5468] loop3: detected capacity change from 0 to 32768 [ 75.231424][ T5470] loop5: detected capacity change from 0 to 32768 [pid 5467] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5060] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5467] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5467] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5467] <... futex resumed>) = 1 [pid 5466] <... futex resumed>) = 0 [pid 5060] unlink("./22/binderfs" [pid 5467] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5466] <... futex resumed>) = 0 [pid 5467] rename("./file2", "./file1" [pid 5466] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... unlink resumed>) = 0 [pid 5468] <... mount resumed>) = 0 [pid 5060] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5468] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5470] <... mount resumed>) = 0 [pid 5470] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5468] <... openat resumed>) = 3 [pid 5470] <... openat resumed>) = 3 [pid 5468] chdir("./file2" [pid 5470] chdir("./file2" [pid 5468] <... chdir resumed>) = 0 [pid 5470] <... chdir resumed>) = 0 [pid 5468] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5470] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5468] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5468] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5468] <... futex resumed>) = 1 [pid 5465] <... futex resumed>) = 0 [pid 5470] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] rename("./file2", "./file1" [pid 5465] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 75.270322][ T5467] ERROR: (device loop1): diWrite: ixpxd invalid [ 75.270322][ T5467] [ 75.298047][ T5467] ERROR: (device loop1): remounting filesystem as read-only [ 75.312737][ T5468] ERROR: (device loop3): diWrite: ixpxd invalid [pid 5465] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5470] <... futex resumed>) = 1 [pid 5469] <... futex resumed>) = 0 [pid 5469] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] rename("./file2", "./file1" [pid 5469] <... futex resumed>) = 0 [pid 5469] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... rename resumed>) = -1 EIO (Input/output error) [pid 5466] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] <... umount2 resumed>) = 0 [pid 5466] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5466] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5467] <... futex resumed>) = 0 [pid 5466] <... mmap resumed>) = 0x7f91a5066000 [pid 5060] newfstatat(AT_FDCWD, "./22/file2", [pid 5467] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5465] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5466] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5466] <... mprotect resumed>) = 0 [pid 5465] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5466] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] umount2("./22/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5466] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5465] <... mmap resumed>) = 0x7f91a5066000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5465] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] openat(AT_FDCWD, "./22/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5465] <... mprotect resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5465] rt_sigprocmask(SIG_BLOCK, ~[], [ 75.312737][ T5468] [ 75.315427][ T5467] ERROR: (device loop1): txAbort: [ 75.315427][ T5467] [ 75.331852][ T5470] ERROR: (device loop5): diWrite: ixpxd invalid [ 75.331852][ T5470] [ 75.341290][ T5468] ERROR: (device loop3): remounting filesystem as read-only [ 75.362251][ T5468] ERROR: (device loop3): txAbort: [ 75.362251][ T5468] [pid 5060] newfstatat(4, "", [pid 5469] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5469] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5469] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5469] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5469] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5469] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5466] <... clone3 resumed> => {parent_tid=[5477]}, 88) = 5477 [pid 5465] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] getdents64(4, [pid 5469] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5466] rt_sigprocmask(SIG_SETMASK, [], [pid 5465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] getdents64(4, [pid 5469] <... clone3 resumed> => {parent_tid=[5479]}, 88) = 5479 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5465] <... clone3 resumed> => {parent_tid=[5478]}, 88) = 5478 [pid 5466] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] rt_sigprocmask(SIG_SETMASK, [], [pid 5466] <... futex resumed>) = 0 [pid 5465] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] close(4./strace-static-x86_64: Process 5477 attached [pid 5469] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5466] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5477] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5469] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... close resumed>) = 0 ./strace-static-x86_64: Process 5479 attached [pid 5469] <... futex resumed>) = 0 [pid 5479] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5469] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5479] <... rseq resumed>) = 0 [pid 5479] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5479] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5479] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5479] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5478 attached ) = 1 [pid 5469] <... futex resumed>) = 0 [pid 5479] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5478] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5478] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5468] <... rename resumed>) = -1 EIO (Input/output error) [pid 5478] rt_sigprocmask(SIG_SETMASK, [], [pid 5477] <... rseq resumed>) = 0 [pid 5468] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] <... futex resumed>) = 0 [pid 5060] rmdir("./22/file2" [pid 5478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5468] <... futex resumed>) = 0 [pid 5478] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5477] set_robust_list(0x7f91a50869a0, 24 [pid 5468] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5465] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... rmdir resumed>) = 0 [pid 5478] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5477] <... set_robust_list resumed>) = 0 [pid 5060] getdents64(3, [pid 5477] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] close(3 [pid 5477] mkdir(".", 0777 [pid 5060] <... close resumed>) = 0 [pid 5478] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5477] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5060] rmdir("./22" [pid 5478] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5477] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5478] <... futex resumed>) = 1 [pid 5060] <... rmdir resumed>) = 0 [pid 5478] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5465] <... futex resumed>) = 0 [pid 5060] mkdir("./23", 0777 [pid 5477] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5465] exit_group(0 [pid 5478] <... futex resumed>) = ? [pid 5477] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] <... futex resumed>) = ? [pid 5465] <... exit_group resumed>) = ? [pid 5060] <... mkdir resumed>) = 0 [pid 5478] +++ exited with 0 +++ [pid 5477] <... futex resumed>) = 1 [pid 5468] +++ exited with 0 +++ [pid 5466] <... futex resumed>) = 0 [pid 5477] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5466] exit_group(0 [pid 5465] +++ exited with 0 +++ [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5477] <... futex resumed>) = ? [pid 5467] <... futex resumed>) = ? [pid 5466] <... exit_group resumed>) = ? [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5465, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [pid 5060] <... openat resumed>) = 3 [pid 5477] +++ exited with 0 +++ [pid 5467] +++ exited with 0 +++ [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5466] +++ exited with 0 +++ [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] <... restart_syscall resumed>) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5466, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=20 /* 0.20 s */} --- [pid 5059] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5057] <... openat resumed>) = 3 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] newfstatat(3, "", [pid 5059] unlink("./23/binderfs" [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, [pid 5059] <... unlink resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./23/binderfs") = 0 [pid 5057] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5470] <... rename resumed>) = -1 EIO (Input/output error) [pid 5470] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] exit_group(0 [pid 5479] <... futex resumed>) = ? [pid 5469] <... exit_group resumed>) = ? [pid 5479] +++ exited with 0 +++ [pid 5470] +++ exited with 0 +++ [pid 5469] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5469, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5059] <... umount2 resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5059] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] newfstatat(AT_FDCWD, "./23/file2", [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 5473] <... write resumed>) = 16777216 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5063] getdents64(3, [pid 5059] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./23/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5057] newfstatat(AT_FDCWD, "./23/file2", [pid 5063] unlink("./23/binderfs") = 0 [pid 5059] newfstatat(4, "", [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] getdents64(4, [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] openat(AT_FDCWD, "./23/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] <... openat resumed>) = 4 [ 75.373678][ T5470] ERROR: (device loop5): remounting filesystem as read-only [ 75.384146][ T5470] ERROR: (device loop5): txAbort: [ 75.384146][ T5470] [ 75.409641][ T5470] ERROR: (device loop5): remounting filesystem as read-only [pid 5059] close(4 [pid 5473] munmap(0x7f919cc00000, 138412032 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5057] newfstatat(4, "", [pid 5473] <... munmap resumed>) = 0 [pid 5063] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] rmdir("./23/file2" [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5473] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5059] <... rmdir resumed>) = 0 [pid 5473] <... openat resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./23/file2", [pid 5059] getdents64(3, [pid 5057] getdents64(4, [pid 5473] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5473] <... ioctl resumed>) = 0 [pid 5063] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 5057] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./23/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] rmdir("./23" [pid 5057] close(4) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5057] rmdir("./23/file2" [pid 5059] mkdir("./24", 0777 [pid 5473] close(3 [pid 5063] <... openat resumed>) = 4 [pid 5059] <... mkdir resumed>) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5057] getdents64(3, [pid 5473] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5473] close(4 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] close(3 [pid 5473] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5057] <... close resumed>) = 0 [pid 5473] mkdir("./file2", 0777 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] rmdir("./23" [pid 5473] <... mkdir resumed>) = 0 [pid 5063] close(4 [pid 5473] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./23/file2" [pid 5057] <... rmdir resumed>) = 0 [pid 5057] mkdir("./24", 0777) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./23" [pid 5473] <... mount resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5473] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5063] mkdir("./24", 0777 [pid 5473] <... openat resumed>) = 3 [pid 5473] chdir("./file2") = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5473] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 75.491739][ T5473] loop0: detected capacity change from 0 to 32768 [pid 5473] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5472] <... futex resumed>) = 0 [pid 5473] rename("./file2", "./file1" [pid 5472] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5472] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5475] <... write resumed>) = 16777216 [pid 5475] munmap(0x7f919cc00000, 138412032 [pid 5472] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5472] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5472] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5472] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5480]}, 88) = 5480 [pid 5472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5472] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5472] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5475] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5480 attached [pid 5473] <... rename resumed>) = -1 EIO (Input/output error) [pid 5473] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5473] <... futex resumed>) = 0 [pid 5480] <... rseq resumed>) = 0 [pid 5473] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5480] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5480] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5480] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5480] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5472] <... futex resumed>) = 0 [pid 5472] exit_group(0) = ? [pid 5473] <... futex resumed>) = ? [pid 5473] +++ exited with 0 +++ [ 75.537981][ T5473] ERROR: (device loop0): diWrite: ixpxd invalid [ 75.537981][ T5473] [ 75.556595][ T5473] ERROR: (device loop0): remounting filesystem as read-only [ 75.574204][ T5473] ERROR: (device loop0): txAbort: [ 75.574204][ T5473] [pid 5475] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5480] +++ exited with 0 +++ [pid 5472] +++ exited with 0 +++ [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5472, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5060] <... close resumed>) = 0 [pid 5475] <... openat resumed>) = 4 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5475] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5481 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5481 [pid 5481] set_robust_list(0x5555565206a0, 24 [pid 5056] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5481] <... set_robust_list resumed>) = 0 [pid 5056] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5481] chdir("./23" [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./24/binderfs") = 0 [pid 5056] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5475] <... ioctl resumed>) = 0 [pid 5481] <... chdir resumed>) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5475] close(3 [pid 5056] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5475] <... close resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5475] close(4 [pid 5056] newfstatat(AT_FDCWD, "./24/file2", [pid 5475] <... close resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5475] mkdir("./file2", 0777 [pid 5056] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5481] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5475] <... mkdir resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./24/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5475] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5056] newfstatat(4, "", [pid 5481] <... prctl resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, [pid 5481] setpgid(0, 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5481] <... setpgid resumed>) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4 [pid 5481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./24/file2" [pid 5481] <... openat resumed>) = 3 [pid 5056] <... rmdir resumed>) = 0 [pid 5481] write(3, "1000", 4) = 4 [pid 5056] getdents64(3, [pid 5481] close(3) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5481] symlink("/dev/binderfs", "./binderfs" [pid 5056] close(3) = 0 [pid 5056] rmdir("./24" [pid 5481] <... symlink resumed>) = 0 [pid 5481] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... rmdir resumed>) = 0 [pid 5056] mkdir("./25", 0777 [pid 5481] <... futex resumed>) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 75.649567][ T5475] loop2: detected capacity change from 0 to 32768 [pid 5481] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5475] <... mount resumed>) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5481] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5475] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5475] <... openat resumed>) = 3 [pid 5475] chdir("./file2" [pid 5481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5475] <... chdir resumed>) = 0 [pid 5475] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5481] <... mmap resumed>) = 0x7f91a5087000 [pid 5475] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5481] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5475] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5474] <... futex resumed>) = 0 [pid 5481] <... mprotect resumed>) = 0 [pid 5475] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5474] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5474] <... futex resumed>) = 0 [pid 5475] rename("./file2", "./file1" [pid 5474] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5481] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5481] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5482 attached => {parent_tid=[5482]}, 88) = 5482 [pid 5482] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [ 75.719586][ T5475] ERROR: (device loop2): diWrite: ixpxd invalid [ 75.719586][ T5475] [ 75.739099][ T5475] ERROR: (device loop2): remounting filesystem as read-only [ 75.764092][ T5475] ERROR: (device loop2): txAbort: [pid 5481] rt_sigprocmask(SIG_SETMASK, [], [pid 5482] <... rseq resumed>) = 0 [pid 5481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5482] set_robust_list(0x7f91a50a79a0, 24 [pid 5481] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5482] <... set_robust_list resumed>) = 0 [pid 5481] <... futex resumed>) = 0 [pid 5482] rt_sigprocmask(SIG_SETMASK, [], [pid 5481] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5474] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5474] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5474] <... mmap resumed>) = 0x7f91a5066000 [pid 5474] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5482] memfd_create("syzkaller", 0 [pid 5474] <... mprotect resumed>) = 0 [pid 5482] <... memfd_create resumed>) = 3 [pid 5474] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5474] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5482] <... mmap resumed>) = 0x7f919cc00000 [pid 5474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5483]}, 88) = 5483 [pid 5474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5474] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5483 attached ) = 0 [pid 5483] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5474] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5483] <... rseq resumed>) = 0 [pid 5483] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5483] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5483] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5483] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5474] <... futex resumed>) = 0 [ 75.764092][ T5475] [pid 5483] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5484 ./strace-static-x86_64: Process 5484 attached [pid 5475] <... rename resumed>) = -1 EIO (Input/output error) [pid 5484] set_robust_list(0x5555565206a0, 24 [pid 5057] <... ioctl resumed>) = 0 [pid 5484] <... set_robust_list resumed>) = 0 [pid 5475] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5475] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5474] exit_group(0 [pid 5483] <... futex resumed>) = ? [pid 5475] <... futex resumed>) = ? [pid 5474] <... exit_group resumed>) = ? [pid 5484] chdir("./24" [pid 5483] +++ exited with 0 +++ [pid 5475] +++ exited with 0 +++ [pid 5474] +++ exited with 0 +++ [pid 5484] <... chdir resumed>) = 0 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5474, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5057] close(3 [pid 5484] setpgid(0, 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5058] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5484] <... setpgid resumed>) = 0 [pid 5063] close(3 [pid 5058] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] unlink("./24/binderfs" [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5485 [pid 5058] <... unlink resumed>) = 0 [pid 5058] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5485 attached [pid 5485] set_robust_list(0x5555565206a0, 24) = 0 [pid 5484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5485] chdir("./24" [pid 5484] <... openat resumed>) = 3 [pid 5485] <... chdir resumed>) = 0 [pid 5485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5485] setpgid(0, 0) = 0 [pid 5485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5484] write(3, "1000", 4) = 4 [pid 5484] close(3) = 0 ./strace-static-x86_64: Process 5486 attached [pid 5484] symlink("/dev/binderfs", "./binderfs" [pid 5485] <... openat resumed>) = 3 [pid 5484] <... symlink resumed>) = 0 [ 75.796891][ T5475] ERROR: (device loop2): remounting filesystem as read-only [pid 5486] set_robust_list(0x5555565206a0, 24 [pid 5484] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5486 [pid 5486] <... set_robust_list resumed>) = 0 [pid 5484] <... futex resumed>) = 0 [pid 5485] write(3, "1000", 4) = 4 [pid 5485] close(3) = 0 [pid 5486] chdir("./24" [pid 5485] symlink("/dev/binderfs", "./binderfs" [pid 5484] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5486] <... chdir resumed>) = 0 [pid 5484] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5484] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5486] <... prctl resumed>) = 0 [pid 5484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5486] setpgid(0, 0 [pid 5485] <... symlink resumed>) = 0 [pid 5484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5484] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5485] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5486] <... setpgid resumed>) = 0 [pid 5058] newfstatat(AT_FDCWD, "./24/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5058] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./24/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./24/file2" [pid 5486] <... openat resumed>) = 3 [pid 5058] <... rmdir resumed>) = 0 [pid 5484] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5058] getdents64(3, [pid 5484] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5485] <... futex resumed>) = 0 [pid 5058] close(3 [pid 5485] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5058] <... close resumed>) = 0 ./strace-static-x86_64: Process 5487 attached [pid 5485] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5058] rmdir("./24" [pid 5487] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5486] write(3, "1000", 4 [pid 5485] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5484] <... clone3 resumed> => {parent_tid=[5487]}, 88) = 5487 [pid 5058] <... rmdir resumed>) = 0 [pid 5487] <... rseq resumed>) = 0 [pid 5486] <... write resumed>) = 4 [pid 5484] rt_sigprocmask(SIG_SETMASK, [], [pid 5487] set_robust_list(0x7f91a50a79a0, 24 [pid 5486] close(3 [pid 5484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5487] <... set_robust_list resumed>) = 0 [pid 5486] <... close resumed>) = 0 [pid 5484] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5487] rt_sigprocmask(SIG_SETMASK, [], [pid 5486] symlink("/dev/binderfs", "./binderfs" [pid 5484] <... futex resumed>) = 0 [pid 5487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5486] <... symlink resumed>) = 0 [pid 5485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] mkdir("./25", 0777 [pid 5487] memfd_create("syzkaller", 0 [pid 5486] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5484] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] <... mkdir resumed>) = 0 [pid 5486] <... futex resumed>) = 0 [pid 5485] <... mmap resumed>) = 0x7f91a5087000 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5487] <... memfd_create resumed>) = 3 [pid 5486] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5485] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5058] <... openat resumed>) = 3 [pid 5487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5486] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5485] <... mprotect resumed>) = 0 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5487] <... mmap resumed>) = 0x7f919cc00000 [pid 5486] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5485] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5485] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5488 attached => {parent_tid=[5488]}, 88) = 5488 [pid 5488] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5485] rt_sigprocmask(SIG_SETMASK, [], [pid 5488] <... rseq resumed>) = 0 [pid 5485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5488] set_robust_list(0x7f91a50a79a0, 24 [pid 5486] <... mmap resumed>) = 0x7f91a5087000 [pid 5485] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] <... set_robust_list resumed>) = 0 [pid 5485] <... futex resumed>) = 0 [pid 5488] rt_sigprocmask(SIG_SETMASK, [], [pid 5485] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5488] memfd_create("syzkaller", 0 [pid 5486] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5488] <... memfd_create resumed>) = 3 [pid 5488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5486] <... mprotect resumed>) = 0 [pid 5486] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5489 attached [pid 5489] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5486] <... clone3 resumed> => {parent_tid=[5489]}, 88) = 5489 [pid 5486] rt_sigprocmask(SIG_SETMASK, [], [pid 5489] <... rseq resumed>) = 0 [pid 5489] set_robust_list(0x7f91a50a79a0, 24 [pid 5486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5489] <... set_robust_list resumed>) = 0 [pid 5486] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] rt_sigprocmask(SIG_SETMASK, [], [pid 5486] <... futex resumed>) = 0 [pid 5489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5486] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5489] memfd_create("syzkaller", 0) = 3 [pid 5489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5490 ./strace-static-x86_64: Process 5490 attached [pid 5490] set_robust_list(0x5555565206a0, 24) = 0 [pid 5490] chdir("./25") = 0 [pid 5490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5490] setpgid(0, 0) = 0 [pid 5490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5490] write(3, "1000", 4) = 4 [pid 5490] close(3) = 0 [pid 5490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5490] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5490] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5490] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5490] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5490] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5491 attached => {parent_tid=[5491]}, 88) = 5491 [pid 5491] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5490] rt_sigprocmask(SIG_SETMASK, [], [pid 5491] <... rseq resumed>) = 0 [pid 5490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5491] set_robust_list(0x7f91a50a79a0, 24 [pid 5490] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5491] <... set_robust_list resumed>) = 0 [pid 5490] <... futex resumed>) = 0 [pid 5491] rt_sigprocmask(SIG_SETMASK, [], [pid 5490] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5491] memfd_create("syzkaller", 0) = 3 [pid 5491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] <... ioctl resumed>) = 0 [pid 5489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5492 ./strace-static-x86_64: Process 5492 attached [pid 5492] set_robust_list(0x5555565206a0, 24) = 0 [pid 5492] chdir("./25") = 0 [pid 5492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5492] setpgid(0, 0) = 0 [pid 5492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5492] write(3, "1000", 4) = 4 [pid 5492] close(3) = 0 [pid 5492] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5492] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 76.162156][ T779] cfg80211: failed to load regulatory.db [pid 5492] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5492] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5493]}, 88) = 5493 [pid 5492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5492] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5492] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5493 attached [pid 5493] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5493] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5493] memfd_create("syzkaller", 0) = 3 [pid 5493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5482] <... write resumed>) = 16777216 [pid 5482] munmap(0x7f919cc00000, 138412032) = 0 [pid 5482] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5482] ioctl(4, LOOP_SET_FD, 3 [pid 5491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5482] <... ioctl resumed>) = 0 [pid 5482] close(3) = 0 [pid 5482] close(4 [pid 5487] <... write resumed>) = 16777216 [pid 5482] <... close resumed>) = 0 [pid 5487] munmap(0x7f919cc00000, 138412032 [ 76.413976][ T5482] loop4: detected capacity change from 0 to 32768 [pid 5482] mkdir("./file2", 0777 [pid 5487] <... munmap resumed>) = 0 [pid 5482] <... mkdir resumed>) = 0 [pid 5482] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5488] <... write resumed>) = 16777216 [pid 5488] munmap(0x7f919cc00000, 138412032 [pid 5487] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5487] ioctl(4, LOOP_SET_FD, 3 [pid 5482] <... mount resumed>) = 0 [pid 5487] <... ioctl resumed>) = 0 [pid 5482] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5487] close(3 [pid 5482] chdir("./file2" [pid 5487] <... close resumed>) = 0 [pid 5489] <... write resumed>) = 16777216 [pid 5488] <... munmap resumed>) = 0 [pid 5487] close(4 [pid 5482] <... chdir resumed>) = 0 [pid 5488] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5489] munmap(0x7f919cc00000, 138412032 [pid 5487] <... close resumed>) = 0 [pid 5482] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5487] mkdir("./file2", 0777 [pid 5482] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5488] <... openat resumed>) = 4 [pid 5488] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5487] <... mkdir resumed>) = 0 [pid 5482] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] close(3) = 0 [pid 5488] close(4) = 0 [pid 5488] mkdir("./file2", 0777 [pid 5487] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5482] <... futex resumed>) = 1 [pid 5481] <... futex resumed>) = 0 [ 76.486099][ T5487] loop3: detected capacity change from 0 to 32768 [ 76.522606][ T5488] loop1: detected capacity change from 0 to 32768 [pid 5489] <... munmap resumed>) = 0 [pid 5488] <... mkdir resumed>) = 0 [pid 5482] rename("./file2", "./file1" [pid 5481] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5481] <... futex resumed>) = 0 [pid 5489] <... openat resumed>) = 4 [pid 5481] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5489] ioctl(4, LOOP_SET_FD, 3 [pid 5488] mount("/dev/loop1", "./file2", "jfs", 0, "") = 0 [pid 5488] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5488] chdir("./file2") = 0 [pid 5488] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5488] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5488] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5485] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5485] <... futex resumed>) = 0 [pid 5488] rename("./file2", "./file1" [pid 5485] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5489] <... ioctl resumed>) = 0 [pid 5489] close(3) = 0 [pid 5489] close(4) = 0 [ 76.544202][ T5482] ERROR: (device loop4): diWrite: ixpxd invalid [ 76.544202][ T5482] [ 76.552978][ T5489] loop5: detected capacity change from 0 to 32768 [ 76.553174][ T5488] ERROR: (device loop1): diWrite: ixpxd invalid [ 76.553174][ T5488] [ 76.570119][ T5482] ERROR: (device loop4): remounting filesystem as read-only [ 76.588210][ T5482] ERROR: (device loop4): txAbort: [pid 5489] mkdir("./file2", 0777 [pid 5481] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5489] <... mkdir resumed>) = 0 [pid 5481] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5481] <... futex resumed>) = 0 [pid 5481] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5481] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5481] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5481] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5485] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5494 attached [pid 5485] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5481] <... clone3 resumed> => {parent_tid=[5494]}, 88) = 5494 [pid 5485] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5485] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5481] rt_sigprocmask(SIG_SETMASK, [], [pid 5485] <... futex resumed>) = 0 [pid 5481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5481] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5481] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5485] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5494] <... rseq resumed>) = 0 [pid 5487] <... mount resumed>) = 0 [pid 5485] <... mprotect resumed>) = 0 [pid 5482] <... rename resumed>) = -1 EIO (Input/output error) [pid 5494] set_robust_list(0x7f91a50869a0, 24 [pid 5487] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5485] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5482] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] <... set_robust_list resumed>) = 0 [pid 5487] <... openat resumed>) = 3 [pid 5485] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5482] <... futex resumed>) = 0 [pid 5494] rt_sigprocmask(SIG_SETMASK, [], [pid 5487] chdir("./file2" [pid 5485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5482] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5489] <... mount resumed>) = 0 [pid 5487] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5495 attached [pid 5494] mkdir(".", 0777 [pid 5489] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5487] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5485] <... clone3 resumed> => {parent_tid=[5495]}, 88) = 5495 [ 76.588210][ T5482] [pid 5495] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5494] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5489] <... openat resumed>) = 3 [pid 5485] rt_sigprocmask(SIG_SETMASK, [], [pid 5489] chdir("./file2" [pid 5485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5487] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5494] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5495] <... rseq resumed>) = 0 [pid 5495] set_robust_list(0x7f91a50869a0, 24 [pid 5489] <... chdir resumed>) = 0 [pid 5487] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5487] <... futex resumed>) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5495] <... set_robust_list resumed>) = 0 [pid 5489] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5485] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5495] rt_sigprocmask(SIG_SETMASK, [], [pid 5494] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5489] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5487] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5484] <... futex resumed>) = 0 [pid 5495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5494] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5491] <... write resumed>) = 16777216 [pid 5489] <... futex resumed>) = 1 [pid 5487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5486] <... futex resumed>) = 0 [pid 5484] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5495] mkdir(".", 0777 [pid 5494] <... futex resumed>) = 1 [pid 5491] munmap(0x7f919cc00000, 138412032 [pid 5489] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5487] rename("./file2", "./file1" [pid 5486] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] <... futex resumed>) = 0 [pid 5481] <... futex resumed>) = 0 [pid 5495] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5494] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5486] <... futex resumed>) = 0 [pid 5484] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5481] exit_group(0 [pid 5495] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5494] <... futex resumed>) = ? [pid 5486] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] <... futex resumed>) = ? [pid 5481] <... exit_group resumed>) = ? [pid 5494] +++ exited with 0 +++ [pid 5482] +++ exited with 0 +++ [pid 5495] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5495] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5491] <... munmap resumed>) = 0 [pid 5488] <... rename resumed>) = -1 EIO (Input/output error) [pid 5495] <... futex resumed>) = 1 [pid 5489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5485] <... futex resumed>) = 0 [pid 5481] +++ exited with 0 +++ [pid 5488] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 76.624463][ T5488] ERROR: (device loop1): remounting filesystem as read-only [ 76.642644][ T5488] ERROR: (device loop1): txAbort: [ 76.642644][ T5488] [ 76.654393][ T5488] ERROR: (device loop1): remounting filesystem as read-only [ 76.661175][ T5487] ERROR: (device loop3): diWrite: ixpxd invalid [ 76.661175][ T5487] [pid 5488] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5481, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5495] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5491] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5489] rename("./file2", "./file1" [pid 5485] exit_group(0) = ? [pid 5060] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5488] <... futex resumed>) = ? [pid 5488] +++ exited with 0 +++ [pid 5060] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5495] <... futex resumed>) = ? [pid 5060] <... openat resumed>) = 3 [pid 5491] <... openat resumed>) = 4 [pid 5060] newfstatat(3, "", [pid 5495] +++ exited with 0 +++ [pid 5485] +++ exited with 0 +++ [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5491] ioctl(4, LOOP_SET_FD, 3 [pid 5060] getdents64(3, [pid 5486] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5485, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=20 /* 0.20 s */} --- [pid 5060] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5486] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5491] <... ioctl resumed>) = 0 [pid 5486] <... futex resumed>) = 0 [pid 5484] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5491] close(3 [pid 5486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5484] <... futex resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5057] <... openat resumed>) = 3 [pid 5491] <... close resumed>) = 0 [pid 5487] <... rename resumed>) = -1 EIO (Input/output error) [pid 5486] <... mmap resumed>) = 0x7f91a5066000 [pid 5484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] newfstatat(3, "", [pid 5491] close(4 [pid 5489] <... rename resumed>) = -1 EIO (Input/output error) [pid 5487] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5484] <... mmap resumed>) = 0x7f91a5066000 [pid 5060] unlink("./23/binderfs" [pid 5491] <... close resumed>) = 0 [pid 5489] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5487] <... futex resumed>) = 0 [pid 5486] <... mprotect resumed>) = 0 [pid 5484] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... unlink resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5491] mkdir("./file2", 0777 [pid 5489] <... futex resumed>) = 0 [pid 5487] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5486] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5484] <... mprotect resumed>) = 0 [pid 5060] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] getdents64(3, [pid 5491] <... mkdir resumed>) = 0 [pid 5489] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5486] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5484] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5491] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5484] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5057] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5496 attached [pid 5484] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5486] <... clone3 resumed> => {parent_tid=[5496]}, 88) = 5496 [pid 5057] newfstatat(AT_FDCWD, "./24/binderfs", ./strace-static-x86_64: Process 5497 attached [pid 5496] <... rseq resumed>) = 0 [pid 5486] rt_sigprocmask(SIG_SETMASK, [], [pid 5484] <... clone3 resumed> => {parent_tid=[5497]}, 88) = 5497 [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5497] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5496] set_robust_list(0x7f91a50869a0, 24 [pid 5486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5484] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] unlink("./24/binderfs" [pid 5497] <... rseq resumed>) = 0 [pid 5496] <... set_robust_list resumed>) = 0 [pid 5491] <... mount resumed>) = 0 [pid 5486] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] <... unlink resumed>) = 0 [pid 5497] set_robust_list(0x7f91a50869a0, 24 [pid 5496] rt_sigprocmask(SIG_SETMASK, [], [pid 5491] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5486] <... futex resumed>) = 0 [pid 5484] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5497] <... set_robust_list resumed>) = 0 [pid 5496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5491] <... openat resumed>) = 3 [pid 5486] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5484] <... futex resumed>) = 0 [pid 5497] rt_sigprocmask(SIG_SETMASK, [], [pid 5496] mkdir(".", 0777 [pid 5491] chdir("./file2" [pid 5484] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5497] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5496] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5491] <... chdir resumed>) = 0 [pid 5497] mkdir(".", 0777 [pid 5496] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5491] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5057] <... umount2 resumed>) = 0 [pid 5497] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5496] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5491] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5057] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5497] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5496] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5491] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] <... futex resumed>) = 1 [pid 5491] <... futex resumed>) = 1 [pid 5490] <... futex resumed>) = 0 [ 76.670590][ T5487] ERROR: (device loop3): remounting filesystem as read-only [ 76.679239][ T5487] ERROR: (device loop3): txAbort: [ 76.679239][ T5487] [ 76.687994][ T5489] ERROR: (device loop5): diWrite: ixpxd invalid [ 76.687994][ T5489] [ 76.700473][ T5489] ERROR: (device loop5): remounting filesystem as read-only [ 76.708380][ T5491] loop0: detected capacity change from 0 to 32768 [ 76.715286][ T5489] ERROR: (device loop5): txAbort: [ 76.715286][ T5489] [pid 5486] <... futex resumed>) = 0 [pid 5057] newfstatat(AT_FDCWD, "./24/file2", [pid 5497] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5496] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5491] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] exit_group(0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5497] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5496] <... futex resumed>) = ? [pid 5491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5490] <... futex resumed>) = 0 [pid 5489] <... futex resumed>) = ? [pid 5486] <... exit_group resumed>) = ? [pid 5057] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5497] <... futex resumed>) = 1 [pid 5496] +++ exited with 0 +++ [pid 5491] rename("./file2", "./file1" [pid 5490] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5489] +++ exited with 0 +++ [pid 5486] +++ exited with 0 +++ [pid 5484] <... futex resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5484] exit_group(0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5486, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5057] openat(AT_FDCWD, "./24/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5487] <... futex resumed>) = ? [pid 5484] <... exit_group resumed>) = ? [pid 5057] <... openat resumed>) = 4 [pid 5487] +++ exited with 0 +++ [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4 [pid 5063] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] rmdir("./24/file2" [pid 5063] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5057] getdents64(3, [pid 5063] newfstatat(3, "", [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] close(3 [pid 5063] getdents64(3, [pid 5057] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] rmdir("./24" [pid 5063] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] mkdir("./25", 0777 [pid 5063] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5057] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] unlink("./24/binderfs" [pid 5057] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5493] <... write resumed>) = 16777216 [pid 5497] +++ exited with 0 +++ [pid 5484] +++ exited with 0 +++ [pid 5493] munmap(0x7f919cc00000, 138412032 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5484, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5493] <... munmap resumed>) = 0 [pid 5059] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./24/binderfs") = 0 [pid 5059] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5493] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5491] <... rename resumed>) = -1 EIO (Input/output error) [pid 5490] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5493] <... openat resumed>) = 4 [pid 5490] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] ioctl(4, LOOP_SET_FD, 3 [pid 5491] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [ 76.760862][ T5491] ERROR: (device loop0): diWrite: ixpxd invalid [ 76.760862][ T5491] [ 76.784669][ T5491] ERROR: (device loop0): remounting filesystem as read-only [ 76.795457][ T5491] ERROR: (device loop0): txAbort: [ 76.795457][ T5491] [pid 5490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5491] <... futex resumed>) = 0 [pid 5490] <... mmap resumed>) = 0x7f91a5066000 [pid 5063] <... umount2 resumed>) = 0 [pid 5490] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5063] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5490] <... mprotect resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5490] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] newfstatat(AT_FDCWD, "./24/file2", [pid 5490] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5063] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5490] <... clone3 resumed> => {parent_tid=[5498]}, 88) = 5498 [pid 5063] openat(AT_FDCWD, "./24/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5490] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... openat resumed>) = 4 [pid 5490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] newfstatat(4, "", [pid 5491] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5490] <... futex resumed>) = 0 [pid 5063] getdents64(4, [pid 5490] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./24/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./24"./strace-static-x86_64: Process 5498 attached ) = 0 [pid 5498] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5063] mkdir("./25", 0777 [pid 5498] <... rseq resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5498] set_robust_list(0x7f91a50869a0, 24 [pid 5493] <... ioctl resumed>) = 0 [pid 5493] close(3 [pid 5498] <... set_robust_list resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5498] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... openat resumed>) = 3 [pid 5498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5498] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5498] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5498] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5490] <... futex resumed>) = 0 [pid 5490] exit_group(0) = ? [pid 5491] <... futex resumed>) = ? [pid 5491] +++ exited with 0 +++ [pid 5493] <... close resumed>) = 0 [pid 5498] +++ exited with 0 +++ [pid 5490] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5490, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=14 /* 0.14 s */} --- [pid 5493] close(4 [pid 5056] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", [pid 5493] <... close resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5493] mkdir("./file2", 0777 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5493] <... mkdir resumed>) = 0 [pid 5056] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5493] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./25/binderfs") = 0 [pid 5056] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5056] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./25/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./25/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5493] <... mount resumed>) = 0 [pid 5056] getdents64(4, [pid 5493] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5493] <... openat resumed>) = 3 [pid 5493] chdir("./file2" [pid 5056] getdents64(4, [pid 5493] <... chdir resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5493] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] close(4 [pid 5493] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./25/file2") = 0 [ 76.813673][ T5493] loop2: detected capacity change from 0 to 32768 [pid 5493] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5492] <... futex resumed>) = 0 [pid 5056] getdents64(3, [pid 5493] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5492] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] close(3 [pid 5493] <... futex resumed>) = 0 [pid 5492] <... futex resumed>) = 1 [pid 5493] rename("./file2", "./file1" [pid 5492] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./25") = 0 [pid 5056] mkdir("./26", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5057] <... ioctl resumed>) = 0 [pid 5493] <... rename resumed>) = -1 EIO (Input/output error) [pid 5492] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5492] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5492] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5499]}, 88) = 5499 [pid 5492] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5492] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5492] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5500 ./strace-static-x86_64: Process 5500 attached [pid 5500] set_robust_list(0x5555565206a0, 24) = 0 ./strace-static-x86_64: Process 5499 attached [pid 5500] chdir("./25" [pid 5493] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] <... chdir resumed>) = 0 [pid 5500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5500] setpgid(0, 0) = 0 [pid 5500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5500] write(3, "1000", 4) = 4 [pid 5500] close(3) = 0 [pid 5500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5499] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5493] <... futex resumed>) = 0 [ 76.888460][ T5493] ERROR: (device loop2): diWrite: ixpxd invalid [ 76.888460][ T5493] [ 76.911470][ T5493] ERROR: (device loop2): remounting filesystem as read-only [ 76.931063][ T5493] ERROR: (device loop2): txAbort: [ 76.931063][ T5493] [pid 5500] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5499] <... rseq resumed>) = 0 [pid 5493] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5499] set_robust_list(0x7f91a50869a0, 24 [pid 5500] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5500] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5500] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5501]}, 88) = 5501 [pid 5500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5500] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5500] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5501 attached [pid 5501] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5499] <... set_robust_list resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5501] <... rseq resumed>) = 0 [pid 5063] close(3 [pid 5501] set_robust_list(0x7f91a50a79a0, 24 [pid 5063] <... close resumed>) = 0 [pid 5501] <... set_robust_list resumed>) = 0 [pid 5501] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5499] rt_sigprocmask(SIG_SETMASK, [], [pid 5501] memfd_create("syzkaller", 0) = 3 [pid 5501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 ./strace-static-x86_64: Process 5502 attached [pid 5502] set_robust_list(0x5555565206a0, 24) = 0 [pid 5502] chdir("./25") = 0 [pid 5502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5502 [pid 5502] <... prctl resumed>) = 0 [pid 5502] setpgid(0, 0 [pid 5499] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5502] <... setpgid resumed>) = 0 [pid 5499] mkdir(".", 0777 [pid 5502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5499] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5499] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5502] <... openat resumed>) = 3 [pid 5499] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5499] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5492] <... futex resumed>) = 0 [pid 5499] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5492] exit_group(0 [pid 5493] <... futex resumed>) = ? [pid 5499] <... futex resumed>) = ? [pid 5492] <... exit_group resumed>) = ? [pid 5493] +++ exited with 0 +++ [pid 5502] write(3, "1000", 4) = 4 [pid 5499] +++ exited with 0 +++ [pid 5502] close(3) = 0 [pid 5502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5492] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5492, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [pid 5058] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", [pid 5502] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5502] <... futex resumed>) = 0 [pid 5058] getdents64(3, [pid 5502] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5502] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5058] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5502] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5502] <... mmap resumed>) = 0x7f91a5087000 [pid 5058] unlink("./25/binderfs" [pid 5502] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5058] <... unlink resumed>) = 0 [pid 5058] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5502] <... mprotect resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5060] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./23/file2", [pid 5058] newfstatat(AT_FDCWD, "./25/file2", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./23/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] openat(AT_FDCWD, "./23/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5502] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... close resumed>) = 0 [pid 5058] openat(AT_FDCWD, "./25/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] rmdir("./23/file2") = 0 [pid 5058] <... openat resumed>) = 4 [pid 5060] getdents64(3, [pid 5058] newfstatat(4, "", [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] close(3 [pid 5058] getdents64(4, [pid 5502] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5060] rmdir("./23" [pid 5058] getdents64(4, [pid 5060] <... rmdir resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5502] <... clone3 resumed> => {parent_tid=[5503]}, 88) = 5503 [pid 5060] mkdir("./24", 0777 [pid 5058] close(4 [pid 5502] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... mkdir resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5503 attached ) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5502] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5503] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5058] rmdir("./25/file2" [pid 5503] <... rseq resumed>) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5503] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5502] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] getdents64(3, [pid 5503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./25" [pid 5503] memfd_create("syzkaller", 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5503] <... memfd_create resumed>) = 3 [pid 5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5058] mkdir("./26", 0777 [pid 5503] <... mmap resumed>) = 0x7f919cc00000 [pid 5058] <... mkdir resumed>) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./24/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./24/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./24/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./24") = 0 [pid 5059] mkdir("./25", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5504 ./strace-static-x86_64: Process 5504 attached [pid 5504] set_robust_list(0x5555565206a0, 24) = 0 [pid 5504] chdir("./26") = 0 [pid 5504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5504] setpgid(0, 0) = 0 [pid 5504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5504] write(3, "1000", 4) = 4 [pid 5504] close(3) = 0 [pid 5504] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5504] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5504] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5504] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5504] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5505 attached => {parent_tid=[5505]}, 88) = 5505 [pid 5504] rt_sigprocmask(SIG_SETMASK, [], [pid 5505] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5504] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5505] <... rseq resumed>) = 0 [pid 5504] <... futex resumed>) = 0 [pid 5505] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5504] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5505] memfd_create("syzkaller", 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5505] <... memfd_create resumed>) = 3 [pid 5505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5506 ./strace-static-x86_64: Process 5506 attached [pid 5506] set_robust_list(0x5555565206a0, 24) = 0 [pid 5506] chdir("./25") = 0 [pid 5506] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5506] setpgid(0, 0) = 0 [pid 5506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5506] write(3, "1000", 4) = 4 [pid 5506] close(3) = 0 [pid 5506] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... ioctl resumed>) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5058] close(3 [pid 5506] <... symlink resumed>) = 0 [pid 5506] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5506] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5058] <... close resumed>) = 0 [pid 5506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5506] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5507 attached [pid 5506] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5507 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5508 [pid 5507] set_robust_list(0x5555565206a0, 24) = 0 ./strace-static-x86_64: Process 5508 attached [pid 5507] chdir("./26" [pid 5508] set_robust_list(0x5555565206a0, 24) = 0 [pid 5508] chdir("./24" [pid 5507] <... chdir resumed>) = 0 [pid 5508] <... chdir resumed>) = 0 [pid 5507] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5508] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5507] <... prctl resumed>) = 0 [pid 5508] <... prctl resumed>) = 0 [pid 5507] setpgid(0, 0 [pid 5508] setpgid(0, 0 [pid 5507] <... setpgid resumed>) = 0 [pid 5508] <... setpgid resumed>) = 0 [pid 5508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5506] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5508] <... openat resumed>) = 3 [pid 5506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5508] write(3, "1000", 4 [pid 5507] <... openat resumed>) = 3 [pid 5508] <... write resumed>) = 4 [pid 5507] write(3, "1000", 4 [pid 5506] <... clone3 resumed> => {parent_tid=[5509]}, 88) = 5509 ./strace-static-x86_64: Process 5509 attached [pid 5508] close(3 [pid 5507] <... write resumed>) = 4 [pid 5506] rt_sigprocmask(SIG_SETMASK, [], [pid 5509] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5508] <... close resumed>) = 0 [pid 5507] close(3 [pid 5506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5509] <... rseq resumed>) = 0 [pid 5508] symlink("/dev/binderfs", "./binderfs" [pid 5507] <... close resumed>) = 0 [pid 5506] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] set_robust_list(0x7f91a50a79a0, 24 [pid 5508] <... symlink resumed>) = 0 [pid 5507] symlink("/dev/binderfs", "./binderfs" [pid 5506] <... futex resumed>) = 0 [pid 5509] <... set_robust_list resumed>) = 0 [pid 5508] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5507] <... symlink resumed>) = 0 [pid 5506] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5509] rt_sigprocmask(SIG_SETMASK, [], [pid 5507] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5507] <... futex resumed>) = 0 [pid 5508] <... futex resumed>) = 0 [pid 5508] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5508] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5509] memfd_create("syzkaller", 0 [pid 5508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5507] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5508] <... mmap resumed>) = 0x7f91a5087000 [pid 5508] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5510]}, 88) = 5510 [pid 5508] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5510 attached NULL, 8) = 0 [pid 5510] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5508] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] <... rseq resumed>) = 0 [pid 5508] <... futex resumed>) = 0 [pid 5510] set_robust_list(0x7f91a50a79a0, 24 [pid 5508] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5510] <... set_robust_list resumed>) = 0 [pid 5510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5510] memfd_create("syzkaller", 0) = 3 [pid 5510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5509] <... memfd_create resumed>) = 3 [pid 5507] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5507] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5510] <... mmap resumed>) = 0x7f919cc00000 [pid 5507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5507] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5507] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5507] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5507] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5511]}, 88) = 5511 [pid 5507] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5511 attached NULL, 8) = 0 [pid 5511] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5507] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] <... rseq resumed>) = 0 [pid 5511] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5511] rt_sigprocmask(SIG_SETMASK, [], [pid 5507] <... futex resumed>) = 0 [pid 5511] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5507] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5511] memfd_create("syzkaller", 0) = 3 [pid 5511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5501] <... write resumed>) = 16777216 [pid 5503] <... write resumed>) = 16777216 [pid 5503] munmap(0x7f919cc00000, 138412032 [pid 5501] munmap(0x7f919cc00000, 138412032) = 0 [pid 5503] <... munmap resumed>) = 0 [pid 5503] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5501] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5503] <... openat resumed>) = 4 [pid 5503] ioctl(4, LOOP_SET_FD, 3 [pid 5501] <... openat resumed>) = 4 [pid 5501] ioctl(4, LOOP_SET_FD, 3 [pid 5503] <... ioctl resumed>) = 0 [pid 5503] close(3) = 0 [pid 5503] close(4) = 0 [pid 5503] mkdir("./file2", 0777 [pid 5501] <... ioctl resumed>) = 0 [pid 5501] close(3 [pid 5503] <... mkdir resumed>) = 0 [pid 5501] <... close resumed>) = 0 [pid 5501] close(4) = 0 [pid 5501] mkdir("./file2", 0777 [pid 5503] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5501] <... mkdir resumed>) = 0 [pid 5503] <... mount resumed>) = 0 [pid 5503] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5501] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5503] chdir("./file2") = 0 [pid 5503] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5503] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 77.522638][ T5503] loop5: detected capacity change from 0 to 32768 [ 77.532966][ T5501] loop1: detected capacity change from 0 to 32768 [pid 5503] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5502] <... futex resumed>) = 0 [pid 5502] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5503] <... futex resumed>) = 0 [pid 5502] <... futex resumed>) = 1 [pid 5503] rename("./file2", "./file1" [pid 5502] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5501] <... mount resumed>) = 0 [pid 5501] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5501] chdir("./file2") = 0 [pid 5501] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5501] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5501] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5500] <... futex resumed>) = 0 [pid 5500] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 77.585997][ T5503] ERROR: (device loop5): diWrite: ixpxd invalid [ 77.585997][ T5503] [pid 5501] rename("./file2", "./file1" [pid 5500] <... futex resumed>) = 0 [pid 5500] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5502] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5502] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5502] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5502] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 77.629510][ T5501] ERROR: (device loop1): diWrite: ixpxd invalid [ 77.629510][ T5501] [ 77.641713][ T5503] ERROR: (device loop5): remounting filesystem as read-only [pid 5502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5502] <... clone3 resumed> => {parent_tid=[5512]}, 88) = 5512 [pid 5502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5502] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5512 attached ) = 0 [pid 5512] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5502] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5512] <... rseq resumed>) = 0 [pid 5512] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5512] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5512] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5512] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5502] <... futex resumed>) = 0 [pid 5512] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5503] <... rename resumed>) = -1 EIO (Input/output error) [pid 5500] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5500] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5500] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5503] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5502] exit_group(0) = ? [ 77.671325][ T5503] ERROR: (device loop5): txAbort: [ 77.671325][ T5503] [ 77.673806][ T5501] ERROR: (device loop1): remounting filesystem as read-only [ 77.678622][ T5503] ERROR: (device loop5): remounting filesystem as read-only [pid 5500] <... clone3 resumed> => {parent_tid=[5513]}, 88) = 5513 [pid 5503] <... futex resumed>) = ? [pid 5512] <... futex resumed>) = ? [pid 5512] +++ exited with 0 +++ ./strace-static-x86_64: Process 5513 attached [pid 5513] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5513] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5513] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5503] +++ exited with 0 +++ [pid 5502] +++ exited with 0 +++ [pid 5500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5500] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5513] <... futex resumed>) = 0 [pid 5500] <... futex resumed>) = 1 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5502, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [pid 5500] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5513] mkdir(".", 0777 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5513] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5063] <... restart_syscall resumed>) = 0 [pid 5513] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5513] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5513] <... futex resumed>) = 1 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5513] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./25/binderfs") = 0 [pid 5063] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./25/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./25/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./25/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./25") = 0 [pid 5063] mkdir("./26", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [ 77.726629][ T5501] ERROR: (device loop1): txAbort: [ 77.726629][ T5501] [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5501] <... rename resumed>) = -1 EIO (Input/output error) [pid 5501] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5500] exit_group(0) = ? [pid 5513] <... futex resumed>) = ? [pid 5513] +++ exited with 0 +++ [pid 5501] +++ exited with 0 +++ [pid 5500] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5500, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=18 /* 0.18 s */} --- [pid 5057] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./25/binderfs") = 0 [ 77.771266][ T5501] ERROR: (device loop1): remounting filesystem as read-only [pid 5057] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5057] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./25/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./25/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./25/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./25") = 0 [pid 5057] mkdir("./26", 0777 [pid 5505] <... write resumed>) = 16777216 [pid 5505] munmap(0x7f919cc00000, 138412032 [pid 5509] <... write resumed>) = 16777216 [pid 5057] <... mkdir resumed>) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5509] munmap(0x7f919cc00000, 138412032 [pid 5511] <... write resumed>) = 16777216 [pid 5509] <... munmap resumed>) = 0 [pid 5505] <... munmap resumed>) = 0 [pid 5505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5511] munmap(0x7f919cc00000, 138412032 [pid 5510] <... write resumed>) = 16777216 [pid 5509] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5505] ioctl(4, LOOP_SET_FD, 3 [pid 5511] <... munmap resumed>) = 0 [pid 5510] munmap(0x7f919cc00000, 138412032 [pid 5509] <... openat resumed>) = 4 [pid 5505] <... ioctl resumed>) = 0 [pid 5509] ioctl(4, LOOP_SET_FD, 3 [pid 5510] <... munmap resumed>) = 0 [pid 5505] close(3) = 0 [pid 5505] close(4 [pid 5511] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5509] <... ioctl resumed>) = 0 [pid 5511] <... openat resumed>) = 4 [pid 5510] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5509] close(3 [pid 5505] <... close resumed>) = 0 [pid 5511] ioctl(4, LOOP_SET_FD, 3 [pid 5510] <... openat resumed>) = 4 [pid 5509] <... close resumed>) = 0 [pid 5505] mkdir("./file2", 0777 [pid 5510] ioctl(4, LOOP_SET_FD, 3 [pid 5509] close(4 [pid 5505] <... mkdir resumed>) = 0 [pid 5505] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5509] <... close resumed>) = 0 [ 77.954151][ T5505] loop0: detected capacity change from 0 to 32768 [ 77.961905][ T5509] loop3: detected capacity change from 0 to 32768 [ 77.990202][ T5510] loop4: detected capacity change from 0 to 32768 [ 77.991021][ T5511] loop2: detected capacity change from 0 to 32768 [pid 5509] mkdir("./file2", 0777) = 0 [pid 5505] <... mount resumed>) = 0 [pid 5505] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5505] chdir("./file2") = 0 [pid 5505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5505] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5504] <... futex resumed>) = 0 [pid 5505] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5504] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5504] <... futex resumed>) = 0 [pid 5505] rename("./file2", "./file1" [pid 5504] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5511] <... ioctl resumed>) = 0 [pid 5509] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5063] <... ioctl resumed>) = 0 [pid 5511] close(3 [pid 5063] close(3 [pid 5511] <... close resumed>) = 0 [pid 5511] close(4 [pid 5063] <... close resumed>) = 0 [pid 5511] <... close resumed>) = 0 [pid 5510] <... ioctl resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5510] close(3) = 0 [pid 5510] close(4) = 0 [pid 5510] mkdir("./file2", 0777./strace-static-x86_64: Process 5514 attached [pid 5511] mkdir("./file2", 0777 [pid 5510] <... mkdir resumed>) = 0 [pid 5514] set_robust_list(0x5555565206a0, 24) = 0 [pid 5511] <... mkdir resumed>) = 0 [pid 5510] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5514 [pid 5514] chdir("./26" [pid 5511] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5514] <... chdir resumed>) = 0 [pid 5510] <... mount resumed>) = 0 [pid 5514] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5510] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5514] <... prctl resumed>) = 0 [pid 5510] <... openat resumed>) = 3 [pid 5509] <... mount resumed>) = 0 [pid 5510] chdir("./file2" [pid 5514] setpgid(0, 0 [pid 5510] <... chdir resumed>) = 0 [pid 5509] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5510] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5510] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] <... setpgid resumed>) = 0 [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... openat resumed>) = 3 [pid 5508] <... futex resumed>) = 0 [pid 5508] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5510] <... futex resumed>) = 1 [pid 5509] chdir("./file2" [ 78.004704][ T5505] ERROR: (device loop0): diWrite: ixpxd invalid [ 78.004704][ T5505] [ 78.024035][ T5505] ERROR: (device loop0): remounting filesystem as read-only [pid 5510] rename("./file2", "./file1" [pid 5514] <... openat resumed>) = 3 [pid 5509] <... chdir resumed>) = 0 [pid 5504] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5504] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5509] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5514] write(3, "1000", 4) = 4 [pid 5509] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5504] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5509] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5504] <... mprotect resumed>) = 0 [pid 5504] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5509] <... futex resumed>) = 1 [pid 5509] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5506] <... futex resumed>) = 0 [pid 5504] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5514] close(3 [pid 5511] <... mount resumed>) = 0 [pid 5509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5506] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5514] <... close resumed>) = 0 [pid 5511] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5509] rename("./file2", "./file1" [pid 5506] <... futex resumed>) = 0 [pid 5506] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5504] <... clone3 resumed> => {parent_tid=[5515]}, 88) = 5515 [pid 5504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5504] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5504] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5505] <... rename resumed>) = -1 EIO (Input/output error) [pid 5505] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 78.052620][ T5510] ERROR: (device loop4): diWrite: ixpxd invalid [ 78.052620][ T5510] [ 78.062268][ T5505] ERROR: (device loop0): txAbort: [ 78.062268][ T5505] [ 78.082937][ T5509] ERROR: (device loop3): diWrite: ixpxd invalid [ 78.082937][ T5509] [ 78.091989][ T5510] ERROR: (device loop4): remounting filesystem as read-only [ 78.099273][ T5510] ERROR: (device loop4): txAbort: [pid 5505] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5515 attached [pid 5514] symlink("/dev/binderfs", "./binderfs" [pid 5511] <... openat resumed>) = 3 [pid 5508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5508] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5508] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5508] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5515] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5514] <... symlink resumed>) = 0 [pid 5511] chdir("./file2" [pid 5508] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5514] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] <... chdir resumed>) = 0 [pid 5515] <... rseq resumed>) = 0 [pid 5508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5516]}, 88) = 5516 [pid 5508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5508] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5508] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5516 attached [pid 5515] set_robust_list(0x7f91a50869a0, 24 [pid 5514] <... futex resumed>) = 0 [pid 5511] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5516] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5515] <... set_robust_list resumed>) = 0 [pid 5516] <... rseq resumed>) = 0 [pid 5516] set_robust_list(0x7f91a50869a0, 24 [pid 5515] rt_sigprocmask(SIG_SETMASK, [], [pid 5514] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5511] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5516] <... set_robust_list resumed>) = 0 [pid 5515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5516] rt_sigprocmask(SIG_SETMASK, [], [pid 5515] mkdir(".", 0777 [pid 5514] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5511] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5516] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5515] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5514] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5511] <... futex resumed>) = 1 [pid 5516] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5515] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5514] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5511] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5516] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5507] <... futex resumed>) = 0 [pid 5516] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5516] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] <... mmap resumed>) = 0x7f91a5087000 [pid 5516] <... futex resumed>) = 1 [pid 5515] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5514] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5508] <... futex resumed>) = 0 [pid 5507] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5516] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5515] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] <... mprotect resumed>) = 0 [pid 5511] <... futex resumed>) = 0 [pid 5507] <... futex resumed>) = 1 [pid 5506] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5506] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] rename("./file2", "./file1" [pid 5507] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5506] <... futex resumed>) = 0 [pid 5514] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5506] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5517]}, 88) = 5517 [pid 5506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5506] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5506] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5517 attached [pid 5517] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5517] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5517] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5517] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5510] <... rename resumed>) = -1 EIO (Input/output error) [pid 5514] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5057] close(3./strace-static-x86_64: Process 5518 attached [pid 5515] <... futex resumed>) = 1 [pid 5504] <... futex resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5518] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5515] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] <... clone3 resumed> => {parent_tid=[5518]}, 88) = 5518 [pid 5504] exit_group(0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5518] <... rseq resumed>) = 0 [pid 5515] <... futex resumed>) = ? [pid 5514] rt_sigprocmask(SIG_SETMASK, [], [pid 5505] <... futex resumed>) = ? [pid 5504] <... exit_group resumed>) = ? [ 78.099273][ T5510] [ 78.106657][ T5509] ERROR: (device loop3): remounting filesystem as read-only [ 78.126693][ T5510] ERROR: (device loop4): remounting filesystem as read-only [ 78.136148][ T5511] ERROR: (device loop2): diWrite: ixpxd invalid [ 78.136148][ T5511] [ 78.144170][ T5509] ERROR: (device loop3): txAbort: [ 78.144170][ T5509] [pid 5518] set_robust_list(0x7f91a50a79a0, 24 [pid 5515] +++ exited with 0 +++ [pid 5514] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5505] +++ exited with 0 +++ [pid 5504] +++ exited with 0 +++ [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5519 ./strace-static-x86_64: Process 5519 attached [pid 5519] set_robust_list(0x5555565206a0, 24) = 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5504, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5519] chdir("./26" [pid 5056] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5519] <... chdir resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5056] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5519] <... prctl resumed>) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5519] setpgid(0, 0 [pid 5056] newfstatat(3, "", [pid 5519] <... setpgid resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5518] <... set_robust_list resumed>) = 0 [pid 5514] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] getdents64(3, [pid 5519] <... openat resumed>) = 3 [pid 5518] rt_sigprocmask(SIG_SETMASK, [], [pid 5514] <... futex resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5519] write(3, "1000", 4 [pid 5518] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5514] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5519] <... write resumed>) = 4 [pid 5510] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5519] close(3 [pid 5510] <... futex resumed>) = 0 [pid 5508] exit_group(0 [pid 5056] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5519] <... close resumed>) = 0 [pid 5516] <... futex resumed>) = ? [pid 5508] <... exit_group resumed>) = ? [pid 5519] symlink("/dev/binderfs", "./binderfs" [pid 5516] +++ exited with 0 +++ [pid 5510] +++ exited with 0 +++ [pid 5508] +++ exited with 0 +++ [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5519] <... symlink resumed>) = 0 [pid 5519] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] unlink("./26/binderfs" [pid 5519] <... futex resumed>) = 0 [pid 5519] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5056] <... unlink resumed>) = 0 [pid 5519] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5056] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5519] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5508, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5518] memfd_create("syzkaller", 0 [pid 5519] <... mmap resumed>) = 0x7f91a5087000 [pid 5519] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5519] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5519] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5520 attached [pid 5520] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5519] <... clone3 resumed> => {parent_tid=[5520]}, 88) = 5520 [pid 5509] <... rename resumed>) = -1 EIO (Input/output error) [pid 5520] <... rseq resumed>) = 0 [pid 5519] rt_sigprocmask(SIG_SETMASK, [], [pid 5509] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] set_robust_list(0x7f91a50a79a0, 24 [pid 5519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5509] <... futex resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5520] <... set_robust_list resumed>) = 0 [pid 5519] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... openat resumed>) = 3 [pid 5520] rt_sigprocmask(SIG_SETMASK, [], [pid 5519] <... futex resumed>) = 0 [pid 5518] <... memfd_create resumed>) = 3 [pid 5517] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5511] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] newfstatat(3, "", [pid 5056] <... umount2 resumed>) = 0 [pid 5519] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5518] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5517] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5517] <... futex resumed>) = 1 [pid 5506] <... futex resumed>) = 0 [pid 5517] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5506] exit_group(0 [pid 5060] getdents64(3, [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5518] <... mmap resumed>) = 0x7f919cc00000 [pid 5517] <... futex resumed>) = ? [pid 5506] <... exit_group resumed>) = ? [pid 5517] +++ exited with 0 +++ [pid 5509] <... futex resumed>) = ? [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] newfstatat(AT_FDCWD, "./26/file2", [pid 5509] +++ exited with 0 +++ [pid 5506] +++ exited with 0 +++ [pid 5060] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5520] memfd_create("syzkaller", 0 [pid 5060] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5506, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5520] <... memfd_create resumed>) = 3 [pid 5059] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] unlink("./24/binderfs" [pid 5520] <... mmap resumed>) = 0x7f919cc00000 [pid 5059] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5511] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5507] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] <... unlink resumed>) = 0 [pid 5056] openat(AT_FDCWD, "./26/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5507] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5507] <... futex resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5056] <... openat resumed>) = 4 [pid 5056] newfstatat(4, "", [pid 5507] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] newfstatat(3, "", [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5511] <... futex resumed>) = 1 [pid 5507] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5507] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=49000000} [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./25/binderfs") = 0 [pid 5059] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5511] mkdir(".", 0777 [pid 5060] <... umount2 resumed>) = 0 [pid 5056] getdents64(4, [pid 5060] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] newfstatat(AT_FDCWD, "./24/file2", [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./24/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... close resumed>) = 0 [pid 5511] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5511] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] rmdir("./26/file2") = 0 [pid 5060] openat(AT_FDCWD, "./24/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] getdents64(3, [pid 5060] <... openat resumed>) = 4 [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... close resumed>) = 0 [ 78.158839][ T5511] ERROR: (device loop2): remounting filesystem as read-only [ 78.168227][ T5511] ERROR: (device loop2): txAbort: [ 78.168227][ T5511] [pid 5511] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(4, [pid 5056] rmdir("./26" [pid 5511] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5507] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5507] exit_group(0) = ? [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5511] +++ exited with 0 +++ [pid 5507] +++ exited with 0 +++ [pid 5060] rmdir("./24/file2" [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5507, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=19 /* 0.19 s */} --- [pid 5060] <... rmdir resumed>) = 0 [pid 5058] restart_syscall(<... resuming interrupted clone ...> [pid 5056] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, [pid 5058] <... restart_syscall resumed>) = 0 [pid 5056] mkdir("./27", 0777 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] close(3 [pid 5058] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./24" [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = 0 [pid 5058] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... openat resumed>) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 5058] <... openat resumed>) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5060] mkdir("./25", 0777 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5058] getdents64(3, [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5058] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./25/file2", [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5059] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] unlink("./26/binderfs" [pid 5059] openat(AT_FDCWD, "./25/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] <... unlink resumed>) = 0 [pid 5059] newfstatat(4, "", [pid 5058] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./25/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./25") = 0 [pid 5059] mkdir("./26", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./26/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./26/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] rmdir("./26/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./26") = 0 [pid 5058] mkdir("./27", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5518] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... ioctl resumed>) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] close(3) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5521 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5522 ./strace-static-x86_64: Process 5522 attached [pid 5522] set_robust_list(0x5555565206a0, 24) = 0 ./strace-static-x86_64: Process 5521 attached [pid 5522] chdir("./27") = 0 [pid 5521] set_robust_list(0x5555565206a0, 24 [pid 5522] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5521] <... set_robust_list resumed>) = 0 [pid 5522] <... prctl resumed>) = 0 [pid 5522] setpgid(0, 0 [pid 5521] chdir("./26" [pid 5522] <... setpgid resumed>) = 0 [pid 5521] <... chdir resumed>) = 0 [pid 5522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5521] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5522] <... openat resumed>) = 3 [pid 5521] <... prctl resumed>) = 0 [pid 5521] setpgid(0, 0) = 0 [pid 5522] write(3, "1000", 4 [pid 5521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5521] write(3, "1000", 4) = 4 [pid 5521] close(3) = 0 [pid 5521] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5522] <... write resumed>) = 4 [pid 5522] close(3) = 0 [pid 5522] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5521] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5521] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5521] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5521] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5522] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5522] <... futex resumed>) = 0 [pid 5521] <... clone3 resumed> => {parent_tid=[5523]}, 88) = 5523 [pid 5522] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5521] rt_sigprocmask(SIG_SETMASK, [], [pid 5522] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5521] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5522] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5521] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5521] <... futex resumed>) = 0 [pid 5522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5521] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5522] <... mmap resumed>) = 0x7f91a5087000 [pid 5522] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5522] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5524]}, 88) = 5524 [pid 5522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5522] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5522] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5524 attached [pid 5524] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5524] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5524] memfd_create("syzkaller", 0) = 3 [pid 5524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 ./strace-static-x86_64: Process 5523 attached [pid 5523] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5523] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5523] memfd_create("syzkaller", 0) = 3 [pid 5523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5525 ./strace-static-x86_64: Process 5525 attached [pid 5525] set_robust_list(0x5555565206a0, 24) = 0 [pid 5525] chdir("./25") = 0 [pid 5525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5525] setpgid(0, 0) = 0 [pid 5525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5525] write(3, "1000", 4) = 4 [pid 5525] close(3) = 0 [pid 5525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5525] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5525] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5525] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5526]}, 88) = 5526 [pid 5525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5525] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5526 attached ) = 0 [pid 5520] <... write resumed>) = 16777216 [pid 5526] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5525] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5526] <... rseq resumed>) = 0 [pid 5526] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5526] memfd_create("syzkaller", 0) = 3 [pid 5526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5520] munmap(0x7f919cc00000, 138412032) = 0 [pid 5520] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5520] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5520] close(3) = 0 [pid 5520] close(4) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5520] mkdir("./file2", 0777) = 0 [pid 5520] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5527 attached , child_tidptr=0x555556520690) = 5527 [pid 5527] set_robust_list(0x5555565206a0, 24) = 0 [ 78.682038][ T5520] loop1: detected capacity change from 0 to 32768 [pid 5527] chdir("./27") = 0 [pid 5527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5527] setpgid(0, 0 [pid 5520] <... mount resumed>) = 0 [pid 5527] <... setpgid resumed>) = 0 [pid 5520] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5520] <... openat resumed>) = 3 [pid 5520] chdir("./file2") = 0 [pid 5527] <... openat resumed>) = 3 [pid 5520] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5527] write(3, "1000", 4 [pid 5520] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5527] <... write resumed>) = 4 [pid 5520] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] close(3 [pid 5520] <... futex resumed>) = 1 [pid 5519] <... futex resumed>) = 0 [pid 5527] <... close resumed>) = 0 [pid 5527] symlink("/dev/binderfs", "./binderfs" [pid 5520] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5519] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5519] <... futex resumed>) = 0 [pid 5520] rename("./file2", "./file1" [pid 5519] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5527] <... symlink resumed>) = 0 [pid 5527] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5518] <... write resumed>) = 16777216 [pid 5527] <... futex resumed>) = 0 [pid 5527] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5518] munmap(0x7f919cc00000, 138412032 [pid 5527] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5519] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5519] <... futex resumed>) = 0 [pid 5519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5519] <... mmap resumed>) = 0x7f91a5066000 [pid 5519] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5519] <... mprotect resumed>) = 0 [pid 5519] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5528]}, 88) = 5528 [pid 5519] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5519] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] <... mmap resumed>) = 0x7f91a5087000 [pid 5519] <... futex resumed>) = 0 [pid 5527] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5519] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5527] <... mprotect resumed>) = 0 [ 78.761178][ T5520] ERROR: (device loop1): diWrite: ixpxd invalid [ 78.761178][ T5520] [ 78.796138][ T5520] ERROR: (device loop1): remounting filesystem as read-only ./strace-static-x86_64: Process 5528 attached [pid 5527] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5518] <... munmap resumed>) = 0 [pid 5527] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5528] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5529 attached [pid 5528] <... rseq resumed>) = 0 [pid 5518] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5527] <... clone3 resumed> => {parent_tid=[5529]}, 88) = 5529 [pid 5527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5529] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5528] set_robust_list(0x7f91a50869a0, 24 [pid 5527] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5518] <... openat resumed>) = 4 [pid 5529] <... rseq resumed>) = 0 [pid 5528] <... set_robust_list resumed>) = 0 [pid 5527] <... futex resumed>) = 0 [pid 5527] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5528] rt_sigprocmask(SIG_SETMASK, [], [pid 5529] set_robust_list(0x7f91a50a79a0, 24 [pid 5518] ioctl(4, LOOP_SET_FD, 3 [pid 5528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5528] mkdir(".", 0777 [pid 5529] <... set_robust_list resumed>) = 0 [pid 5520] <... rename resumed>) = -1 EIO (Input/output error) [pid 5529] rt_sigprocmask(SIG_SETMASK, [], [pid 5520] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5520] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5528] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5528] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5529] memfd_create("syzkaller", 0 [pid 5528] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5529] <... memfd_create resumed>) = 3 [pid 5528] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5519] <... futex resumed>) = 0 [pid 5528] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5519] exit_group(0 [pid 5529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5528] <... futex resumed>) = ? [pid 5520] <... futex resumed>) = ? [pid 5519] <... exit_group resumed>) = ? [pid 5529] <... mmap resumed>) = 0x7f919cc00000 [pid 5528] +++ exited with 0 +++ [pid 5520] +++ exited with 0 +++ [pid 5519] +++ exited with 0 +++ [pid 5518] <... ioctl resumed>) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5519, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=13 /* 0.13 s */} --- [pid 5057] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./26/binderfs") = 0 [pid 5057] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5518] close(3) = 0 [pid 5518] close(4) = 0 [ 78.822017][ T5520] ERROR: (device loop1): txAbort: [ 78.822017][ T5520] [ 78.834747][ T5518] loop5: detected capacity change from 0 to 32768 [pid 5518] mkdir("./file2", 0777) = 0 [pid 5518] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5518] <... mount resumed>) = 0 [pid 5518] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5518] chdir("./file2") = 0 [pid 5518] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5518] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5518] rename("./file2", "./file1" [pid 5514] <... futex resumed>) = 0 [pid 5514] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 78.953073][ T5518] ERROR: (device loop5): diWrite: ixpxd invalid [ 78.953073][ T5518] [ 78.986415][ T5518] ERROR: (device loop5): remounting filesystem as read-only [pid 5523] <... write resumed>) = 16777216 [pid 5518] <... rename resumed>) = -1 EIO (Input/output error) [pid 5514] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5523] munmap(0x7f919cc00000, 138412032 [pid 5514] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5530]}, 88) = 5530 ./strace-static-x86_64: Process 5530 attached [pid 5530] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5530] set_robust_list(0x7f91a50869a0, 24 [pid 5529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5523] <... munmap resumed>) = 0 [pid 5518] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5514] rt_sigprocmask(SIG_SETMASK, [], [pid 5530] <... set_robust_list resumed>) = 0 [pid 5518] <... futex resumed>) = 0 [pid 5514] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5530] rt_sigprocmask(SIG_SETMASK, [], [pid 5518] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5514] <... futex resumed>) = 0 [pid 5530] mkdir(".", 0777 [pid 5514] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5530] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5530] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5523] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5530] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5523] <... openat resumed>) = 4 [ 79.011062][ T5518] ERROR: (device loop5): txAbort: [ 79.011062][ T5518] [pid 5530] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5523] ioctl(4, LOOP_SET_FD, 3 [pid 5530] <... futex resumed>) = 1 [pid 5514] <... futex resumed>) = 0 [pid 5530] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5514] exit_group(0 [pid 5530] <... futex resumed>) = ? [pid 5518] <... futex resumed>) = ? [pid 5514] <... exit_group resumed>) = ? [pid 5518] +++ exited with 0 +++ [pid 5523] <... ioctl resumed>) = 0 [pid 5530] +++ exited with 0 +++ [pid 5524] <... write resumed>) = 16777216 [pid 5514] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5514, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5063] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5524] munmap(0x7f919cc00000, 138412032 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5523] close(3 [pid 5063] getdents64(3, [pid 5523] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5523] close(4 [pid 5063] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5523] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5523] mkdir("./file2", 0777 [pid 5063] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5523] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5523] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5063] unlink("./26/binderfs") = 0 [pid 5063] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5523] <... mount resumed>) = 0 [pid 5523] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5523] chdir("./file2") = 0 [pid 5523] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5523] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5521] <... futex resumed>) = 0 [ 79.058116][ T5523] loop3: detected capacity change from 0 to 32768 [pid 5523] rename("./file2", "./file1" [pid 5521] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] <... munmap resumed>) = 0 [pid 5521] <... futex resumed>) = 0 [pid 5524] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5521] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... umount2 resumed>) = 0 [pid 5524] <... openat resumed>) = 4 [pid 5057] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5524] ioctl(4, LOOP_SET_FD, 3 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./26/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./26/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4 [pid 5526] <... write resumed>) = 16777216 [pid 5524] <... ioctl resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5057] rmdir("./26/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./26") = 0 [pid 5057] mkdir("./27", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5526] munmap(0x7f919cc00000, 138412032 [pid 5524] close(3 [pid 5523] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] <... openat resumed>) = 3 [pid 5524] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5523] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5524] close(4 [pid 5063] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5524] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./26/file2", [pid 5524] mkdir("./file2", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5524] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./26/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 5523] <... futex resumed>) = 1 [pid 5521] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5524] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5523] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5521] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(4, [pid 5523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5521] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5523] mkdir(".", 0777 [pid 5521] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] getdents64(4, [pid 5523] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./26/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./26") = 0 [pid 5063] mkdir("./27", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5523] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5526] <... munmap resumed>) = 0 [pid 5523] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5523] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5521] <... futex resumed>) = 0 [pid 5524] <... mount resumed>) = 0 [pid 5521] exit_group(0) = ? [pid 5524] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5524] chdir("./file2") = 0 [pid 5524] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5524] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5524] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5522] <... futex resumed>) = 0 [pid 5522] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5524] <... futex resumed>) = 0 [pid 5522] <... futex resumed>) = 1 [ 79.118489][ T5523] ERROR: (device loop3): diWrite: ixpxd invalid [ 79.118489][ T5523] [ 79.129861][ T5523] ERROR: (device loop3): remounting filesystem as read-only [ 79.141803][ T5524] loop0: detected capacity change from 0 to 32768 [ 79.153408][ T5523] ERROR: (device loop3): txAbort: [ 79.153408][ T5523] [pid 5524] rename("./file2", "./file1" [pid 5522] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5523] +++ exited with 0 +++ [pid 5521] +++ exited with 0 +++ [pid 5526] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5521, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5526] <... openat resumed>) = 4 [pid 5526] ioctl(4, LOOP_SET_FD, 3 [pid 5059] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 79.192406][ T5524] ERROR: (device loop0): diWrite: ixpxd invalid [ 79.192406][ T5524] [ 79.211816][ T5526] loop4: detected capacity change from 0 to 32768 [ 79.214631][ T5524] ERROR: (device loop0): remounting filesystem as read-only [pid 5526] <... ioctl resumed>) = 0 [pid 5522] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5059] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5526] close(3 [pid 5522] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... openat resumed>) = 3 [pid 5522] <... futex resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 5526] <... close resumed>) = 0 [pid 5522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5526] close(4 [pid 5522] <... mmap resumed>) = 0x7f91a5066000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5522] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5526] <... close resumed>) = 0 [pid 5526] mkdir("./file2", 0777 [pid 5522] <... mprotect resumed>) = 0 [pid 5524] <... rename resumed>) = -1 EIO (Input/output error) [pid 5526] <... mkdir resumed>) = 0 [pid 5522] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] getdents64(3, [pid 5526] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5522] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5524] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5526] <... mount resumed>) = 0 [pid 5524] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5531 attached [pid 5526] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5059] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5531] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5526] <... openat resumed>) = 3 [pid 5522] <... clone3 resumed> => {parent_tid=[5531]}, 88) = 5531 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5531] <... rseq resumed>) = 0 [pid 5526] chdir("./file2" [pid 5522] rt_sigprocmask(SIG_SETMASK, [], [ 79.247291][ T5524] ERROR: (device loop0): txAbort: [ 79.247291][ T5524] [pid 5059] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5531] set_robust_list(0x7f91a50869a0, 24 [pid 5526] <... chdir resumed>) = 0 [pid 5522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5531] <... set_robust_list resumed>) = 0 [pid 5526] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5522] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] unlink("./26/binderfs" [pid 5531] rt_sigprocmask(SIG_SETMASK, [], [pid 5526] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5522] <... futex resumed>) = 0 [pid 5522] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5531] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5526] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5531] mkdir(".", 0777 [pid 5526] <... futex resumed>) = 1 [pid 5525] <... futex resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5531] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5526] rename("./file2", "./file1" [pid 5525] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5531] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5525] <... futex resumed>) = 0 [pid 5525] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5531] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5531] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5522] <... futex resumed>) = 0 [pid 5522] exit_group(0 [pid 5524] <... futex resumed>) = ? [pid 5522] <... exit_group resumed>) = ? [pid 5524] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = 0 [pid 5531] +++ exited with 0 +++ [pid 5522] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5522, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- [pid 5056] restart_syscall(<... resuming interrupted clone ...> [pid 5529] <... write resumed>) = 16777216 [pid 5059] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... restart_syscall resumed>) = 0 [pid 5529] munmap(0x7f919cc00000, 138412032 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5529] <... munmap resumed>) = 0 [pid 5526] <... rename resumed>) = -1 EIO (Input/output error) [pid 5059] newfstatat(AT_FDCWD, "./26/file2", [pid 5529] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5526] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5526] <... futex resumed>) = 1 [pid 5525] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5526] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5525] <... futex resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./26/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5525] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... openat resumed>) = 3 [pid 5526] mkdir(".", 0777 [pid 5059] <... openat resumed>) = 4 [pid 5526] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5059] newfstatat(4, "", [pid 5526] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5056] newfstatat(3, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5529] <... openat resumed>) = 4 [pid 5059] getdents64(4, [pid 5529] ioctl(4, LOOP_SET_FD, 3 [pid 5526] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 79.323748][ T5526] ERROR: (device loop4): diWrite: ixpxd invalid [ 79.323748][ T5526] [ 79.344470][ T5526] ERROR: (device loop4): remounting filesystem as read-only [ 79.354501][ T5526] ERROR: (device loop4): txAbort: [ 79.354501][ T5526] [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5526] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] getdents64(4, [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5526] <... futex resumed>) = 1 [pid 5525] <... futex resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5526] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] exit_group(0 [pid 5059] close(4 [pid 5056] getdents64(3, [pid 5526] <... futex resumed>) = ? [pid 5525] <... exit_group resumed>) = ? [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./26/file2" [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5529] <... ioctl resumed>) = 0 [pid 5529] close(3) = 0 [pid 5529] close(4 [pid 5526] +++ exited with 0 +++ [pid 5525] +++ exited with 0 +++ [pid 5529] <... close resumed>) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5525, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=22 /* 0.22 s */} --- [pid 5059] <... rmdir resumed>) = 0 [pid 5529] mkdir("./file2", 0777 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5059] getdents64(3, [pid 5529] <... mkdir resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5529] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] close(3 [pid 5529] <... mount resumed>) = 0 [pid 5060] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5529] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... close resumed>) = 0 [pid 5529] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] rmdir("./26" [pid 5056] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5529] chdir("./file2" [pid 5060] <... openat resumed>) = 3 [pid 5529] <... chdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5059] <... rmdir resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5529] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] mkdir("./27", 0777 [pid 5056] unlink("./27/binderfs" [pid 5529] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] getdents64(3, [pid 5529] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] <... mkdir resumed>) = 0 [pid 5056] <... unlink resumed>) = 0 [pid 5529] <... futex resumed>) = 1 [pid 5527] <... futex resumed>) = 0 [pid 5060] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5527] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5527] <... futex resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5527] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./25/binderfs") = 0 [pid 5060] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... openat resumed>) = 3 [pid 5529] rename("./file2", "./file1" [ 79.375122][ T5529] loop2: detected capacity change from 0 to 32768 [ 79.404326][ T5529] ERROR: (device loop2): diWrite: ixpxd invalid [ 79.404326][ T5529] [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5057] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5057] close(3 [pid 5060] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] <... close resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5532 ./strace-static-x86_64: Process 5532 attached [pid 5532] set_robust_list(0x5555565206a0, 24) = 0 [pid 5532] chdir("./27") = 0 [pid 5532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5532] setpgid(0, 0) = 0 [pid 5532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5529] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] newfstatat(AT_FDCWD, "./25/file2", [pid 5532] write(3, "1000", 4) = 4 [pid 5532] close(3) = 0 [pid 5532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5532] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5532] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5532] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5529] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5527] <... futex resumed>) = 0 [pid 5527] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5527] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5532] <... mmap resumed>) = 0x7f91a5087000 [pid 5532] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5529] mkdir(".", 0777 [pid 5532] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5529] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5529] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5532] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5533]}, 88) = 5533 [pid 5532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5532] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5532] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5533 attached [pid 5529] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./25/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] newfstatat(AT_FDCWD, "./27/file2", [pid 5529] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5527] <... futex resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5533] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5533] <... rseq resumed>) = 0 [pid 5527] exit_group(0 [pid 5060] openat(AT_FDCWD, "./25/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5533] set_robust_list(0x7f91a50a79a0, 24 [pid 5527] <... exit_group resumed>) = ? [pid 5060] <... openat resumed>) = 4 [pid 5533] <... set_robust_list resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] openat(AT_FDCWD, "./27/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5056] <... openat resumed>) = 4 [pid 5060] getdents64(4, [pid 5533] memfd_create("syzkaller", 0 [pid 5529] +++ exited with 0 +++ [pid 5527] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] newfstatat(4, "", [pid 5533] <... memfd_create resumed>) = 3 [pid 5060] getdents64(4, [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5527, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=19 /* 0.19 s */} --- [pid 5533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5533] <... mmap resumed>) = 0x7f919cc00000 [pid 5060] close(4 [pid 5056] getdents64(4, [pid 5060] <... close resumed>) = 0 [pid 5058] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./25/file2" [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", [pid 5060] <... rmdir resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, [pid 5060] getdents64(3, [pid 5058] getdents64(3, [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5058] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] close(4 [pid 5060] <... close resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] rmdir("./25" [pid 5058] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5056] <... close resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] mkdir("./26", 0777 [pid 5058] unlink("./27/binderfs" [pid 5056] rmdir("./27/file2" [pid 5060] <... mkdir resumed>) = 0 [pid 5058] <... unlink resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5058] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... openat resumed>) = 3 [pid 5056] <... rmdir resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [ 79.421704][ T5529] ERROR: (device loop2): remounting filesystem as read-only [ 79.437429][ T5529] ERROR: (device loop2): txAbort: [ 79.437429][ T5529] [pid 5056] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./27" [pid 5063] close(3 [pid 5056] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] mkdir("./28", 0777./strace-static-x86_64: Process 5534 attached [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5534 [pid 5534] set_robust_list(0x5555565206a0, 24 [pid 5056] <... mkdir resumed>) = 0 [pid 5534] <... set_robust_list resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5534] chdir("./27" [pid 5056] <... openat resumed>) = 3 [pid 5534] <... chdir resumed>) = 0 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5534] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5534] setpgid(0, 0) = 0 [pid 5534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5534] write(3, "1000", 4) = 4 [pid 5534] close(3) = 0 [pid 5534] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5534] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5534] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5534] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5534] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5534] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5534] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5535]}, 88) = 5535 [pid 5534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5534] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5535 attached [pid 5535] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5535] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5535] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5535] memfd_create("syzkaller", 0 [pid 5534] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5535] <... memfd_create resumed>) = 3 [pid 5535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5059] <... ioctl resumed>) = 0 [pid 5533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5536 ./strace-static-x86_64: Process 5536 attached [pid 5536] set_robust_list(0x5555565206a0, 24) = 0 [pid 5536] chdir("./27") = 0 [pid 5536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5536] setpgid(0, 0) = 0 [pid 5536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5536] write(3, "1000", 4) = 4 [pid 5536] close(3) = 0 [pid 5536] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5536] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5536] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... ioctl resumed>) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./27/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./27/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./27/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./27") = 0 [pid 5058] mkdir("./28", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5536] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5060] close(3) = 0 [pid 5536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5537 attached [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] <... ioctl resumed>) = 0 [pid 5537] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5536] <... clone3 resumed> => {parent_tid=[5537]}, 88) = 5537 [pid 5536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5536] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5537] <... rseq resumed>) = 0 [pid 5536] <... futex resumed>) = 0 [pid 5537] set_robust_list(0x7f91a50a79a0, 24 [pid 5056] close(3 [pid 5536] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... close resumed>) = 0 [pid 5537] <... set_robust_list resumed>) = 0 [pid 5537] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5538 ./strace-static-x86_64: Process 5538 attached ./strace-static-x86_64: Process 5539 attached [pid 5537] memfd_create("syzkaller", 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5539 [pid 5538] set_robust_list(0x5555565206a0, 24) = 0 [pid 5538] chdir("./26") = 0 [pid 5538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5538] setpgid(0, 0) = 0 [pid 5539] set_robust_list(0x5555565206a0, 24 [pid 5538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5539] <... set_robust_list resumed>) = 0 [pid 5538] <... openat resumed>) = 3 [pid 5537] <... memfd_create resumed>) = 3 [pid 5539] chdir("./28" [pid 5537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5539] <... chdir resumed>) = 0 [pid 5539] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5538] write(3, "1000", 4 [pid 5537] <... mmap resumed>) = 0x7f919cc00000 [pid 5539] <... prctl resumed>) = 0 [pid 5538] <... write resumed>) = 4 [pid 5539] setpgid(0, 0 [pid 5538] close(3) = 0 [pid 5538] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5538] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5538] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5538] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5538] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5539] <... setpgid resumed>) = 0 [pid 5538] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5538] <... clone3 resumed> => {parent_tid=[5540]}, 88) = 5540 [pid 5539] <... openat resumed>) = 3 [pid 5538] rt_sigprocmask(SIG_SETMASK, [], [pid 5539] write(3, "1000", 4 [pid 5538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5539] <... write resumed>) = 4 [pid 5538] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5540 attached [pid 5539] close(3 [pid 5538] <... futex resumed>) = 0 [pid 5539] <... close resumed>) = 0 [pid 5535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5539] symlink("/dev/binderfs", "./binderfs" [pid 5540] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5538] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5540] <... rseq resumed>) = 0 [pid 5539] <... symlink resumed>) = 0 [pid 5540] set_robust_list(0x7f91a50a79a0, 24 [pid 5539] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] <... set_robust_list resumed>) = 0 [pid 5539] <... futex resumed>) = 0 [pid 5540] rt_sigprocmask(SIG_SETMASK, [], [pid 5539] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5540] memfd_create("syzkaller", 0) = 3 [pid 5540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5539] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5539] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5539] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5539] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5541]}, 88) = 5541 [pid 5539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5539] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5541 attached ) = 0 [pid 5541] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5539] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5541] <... rseq resumed>) = 0 [pid 5541] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5541] memfd_create("syzkaller", 0) = 3 [pid 5541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5533] <... write resumed>) = 16777216 [pid 5533] munmap(0x7f919cc00000, 138412032) = 0 [pid 5533] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5533] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5533] close(3) = 0 [pid 5533] close(4) = 0 [pid 5533] mkdir("./file2", 0777) = 0 [pid 5058] <... ioctl resumed>) = 0 [ 79.983400][ T5533] loop1: detected capacity change from 0 to 32768 [pid 5533] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5542 [pid 5533] <... mount resumed>) = 0 [pid 5533] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5533] chdir("./file2") = 0 [pid 5533] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5542 attached [pid 5542] set_robust_list(0x5555565206a0, 24) = 0 [pid 5542] chdir("./28" [pid 5533] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] <... chdir resumed>) = 0 [pid 5533] <... futex resumed>) = 1 [pid 5542] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5533] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5542] <... prctl resumed>) = 0 [pid 5532] <... futex resumed>) = 0 [pid 5542] setpgid(0, 0) = 0 [pid 5532] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5542] write(3, "1000", 4) = 4 [pid 5542] close(3) = 0 [pid 5542] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5542] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5542] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5542] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5542] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5542] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5543]}, 88) = 5543 [pid 5542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5542] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5542] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5532] <... futex resumed>) = 1 [pid 5532] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5543 attached [pid 5533] <... futex resumed>) = 0 [pid 5533] rename("./file2", "./file1" [pid 5543] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5543] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5543] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5543] memfd_create("syzkaller", 0) = 3 [pid 5543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5532] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5532] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5532] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5532] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5544 attached [pid 5544] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5532] <... clone3 resumed> => {parent_tid=[5544]}, 88) = 5544 [pid 5544] <... rseq resumed>) = 0 [pid 5532] rt_sigprocmask(SIG_SETMASK, [], [pid 5544] set_robust_list(0x7f91a50869a0, 24 [pid 5532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5544] <... set_robust_list resumed>) = 0 [pid 5532] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] rt_sigprocmask(SIG_SETMASK, [], [pid 5532] <... futex resumed>) = 0 [pid 5544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5532] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5544] mkdir(".", 0777) = -1 EEXIST (File exists) [ 80.098341][ T5533] ERROR: (device loop1): diWrite: ixpxd invalid [ 80.098341][ T5533] [ 80.131649][ T5533] ERROR: (device loop1): remounting filesystem as read-only [pid 5544] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5535] <... write resumed>) = 16777216 [pid 5535] munmap(0x7f919cc00000, 138412032 [pid 5541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5535] <... munmap resumed>) = 0 [pid 5533] <... rename resumed>) = -1 EIO (Input/output error) [pid 5533] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 80.154601][ T5533] ERROR: (device loop1): txAbort: [ 80.154601][ T5533] [pid 5533] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5544] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5544] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5532] <... futex resumed>) = 0 [pid 5544] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5532] exit_group(0 [pid 5535] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5544] <... futex resumed>) = ? [pid 5533] <... futex resumed>) = ? [pid 5535] <... openat resumed>) = 4 [pid 5533] +++ exited with 0 +++ [pid 5544] +++ exited with 0 +++ [pid 5535] ioctl(4, LOOP_SET_FD, 3 [pid 5532] <... exit_group resumed>) = ? [pid 5532] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5532, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=14 /* 0.14 s */} --- [pid 5057] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5057] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5535] <... ioctl resumed>) = 0 [pid 5057] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5535] close(3 [pid 5057] newfstatat(3, "", [pid 5535] <... close resumed>) = 0 [pid 5535] close(4 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5535] <... close resumed>) = 0 [pid 5535] mkdir("./file2", 0777 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5535] <... mkdir resumed>) = 0 [pid 5057] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./27/binderfs" [ 80.210323][ T5535] loop5: detected capacity change from 0 to 32768 [pid 5535] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5057] <... unlink resumed>) = 0 [pid 5057] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5537] <... write resumed>) = 16777216 [pid 5535] <... mount resumed>) = 0 [pid 5535] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5537] munmap(0x7f919cc00000, 138412032 [pid 5057] <... umount2 resumed>) = 0 [pid 5535] chdir("./file2") = 0 [pid 5057] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5535] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5535] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5534] <... futex resumed>) = 0 [pid 5535] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5534] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5534] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5535] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5535] rename("./file2", "./file1" [pid 5057] newfstatat(AT_FDCWD, "./27/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5537] <... munmap resumed>) = 0 [pid 5057] openat(AT_FDCWD, "./27/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5537] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5537] ioctl(4, LOOP_SET_FD, 3 [pid 5057] <... openat resumed>) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, [pid 5543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [ 80.298750][ T5535] ERROR: (device loop5): diWrite: ixpxd invalid [ 80.298750][ T5535] [ 80.322924][ T5537] loop3: detected capacity change from 0 to 32768 [ 80.332263][ T5535] ERROR: (device loop5): remounting filesystem as read-only [pid 5057] rmdir("./27/file2" [pid 5534] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] <... rmdir resumed>) = 0 [pid 5534] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] getdents64(3, [pid 5534] <... futex resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] close(3 [pid 5534] <... mmap resumed>) = 0x7f91a5066000 [pid 5534] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5057] <... close resumed>) = 0 [pid 5534] <... mprotect resumed>) = 0 [pid 5057] rmdir("./27" [pid 5534] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5057] <... rmdir resumed>) = 0 [pid 5534] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5057] mkdir("./28", 0777 [pid 5534] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5545]}, 88) = 5545 [pid 5534] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5545 attached NULL, 8) = 0 [pid 5057] <... mkdir resumed>) = 0 [pid 5545] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5534] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5534] <... futex resumed>) = 0 [pid 5534] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5537] <... ioctl resumed>) = 0 [pid 5057] <... openat resumed>) = 3 [pid 5537] close(3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5545] <... rseq resumed>) = 0 [pid 5540] <... write resumed>) = 16777216 [pid 5537] <... close resumed>) = 0 [pid 5545] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5537] close(4) = 0 [pid 5537] mkdir("./file2", 0777) = 0 [pid 5537] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5545] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5545] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5545] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5534] <... futex resumed>) = 0 [pid 5545] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5540] munmap(0x7f919cc00000, 138412032 [pid 5537] <... mount resumed>) = 0 [pid 5537] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5537] chdir("./file2") = 0 [pid 5537] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5537] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5537] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5536] <... futex resumed>) = 0 [pid 5536] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5537] <... futex resumed>) = 0 [pid 5536] <... futex resumed>) = 1 [pid 5537] rename("./file2", "./file1" [pid 5540] <... munmap resumed>) = 0 [ 80.350832][ T5535] ERROR: (device loop5): txAbort: [ 80.350832][ T5535] [ 80.382845][ T5537] ERROR: (device loop3): diWrite: ixpxd invalid [ 80.382845][ T5537] [ 80.391898][ T5535] ERROR: (device loop5): remounting filesystem as read-only [pid 5536] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5540] ioctl(4, LOOP_SET_FD, 3 [pid 5535] <... rename resumed>) = -1 EIO (Input/output error) [pid 5535] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5535] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5534] exit_group(0 [pid 5535] <... futex resumed>) = ? [pid 5534] <... exit_group resumed>) = ? [pid 5535] +++ exited with 0 +++ [pid 5545] <... futex resumed>) = ? [pid 5545] +++ exited with 0 +++ [pid 5534] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5534, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=14 /* 0.14 s */} --- [pid 5540] <... ioctl resumed>) = 0 [pid 5540] close(3) = 0 [pid 5540] close(4) = 0 [pid 5540] mkdir("./file2", 0777 [pid 5063] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5540] <... mkdir resumed>) = 0 [pid 5540] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./27/binderfs") = 0 [pid 5063] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5536] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... write resumed>) = 16777216 [pid 5536] <... futex resumed>) = 0 [pid 5536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5536] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5546]}, 88) = 5546 [pid 5536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5536] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5536] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5546 attached [pid 5541] munmap(0x7f919cc00000, 138412032 [pid 5546] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5546] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5546] mkdir(".", 0777) = -1 EEXIST (File exists) [ 80.422091][ T5540] loop4: detected capacity change from 0 to 32768 [ 80.430724][ T5537] ERROR: (device loop3): remounting filesystem as read-only [pid 5546] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5546] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5546] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5536] <... futex resumed>) = 0 [pid 5546] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./27/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5540] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5540] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5541] <... munmap resumed>) = 0 [pid 5540] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./27/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5541] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5540] chdir("./file2") = 0 [pid 5540] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5541] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5541] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5540] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./27/file2" [pid 5540] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 5540] <... futex resumed>) = 1 [pid 5538] <... futex resumed>) = 0 [pid 5537] <... rename resumed>) = -1 EIO (Input/output error) [pid 5540] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5538] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5537] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5536] exit_group(0 [pid 5546] <... futex resumed>) = ? [pid 5540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5538] <... futex resumed>) = 0 [pid 5537] <... futex resumed>) = ? [pid 5536] <... exit_group resumed>) = ? [pid 5546] +++ exited with 0 +++ [ 80.473126][ T5537] ERROR: (device loop3): txAbort: [ 80.473126][ T5537] [ 80.491067][ T5537] ERROR: (device loop3): remounting filesystem as read-only [ 80.506996][ T5541] loop0: detected capacity change from 0 to 32768 [pid 5540] rename("./file2", "./file1" [pid 5538] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5537] +++ exited with 0 +++ [pid 5536] +++ exited with 0 +++ [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5536, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5063] close(3) = 0 [pid 5063] rmdir("./27" [pid 5059] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./27/binderfs") = 0 [pid 5059] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5541] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5063] mkdir("./28", 0777 [pid 5541] close(3) = 0 [pid 5541] close(4) = 0 [pid 5541] mkdir("./file2", 0777) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5541] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./27/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./27/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5543] <... write resumed>) = 16777216 [pid 5059] newfstatat(4, "", [pid 5543] munmap(0x7f919cc00000, 138412032 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5538] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5538] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] getdents64(4, [pid 5543] <... munmap resumed>) = 0 [pid 5540] <... rename resumed>) = -1 EIO (Input/output error) [pid 5538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5059] close(4 [pid 5538] <... mmap resumed>) = 0x7f91a5066000 [pid 5059] <... close resumed>) = 0 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] rmdir("./27/file2" [pid 5541] <... mount resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5541] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5059] getdents64(3, [pid 5541] <... openat resumed>) = 3 [ 80.522185][ T5540] ERROR: (device loop4): diWrite: ixpxd invalid [ 80.522185][ T5540] [ 80.551401][ T5540] ERROR: (device loop4): remounting filesystem as read-only [ 80.560308][ T5540] ERROR: (device loop4): txAbort: [ 80.560308][ T5540] [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5547 attached [pid 5543] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5541] chdir("./file2" [pid 5059] close(3 [pid 5543] <... openat resumed>) = 4 [pid 5541] <... chdir resumed>) = 0 [pid 5541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5059] <... close resumed>) = 0 [pid 5547] set_robust_list(0x5555565206a0, 24 [pid 5541] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] rmdir("./27" [pid 5547] <... set_robust_list resumed>) = 0 [pid 5543] ioctl(4, LOOP_SET_FD, 3 [pid 5541] <... futex resumed>) = 1 [pid 5539] <... futex resumed>) = 0 [pid 5547] chdir("./28" [pid 5539] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... rmdir resumed>) = 0 [pid 5547] <... chdir resumed>) = 0 [pid 5059] mkdir("./28", 0777 [pid 5547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5547 [pid 5541] rename("./file2", "./file1" [pid 5540] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... futex resumed>) = 0 [pid 5538] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... mkdir resumed>) = 0 [pid 5547] setpgid(0, 0 [pid 5540] <... futex resumed>) = 0 [pid 5539] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5538] <... mprotect resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5547] <... setpgid resumed>) = 0 [pid 5540] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5538] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5059] <... openat resumed>) = 3 [pid 5547] <... openat resumed>) = 3 [pid 5538] <... clone3 resumed> => {parent_tid=[5548]}, 88) = 5548 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5547] write(3, "1000", 4./strace-static-x86_64: Process 5548 attached [pid 5548] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5548] set_robust_list(0x7f91a50869a0, 24 [pid 5538] rt_sigprocmask(SIG_SETMASK, [], [pid 5548] <... set_robust_list resumed>) = 0 [pid 5538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5548] rt_sigprocmask(SIG_SETMASK, [], [pid 5538] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5548] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5538] <... futex resumed>) = 0 [pid 5548] mkdir(".", 0777 [pid 5538] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5548] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5548] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5547] <... write resumed>) = 4 [pid 5547] close(3) = 0 [pid 5547] symlink("/dev/binderfs", "./binderfs" [pid 5548] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5547] <... symlink resumed>) = 0 [pid 5548] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5547] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5548] <... futex resumed>) = 1 [pid 5538] <... futex resumed>) = 0 [pid 5547] <... futex resumed>) = 0 [pid 5548] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5538] exit_group(0 [pid 5547] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5548] <... futex resumed>) = ? [pid 5547] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5540] <... futex resumed>) = ? [pid 5538] <... exit_group resumed>) = ? [pid 5548] +++ exited with 0 +++ [pid 5547] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5540] +++ exited with 0 +++ [pid 5538] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5538, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=14 /* 0.14 s */} --- [pid 5547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5547] <... mmap resumed>) = 0x7f91a5087000 [pid 5543] <... ioctl resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5547] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5543] close(3 [pid 5060] newfstatat(3, "", [pid 5543] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5547] <... mprotect resumed>) = 0 [pid 5543] close(4 [pid 5060] getdents64(3, [pid 5543] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5543] mkdir("./file2", 0777 [pid 5060] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5547] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5543] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5547] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5547] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5543] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 80.604731][ T5543] loop2: detected capacity change from 0 to 32768 [ 80.614821][ T5541] ERROR: (device loop0): diWrite: ixpxd invalid [ 80.614821][ T5541] ./strace-static-x86_64: Process 5549 attached [pid 5547] <... clone3 resumed> => {parent_tid=[5549]}, 88) = 5549 [pid 5060] unlink("./26/binderfs" [pid 5547] rt_sigprocmask(SIG_SETMASK, [], [pid 5549] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5549] set_robust_list(0x7f91a50a79a0, 24 [pid 5547] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5549] <... set_robust_list resumed>) = 0 [pid 5547] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5543] <... mount resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5543] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5549] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5543] <... openat resumed>) = 3 [pid 5549] memfd_create("syzkaller", 0 [pid 5543] chdir("./file2" [pid 5539] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] <... umount2 resumed>) = 0 [pid 5543] <... chdir resumed>) = 0 [pid 5539] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5543] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5539] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5543] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5549] <... memfd_create resumed>) = 3 [pid 5539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] newfstatat(AT_FDCWD, "./26/file2", [pid 5549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5543] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... mmap resumed>) = 0x7f91a5066000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5543] <... futex resumed>) = 1 [pid 5549] <... mmap resumed>) = 0x7f919cc00000 [pid 5543] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5542] <... futex resumed>) = 0 [pid 5539] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] umount2("./26/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5542] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... mprotect resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5543] rename("./file2", "./file1" [pid 5542] <... futex resumed>) = 0 [pid 5539] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] openat(AT_FDCWD, "./26/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5542] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5539] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5539] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5539] <... clone3 resumed> => {parent_tid=[5550]}, 88) = 5550 [pid 5060] getdents64(4, [pid 5539] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] getdents64(4, [pid 5539] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5539] <... futex resumed>) = 0 [pid 5060] close(4 [pid 5539] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./26/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./26"./strace-static-x86_64: Process 5550 attached ) = 0 [pid 5550] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5060] mkdir("./27", 0777 [pid 5550] <... rseq resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5550] set_robust_list(0x7f91a50869a0, 24 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5550] <... set_robust_list resumed>) = 0 [pid 5550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5550] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5550] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5550] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5539] <... futex resumed>) = 0 [ 80.653072][ T5541] ERROR: (device loop0): remounting filesystem as read-only [ 80.670970][ T5543] ERROR: (device loop2): diWrite: ixpxd invalid [ 80.670970][ T5543] [ 80.686129][ T5541] ERROR: (device loop0): txAbort: [ 80.686129][ T5541] [pid 5550] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] <... rename resumed>) = -1 EIO (Input/output error) [pid 5542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5541] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... futex resumed>) = 0 [pid 5542] <... futex resumed>) = 0 [pid 5539] exit_group(0) = ? [pid 5550] <... futex resumed>) = ? [pid 5550] +++ exited with 0 +++ [pid 5542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5541] +++ exited with 0 +++ [pid 5539] +++ exited with 0 +++ [pid 5542] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5539, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5542] <... mprotect resumed>) = 0 [pid 5056] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5542] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5542] <... clone3 resumed> => {parent_tid=[5551]}, 88) = 5551 [pid 5542] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] newfstatat(3, "", [pid 5542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5542] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5542] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./28/binderfs") = 0 [ 80.698116][ T5543] ERROR: (device loop2): remounting filesystem as read-only [ 80.706798][ T5541] ERROR: (device loop0): remounting filesystem as read-only [ 80.714767][ T5543] ERROR: (device loop2): txAbort: [ 80.714767][ T5543] [pid 5056] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5551 attached [pid 5543] <... rename resumed>) = -1 EIO (Input/output error) [pid 5551] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5543] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5543] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5551] <... rseq resumed>) = 0 [pid 5551] set_robust_list(0x7f91a50869a0, 24 [pid 5056] <... umount2 resumed>) = 0 [pid 5056] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./28/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./28/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./28/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./28") = 0 [pid 5056] mkdir("./29", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5551] <... set_robust_list resumed>) = 0 [pid 5551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5551] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5551] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5063] <... ioctl resumed>) = 0 [pid 5551] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5542] <... futex resumed>) = 0 [pid 5551] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5542] exit_group(0 [pid 5543] <... futex resumed>) = ? [pid 5542] <... exit_group resumed>) = ? [pid 5551] <... futex resumed>) = ? [pid 5551] +++ exited with 0 +++ [pid 5543] +++ exited with 0 +++ [pid 5542] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5542, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=16 /* 0.16 s */} --- [pid 5058] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5058] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./28/binderfs") = 0 [pid 5058] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5552 attached [pid 5552] set_robust_list(0x5555565206a0, 24) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5552 [pid 5552] chdir("./28") = 0 [pid 5552] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5552] setpgid(0, 0) = 0 [pid 5552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5552] write(3, "1000", 4) = 4 [pid 5552] close(3) = 0 [pid 5552] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5552] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5552] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5552] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5552] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5552] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5552] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5553]}, 88) = 5553 [pid 5552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5552] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5552] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5553 attached [pid 5553] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5553] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5553] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5553] memfd_create("syzkaller", 0) = 3 [pid 5058] <... umount2 resumed>) = 0 [pid 5553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5058] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5553] <... mmap resumed>) = 0x7f919cc00000 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./28/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./28/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./28/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... ioctl resumed>) = 0 [pid 5058] rmdir("./28") = 0 [pid 5058] mkdir("./29", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] close(3 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5058] <... openat resumed>) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] close(3./strace-static-x86_64: Process 5554 attached [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5554 [pid 5554] set_robust_list(0x5555565206a0, 24 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5554] <... set_robust_list resumed>) = 0 [pid 5554] chdir("./28" [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5555 [pid 5554] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5555 attached [pid 5555] set_robust_list(0x5555565206a0, 24) = 0 [pid 5555] chdir("./27") = 0 [pid 5555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5555] setpgid(0, 0) = 0 [pid 5555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5555] write(3, "1000", 4) = 4 [pid 5555] close(3) = 0 [pid 5555] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5554] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5554] setpgid(0, 0 [pid 5555] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] <... setpgid resumed>) = 0 [pid 5554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5555] <... futex resumed>) = 0 [pid 5555] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5555] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5555] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5555] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5556]}, 88) = 5556 [pid 5555] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5556 attached NULL, 8) = 0 [pid 5554] <... openat resumed>) = 3 [pid 5555] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5555] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5556] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5554] write(3, "1000", 4 [pid 5556] <... rseq resumed>) = 0 [pid 5554] <... write resumed>) = 4 [pid 5556] set_robust_list(0x7f91a50a79a0, 24 [pid 5554] close(3 [pid 5556] <... set_robust_list resumed>) = 0 [pid 5554] <... close resumed>) = 0 [pid 5556] rt_sigprocmask(SIG_SETMASK, [], [pid 5554] symlink("/dev/binderfs", "./binderfs" [pid 5556] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5554] <... symlink resumed>) = 0 [pid 5556] memfd_create("syzkaller", 0 [pid 5554] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] <... memfd_create resumed>) = 3 [pid 5554] <... futex resumed>) = 0 [pid 5556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5554] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5556] <... mmap resumed>) = 0x7f919cc00000 [pid 5554] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5554] <... mmap resumed>) = 0x7f91a5087000 [pid 5554] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5056] close(3 [pid 5554] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5056] <... close resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5557 attached , child_tidptr=0x555556520690) = 5557 [pid 5557] set_robust_list(0x5555565206a0, 24) = 0 [pid 5557] chdir("./29") = 0 [pid 5554] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5554] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5557] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5557] setpgid(0, 0) = 0 [pid 5557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5557] write(3, "1000", 4) = 4 [pid 5557] close(3) = 0 [pid 5557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5557] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5554] <... clone3 resumed> => {parent_tid=[5558]}, 88) = 5558 [pid 5553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 5558 attached [pid 5557] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5554] rt_sigprocmask(SIG_SETMASK, [], [pid 5558] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5557] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5554] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5557] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5558] <... rseq resumed>) = 0 [pid 5557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5554] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] set_robust_list(0x7f91a50a79a0, 24 [pid 5557] <... mmap resumed>) = 0x7f91a5087000 [pid 5554] <... futex resumed>) = 0 [pid 5557] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5554] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5558] <... set_robust_list resumed>) = 0 [pid 5558] rt_sigprocmask(SIG_SETMASK, [], [pid 5557] <... mprotect resumed>) = 0 [pid 5558] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5558] memfd_create("syzkaller", 0 [pid 5557] <... clone3 resumed> => {parent_tid=[5559]}, 88) = 5559 [pid 5557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5557] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5559 attached [pid 5558] <... memfd_create resumed>) = 3 [pid 5558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5559] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5558] <... mmap resumed>) = 0x7f919cc00000 [pid 5559] <... rseq resumed>) = 0 [pid 5559] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5559] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5559] memfd_create("syzkaller", 0) = 3 [pid 5559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5549] <... write resumed>) = 16777216 [pid 5549] munmap(0x7f919cc00000, 138412032) = 0 [pid 5549] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5549] ioctl(4, LOOP_SET_FD, 3 [pid 5556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5560 attached [pid 5560] set_robust_list(0x5555565206a0, 24 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5560 [pid 5560] <... set_robust_list resumed>) = 0 [pid 5560] chdir("./29") = 0 [pid 5560] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5560] setpgid(0, 0) = 0 [pid 5549] <... ioctl resumed>) = 0 [pid 5549] close(3) = 0 [pid 5560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5549] close(4) = 0 [pid 5560] <... openat resumed>) = 3 [pid 5549] mkdir("./file2", 0777 [pid 5560] write(3, "1000", 4 [pid 5549] <... mkdir resumed>) = 0 [pid 5560] <... write resumed>) = 4 [pid 5560] close(3) = 0 [pid 5560] symlink("/dev/binderfs", "./binderfs" [pid 5549] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5560] <... symlink resumed>) = 0 [pid 5560] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5560] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5560] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5560] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [ 81.245920][ T5549] loop1: detected capacity change from 0 to 32768 [pid 5560] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5549] <... mount resumed>) = 0 [pid 5549] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5549] chdir("./file2") = 0 [pid 5549] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5549] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5547] <... futex resumed>) = 0 [pid 5560] <... mprotect resumed>) = 0 [pid 5547] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5549] rename("./file2", "./file1" [pid 5560] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5547] <... futex resumed>) = 0 [pid 5547] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5560] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5560] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5561 attached => {parent_tid=[5561]}, 88) = 5561 [pid 5561] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5560] rt_sigprocmask(SIG_SETMASK, [], [pid 5561] <... rseq resumed>) = 0 [pid 5561] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5561] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5561] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5560] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5560] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5561] <... futex resumed>) = 0 [pid 5560] <... futex resumed>) = 1 [pid 5561] memfd_create("syzkaller", 0 [pid 5560] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5561] <... memfd_create resumed>) = 3 [pid 5561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [ 81.311387][ T5549] ERROR: (device loop1): diWrite: ixpxd invalid [ 81.311387][ T5549] [pid 5547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5547] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5547] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5547] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5553] <... write resumed>) = 16777216 [pid 5547] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5549] <... rename resumed>) = -1 EIO (Input/output error) [pid 5549] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5549] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5562 attached [pid 5562] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5562] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5562] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5547] <... clone3 resumed> => {parent_tid=[5562]}, 88) = 5562 [ 81.361687][ T5549] ERROR: (device loop1): remounting filesystem as read-only [ 81.400774][ T5549] ERROR: (device loop1): txAbort: [ 81.400774][ T5549] [pid 5547] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5547] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5562] <... futex resumed>) = 0 [pid 5547] <... futex resumed>) = 1 [pid 5562] mkdir(".", 0777 [pid 5547] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5562] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5562] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5553] munmap(0x7f919cc00000, 138412032) = 0 [pid 5562] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5562] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5547] <... futex resumed>) = 0 [pid 5562] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5547] exit_group(0 [pid 5549] <... futex resumed>) = ? [pid 5547] <... exit_group resumed>) = ? [pid 5549] +++ exited with 0 +++ [pid 5562] <... futex resumed>) = ? [pid 5562] +++ exited with 0 +++ [pid 5547] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5547, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5057] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./28/binderfs") = 0 [pid 5057] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5057] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./28/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./28/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./28/file2" [pid 5553] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5057] <... rmdir resumed>) = 0 [pid 5057] getdents64(3, [pid 5553] <... openat resumed>) = 4 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./28") = 0 [pid 5057] mkdir("./29", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5553] ioctl(4, LOOP_SET_FD, 3 [pid 5057] <... openat resumed>) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5553] <... ioctl resumed>) = 0 [pid 5556] <... write resumed>) = 16777216 [pid 5553] close(3 [pid 5556] munmap(0x7f919cc00000, 138412032 [pid 5553] <... close resumed>) = 0 [pid 5553] close(4 [pid 5556] <... munmap resumed>) = 0 [pid 5553] <... close resumed>) = 0 [pid 5553] mkdir("./file2", 0777 [pid 5556] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5553] <... mkdir resumed>) = 0 [ 81.481493][ T5553] loop5: detected capacity change from 0 to 32768 [pid 5553] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5556] <... openat resumed>) = 4 [pid 5556] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5556] close(3 [pid 5558] <... write resumed>) = 16777216 [pid 5556] <... close resumed>) = 0 [pid 5558] munmap(0x7f919cc00000, 138412032 [pid 5556] close(4) = 0 [pid 5556] mkdir("./file2", 0777 [pid 5561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5558] <... munmap resumed>) = 0 [pid 5556] <... mkdir resumed>) = 0 [pid 5553] <... mount resumed>) = 0 [pid 5553] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5553] chdir("./file2") = 0 [pid 5553] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5553] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5552] <... futex resumed>) = 0 [pid 5553] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5552] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5553] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5552] <... futex resumed>) = 0 [pid 5553] rename("./file2", "./file1" [pid 5552] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5556] mount("/dev/loop4", "./file2", "jfs", 0, "" [ 81.561674][ T5556] loop4: detected capacity change from 0 to 32768 [ 81.600151][ T5553] ERROR: (device loop5): diWrite: ixpxd invalid [ 81.600151][ T5553] [pid 5558] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5556] <... mount resumed>) = 0 [pid 5558] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5556] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5552] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5556] chdir("./file2" [pid 5552] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5556] <... chdir resumed>) = 0 [pid 5552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5552] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5556] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5558] close(3) = 0 [pid 5558] close(4 [pid 5556] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5552] <... mprotect resumed>) = 0 [pid 5552] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5558] <... close resumed>) = 0 [pid 5556] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] mkdir("./file2", 0777 [pid 5556] <... futex resumed>) = 1 [pid 5555] <... futex resumed>) = 0 [pid 5552] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5556] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5558] <... mkdir resumed>) = 0 [ 81.631210][ T5553] ERROR: (device loop5): remounting filesystem as read-only [ 81.641963][ T5558] loop3: detected capacity change from 0 to 32768 [ 81.647024][ T5553] ERROR: (device loop5): txAbort: [ 81.647024][ T5553] [pid 5556] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5555] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5552] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5558] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5556] rename("./file2", "./file1" [pid 5555] <... futex resumed>) = 0 [pid 5555] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5552] <... clone3 resumed> => {parent_tid=[5563]}, 88) = 5563 [pid 5552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5552] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5552] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5553] <... rename resumed>) = -1 EIO (Input/output error) [pid 5553] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5553] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5563 attached [pid 5563] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5563] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5563] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5563] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5563] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5563] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5552] <... futex resumed>) = 0 [pid 5552] exit_group(0) = ? [pid 5553] <... futex resumed>) = ? [pid 5553] +++ exited with 0 +++ [pid 5563] +++ exited with 0 +++ [pid 5559] <... write resumed>) = 16777216 [pid 5558] <... mount resumed>) = 0 [pid 5552] +++ exited with 0 +++ [pid 5558] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5552, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5559] munmap(0x7f919cc00000, 138412032 [pid 5558] <... openat resumed>) = 3 [pid 5558] chdir("./file2") = 0 [pid 5063] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5555] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5555] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5558] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5555] <... mprotect resumed>) = 0 [ 81.692251][ T5556] ERROR: (device loop4): diWrite: ixpxd invalid [ 81.692251][ T5556] [ 81.721081][ T5556] ERROR: (device loop4): remounting filesystem as read-only [ 81.728641][ T5556] ERROR: (device loop4): txAbort: [ 81.728641][ T5556] [pid 5555] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5558] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5555] <... clone3 resumed> => {parent_tid=[5564]}, 88) = 5564 [pid 5558] <... futex resumed>) = 1 [pid 5554] <... futex resumed>) = 0 [pid 5554] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] rename("./file2", "./file1" [pid 5554] <... futex resumed>) = 0 [pid 5555] rt_sigprocmask(SIG_SETMASK, [], [pid 5554] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5564 attached [pid 5555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5564] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5555] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5564] <... rseq resumed>) = 0 [pid 5555] <... futex resumed>) = 0 [pid 5564] set_robust_list(0x7f91a50869a0, 24 [pid 5555] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5564] <... set_robust_list resumed>) = 0 [pid 5564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5564] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5564] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5564] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5555] <... futex resumed>) = 0 [pid 5564] <... futex resumed>) = 1 [pid 5564] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5559] <... munmap resumed>) = 0 [pid 5556] <... rename resumed>) = -1 EIO (Input/output error) [pid 5063] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] <... ioctl resumed>) = 0 [pid 5559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5559] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... openat resumed>) = 3 [pid 5556] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] close(3 [pid 5555] exit_group(0 [pid 5057] <... close resumed>) = 0 [pid 5555] <... exit_group resumed>) = ? [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(3, "", ./strace-static-x86_64: Process 5565 attached [pid 5559] <... ioctl resumed>) = 0 [pid 5558] <... rename resumed>) = -1 EIO (Input/output error) [pid 5556] <... futex resumed>) = ? [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5565 [pid 5565] set_robust_list(0x5555565206a0, 24 [pid 5559] close(3 [pid 5558] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] +++ exited with 0 +++ [pid 5554] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5063] getdents64(3, [pid 5565] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5565] chdir("./29" [pid 5558] <... futex resumed>) = 0 [pid 5554] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5564] <... futex resumed>) = ? [pid 5565] <... chdir resumed>) = 0 [pid 5564] +++ exited with 0 +++ [pid 5559] <... close resumed>) = 0 [pid 5558] mkdir(".", 0777 [pid 5555] +++ exited with 0 +++ [pid 5554] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5559] close(4 [pid 5558] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5554] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5555, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=15 /* 0.15 s */} --- [pid 5565] <... prctl resumed>) = 0 [pid 5559] <... close resumed>) = 0 [pid 5558] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5565] setpgid(0, 0 [pid 5559] mkdir("./file2", 0777 [pid 5558] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5558] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5558] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5559] <... mkdir resumed>) = 0 [pid 5554] <... futex resumed>) = 0 [pid 5565] <... setpgid resumed>) = 0 [pid 5559] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5063] unlink("./28/binderfs" [pid 5060] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5554] exit_group(0 [pid 5565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5558] <... futex resumed>) = ? [pid 5554] <... exit_group resumed>) = ? [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5558] +++ exited with 0 +++ [pid 5554] +++ exited with 0 +++ [pid 5060] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5565] <... openat resumed>) = 3 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5554, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5565] write(3, "1000", 4 [pid 5060] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5565] <... write resumed>) = 4 [pid 5559] <... mount resumed>) = 0 [pid 5063] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(3, "", [pid 5565] close(3 [pid 5559] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5059] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5565] <... close resumed>) = 0 [pid 5559] <... openat resumed>) = 3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5565] symlink("/dev/binderfs", "./binderfs" [pid 5559] chdir("./file2" [pid 5060] getdents64(3, [pid 5559] <... chdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5565] <... symlink resumed>) = 0 [pid 5559] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5565] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5559] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] <... openat resumed>) = 3 [pid 5565] <... futex resumed>) = 0 [pid 5559] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(3, "", [pid 5565] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5559] <... futex resumed>) = 1 [pid 5557] <... futex resumed>) = 0 [pid 5565] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5559] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5557] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5565] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5557] <... futex resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5565] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 81.744742][ T5558] ERROR: (device loop3): diWrite: ixpxd invalid [ 81.744742][ T5558] [ 81.758382][ T5556] ERROR: (device loop4): remounting filesystem as read-only [ 81.771245][ T5558] ERROR: (device loop3): remounting filesystem as read-only [ 81.772379][ T5559] loop0: detected capacity change from 0 to 32768 [ 81.778864][ T5558] ERROR: (device loop3): txAbort: [ 81.778864][ T5558] [pid 5559] rename("./file2", "./file1" [pid 5557] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] getdents64(3, [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5561] <... write resumed>) = 16777216 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] unlink("./27/binderfs" [pid 5565] <... mmap resumed>) = 0x7f91a5087000 [pid 5059] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... unlink resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5565] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5060] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5565] <... mprotect resumed>) = 0 [pid 5561] munmap(0x7f919cc00000, 138412032 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5565] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] unlink("./28/binderfs" [pid 5565] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5059] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5561] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5565] <... clone3 resumed> => {parent_tid=[5566]}, 88) = 5566 ./strace-static-x86_64: Process 5566 attached [pid 5565] rt_sigprocmask(SIG_SETMASK, [], [pid 5561] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5559] <... rename resumed>) = -1 EIO (Input/output error) [pid 5063] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5561] <... openat resumed>) = 4 [pid 5561] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5566] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5561] <... ioctl resumed>) = 0 [pid 5559] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(AT_FDCWD, "./28/file2", [pid 5060] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5566] <... rseq resumed>) = 0 [pid 5565] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5561] close(3 [pid 5559] <... futex resumed>) = 1 [pid 5557] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5566] set_robust_list(0x7f91a50a79a0, 24 [pid 5565] <... futex resumed>) = 0 [pid 5561] <... close resumed>) = 0 [pid 5559] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5557] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5566] <... set_robust_list resumed>) = 0 [pid 5565] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5561] close(4 [pid 5559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5557] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./27/file2", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5566] rt_sigprocmask(SIG_SETMASK, [], [pid 5561] <... close resumed>) = 0 [pid 5559] mkdir(".", 0777 [pid 5557] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] openat(AT_FDCWD, "./28/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5561] mkdir("./file2", 0777 [pid 5559] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5566] memfd_create("syzkaller", 0 [pid 5063] <... openat resumed>) = 4 [pid 5060] umount2("./27/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5561] <... mkdir resumed>) = 0 [pid 5559] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(4, "", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./28/file2", [pid 5566] <... memfd_create resumed>) = 3 [pid 5561] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5559] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "./27/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5559] <... futex resumed>) = 1 [pid 5557] <... futex resumed>) = 0 [pid 5063] getdents64(4, [pid 5060] <... openat resumed>) = 4 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5566] <... mmap resumed>) = 0x7f919cc00000 [pid 5559] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5557] exit_group(0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] newfstatat(4, "", [pid 5059] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5559] <... futex resumed>) = ? [pid 5557] <... exit_group resumed>) = ? [pid 5063] getdents64(4, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5559] +++ exited with 0 +++ [pid 5557] +++ exited with 0 +++ [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./28/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5557, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5059] <... openat resumed>) = 4 [pid 5056] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(4, "", [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5059] getdents64(4, [pid 5056] newfstatat(3, "", [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(4, [pid 5059] getdents64(4, [pid 5056] getdents64(3, [pid 5063] close(4 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] <... close resumed>) = 0 [pid 5056] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./28/file2" [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5060] getdents64(4, [ 81.818302][ T5559] ERROR: (device loop0): diWrite: ixpxd invalid [ 81.818302][ T5559] [ 81.827907][ T5559] ERROR: (device loop0): remounting filesystem as read-only [ 81.847201][ T5559] ERROR: (device loop0): txAbort: [ 81.847201][ T5559] [ 81.859361][ T5561] loop2: detected capacity change from 0 to 32768 [pid 5056] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] close(4 [pid 5056] unlink("./29/binderfs" [pid 5063] getdents64(3, [pid 5060] <... close resumed>) = 0 [pid 5056] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] rmdir("./27/file2" [pid 5056] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5561] <... mount resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5561] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5060] getdents64(3, [pid 5561] <... openat resumed>) = 3 [pid 5059] rmdir("./28/file2" [pid 5056] <... umount2 resumed>) = 0 [pid 5561] chdir("./file2") = 0 [pid 5561] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5056] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5561] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5561] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] rmdir("./28" [pid 5059] <... rmdir resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5560] <... futex resumed>) = 0 [pid 5059] getdents64(3, [pid 5056] newfstatat(AT_FDCWD, "./29/file2", [pid 5560] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] close(3 [pid 5561] <... futex resumed>) = 0 [pid 5560] <... futex resumed>) = 1 [pid 5056] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5561] rename("./file2", "./file1" [pid 5560] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] <... close resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] rmdir("./28" [pid 5056] openat(AT_FDCWD, "./29/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3 [pid 5056] <... openat resumed>) = 4 [pid 5059] mkdir("./29", 0777 [pid 5056] newfstatat(4, "", [pid 5060] <... close resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] rmdir("./27" [pid 5056] getdents64(4, [pid 5060] <... rmdir resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] <... mkdir resumed>) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] mkdir("./29", 0777 [pid 5060] mkdir("./28", 0777 [pid 5056] close(4 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5056] <... close resumed>) = 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5056] rmdir("./29/file2" [pid 5063] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5056] <... rmdir resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5056] getdents64(3, [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5056] close(3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./29") = 0 [pid 5056] mkdir("./30", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5561] <... rename resumed>) = -1 EIO (Input/output error) [pid 5561] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5560] <... futex resumed>) = 0 [pid 5561] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5560] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5561] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5560] <... futex resumed>) = 0 [pid 5561] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5560] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5561] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5561] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5560] <... futex resumed>) = 0 [pid 5560] exit_group(0) = ? [ 81.904553][ T5561] ERROR: (device loop2): diWrite: ixpxd invalid [ 81.904553][ T5561] [ 81.919810][ T5561] ERROR: (device loop2): remounting filesystem as read-only [ 81.928304][ T5561] ERROR: (device loop2): txAbort: [ 81.928304][ T5561] [pid 5561] +++ exited with 0 +++ [pid 5560] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5560, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5058] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./29/binderfs") = 0 [pid 5058] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5058] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./29/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./29/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./29/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./29") = 0 [pid 5058] mkdir("./30", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5567 ./strace-static-x86_64: Process 5567 attached [pid 5567] set_robust_list(0x5555565206a0, 24) = 0 [pid 5567] chdir("./30" [pid 5060] <... ioctl resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5567] <... chdir resumed>) = 0 [pid 5567] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... ioctl resumed>) = 0 [pid 5059] close(3 [pid 5567] <... prctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5567] setpgid(0, 0) = 0 [pid 5063] close(3 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5568 attached [pid 5567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5568 [pid 5060] close(3) = 0 [pid 5568] set_robust_list(0x5555565206a0, 24 [pid 5567] <... openat resumed>) = 3 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5569 attached [pid 5568] <... set_robust_list resumed>) = 0 [pid 5567] write(3, "1000", 4 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5569 ./strace-static-x86_64: Process 5570 attached [pid 5569] set_robust_list(0x5555565206a0, 24 [pid 5568] chdir("./29" [pid 5567] <... write resumed>) = 4 [pid 5568] <... chdir resumed>) = 0 [pid 5567] close(3 [pid 5568] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5570] set_robust_list(0x5555565206a0, 24 [pid 5568] <... prctl resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5570 [pid 5567] <... close resumed>) = 0 [pid 5568] setpgid(0, 0 [pid 5567] symlink("/dev/binderfs", "./binderfs" [pid 5569] <... set_robust_list resumed>) = 0 [pid 5569] chdir("./29") = 0 [pid 5569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5569] setpgid(0, 0) = 0 [pid 5567] <... symlink resumed>) = 0 [pid 5568] <... setpgid resumed>) = 0 [pid 5569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5570] <... set_robust_list resumed>) = 0 [pid 5569] <... openat resumed>) = 3 [pid 5568] <... openat resumed>) = 3 [pid 5567] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5568] write(3, "1000", 4 [pid 5567] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5570] chdir("./28" [pid 5568] <... write resumed>) = 4 [pid 5567] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5569] write(3, "1000", 4 [pid 5568] close(3 [pid 5570] <... chdir resumed>) = 0 [pid 5568] <... close resumed>) = 0 [pid 5570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5568] symlink("/dev/binderfs", "./binderfs" [pid 5569] <... write resumed>) = 4 [pid 5569] close(3) = 0 [pid 5569] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5568] <... symlink resumed>) = 0 [pid 5570] <... prctl resumed>) = 0 [pid 5570] setpgid(0, 0) = 0 [pid 5569] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5569] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5569] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5569] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5570] <... openat resumed>) = 3 [pid 5569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5568] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5567] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5570] write(3, "1000", 4 [pid 5569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5568] <... futex resumed>) = 0 [pid 5567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5570] <... write resumed>) = 4 [pid 5569] <... mmap resumed>) = 0x7f91a5087000 [pid 5568] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5570] close(3 [pid 5569] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5568] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5567] <... mmap resumed>) = 0x7f91a5087000 [pid 5566] <... write resumed>) = 16777216 [pid 5570] <... close resumed>) = 0 [pid 5569] <... mprotect resumed>) = 0 [pid 5570] symlink("/dev/binderfs", "./binderfs" [pid 5569] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5570] <... symlink resumed>) = 0 [pid 5570] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5568] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5567] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5570] <... futex resumed>) = 0 [pid 5568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5570] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5567] <... mprotect resumed>) = 0 [pid 5570] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5568] <... mmap resumed>) = 0x7f91a5087000 [pid 5569] <... clone3 resumed> => {parent_tid=[5571]}, 88) = 5571 [pid 5570] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5568] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5567] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5569] rt_sigprocmask(SIG_SETMASK, [], [pid 5570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5568] <... mprotect resumed>) = 0 [pid 5570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5569] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5568] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5571 attached [pid 5570] <... mmap resumed>) = 0x7f91a5087000 [pid 5568] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5567] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5566] munmap(0x7f919cc00000, 138412032 [pid 5571] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5570] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5568] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5567] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5570] <... mprotect resumed>) = 0 [pid 5569] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5573 attached [pid 5571] <... rseq resumed>) = 0 [pid 5570] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] <... ioctl resumed>) = 0 [pid 5573] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5570] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5568] <... clone3 resumed> => {parent_tid=[5573]}, 88) = 5573 [pid 5567] <... clone3 resumed> => {parent_tid=[5572]}, 88) = 5572 [pid 5573] <... rseq resumed>) = 0 [pid 5571] set_robust_list(0x7f91a50a79a0, 24 [pid 5570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5567] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] close(3 [pid 5573] set_robust_list(0x7f91a50a79a0, 24 [pid 5567] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5572 attached [pid 5572] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5573] <... set_robust_list resumed>) = 0 [pid 5572] <... rseq resumed>) = 0 [pid 5572] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5572] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5572] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5574 attached [pid 5574] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5573] rt_sigprocmask(SIG_SETMASK, [], [pid 5571] <... set_robust_list resumed>) = 0 [pid 5570] <... clone3 resumed> => {parent_tid=[5574]}, 88) = 5574 [pid 5567] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... close resumed>) = 0 [pid 5574] set_robust_list(0x7f91a50a79a0, 24 [pid 5573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5571] rt_sigprocmask(SIG_SETMASK, [], [pid 5570] rt_sigprocmask(SIG_SETMASK, [], [pid 5568] rt_sigprocmask(SIG_SETMASK, [], [pid 5574] <... set_robust_list resumed>) = 0 [pid 5573] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5574] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] memfd_create("syzkaller", 0 [pid 5570] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5568] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5575 attached [pid 5574] <... futex resumed>) = 0 [pid 5572] <... futex resumed>) = 0 [pid 5571] <... memfd_create resumed>) = 3 [pid 5570] <... futex resumed>) = 1 [pid 5568] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5567] <... futex resumed>) = 1 [pid 5575] set_robust_list(0x5555565206a0, 24 [pid 5574] memfd_create("syzkaller", 0 [pid 5573] <... futex resumed>) = 0 [pid 5572] memfd_create("syzkaller", 0 [pid 5571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5570] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5568] <... futex resumed>) = 1 [pid 5567] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5575 [pid 5575] <... set_robust_list resumed>) = 0 [pid 5572] <... memfd_create resumed>) = 3 [pid 5573] memfd_create("syzkaller", 0 [pid 5572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5575] chdir("./30" [pid 5574] <... memfd_create resumed>) = 3 [pid 5572] <... mmap resumed>) = 0x7f919cc00000 [pid 5571] <... mmap resumed>) = 0x7f919cc00000 [pid 5568] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5575] <... chdir resumed>) = 0 [pid 5574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5573] <... memfd_create resumed>) = 3 [pid 5566] <... munmap resumed>) = 0 [pid 5575] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5566] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5575] <... prctl resumed>) = 0 [pid 5573] <... mmap resumed>) = 0x7f919cc00000 [pid 5575] setpgid(0, 0 [pid 5574] <... mmap resumed>) = 0x7f919cc00000 [pid 5566] <... openat resumed>) = 4 [pid 5575] <... setpgid resumed>) = 0 [pid 5575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5566] ioctl(4, LOOP_SET_FD, 3 [pid 5575] write(3, "1000", 4) = 4 [pid 5575] close(3) = 0 [pid 5575] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5575] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5575] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5575] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5566] <... ioctl resumed>) = 0 [pid 5575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5566] close(3 [pid 5575] <... mmap resumed>) = 0x7f91a5087000 [pid 5566] <... close resumed>) = 0 [ 82.332309][ T5566] loop1: detected capacity change from 0 to 32768 [pid 5575] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5566] close(4) = 0 [pid 5575] <... mprotect resumed>) = 0 [pid 5566] mkdir("./file2", 0777) = 0 [pid 5575] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5566] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5575] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5576]}, 88) = 5576 [pid 5575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5575] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5575] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5566] <... mount resumed>) = 0 [pid 5566] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5566] chdir("./file2"./strace-static-x86_64: Process 5576 attached [pid 5576] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5566] <... chdir resumed>) = 0 [pid 5566] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5576] <... rseq resumed>) = 0 [pid 5576] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5576] rt_sigprocmask(SIG_SETMASK, [], [pid 5566] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5576] memfd_create("syzkaller", 0 [pid 5573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5566] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5576] <... memfd_create resumed>) = 3 [pid 5566] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] <... futex resumed>) = 0 [pid 5565] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5566] <... futex resumed>) = 0 [pid 5565] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5566] rename("./file2", "./file1" [pid 5576] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5565] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5565] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 82.453745][ T5566] ERROR: (device loop1): diWrite: ixpxd invalid [ 82.453745][ T5566] [ 82.483968][ T5566] ERROR: (device loop1): remounting filesystem as read-only [ 82.495257][ T5566] ERROR: (device loop1): txAbort: [ 82.495257][ T5566] [pid 5565] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5565] <... mmap resumed>) = 0x7f91a5066000 [pid 5565] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5565] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5565] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5566] <... rename resumed>) = -1 EIO (Input/output error) [pid 5565] <... clone3 resumed> => {parent_tid=[5577]}, 88) = 5577 [pid 5565] rt_sigprocmask(SIG_SETMASK, [], [pid 5566] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5566] <... futex resumed>) = 0 [pid 5565] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5566] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5577 attached [pid 5577] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5565] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5577] <... rseq resumed>) = 0 [pid 5577] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5577] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5577] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5577] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5565] <... futex resumed>) = 0 [pid 5577] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5565] exit_group(0 [pid 5577] <... futex resumed>) = ? [pid 5565] <... exit_group resumed>) = ? [pid 5566] <... futex resumed>) = ? [pid 5577] +++ exited with 0 +++ [pid 5566] +++ exited with 0 +++ [pid 5565] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5565, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5057] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5057] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, [pid 5571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./29/binderfs") = 0 [pid 5057] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5576] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5573] <... write resumed>) = 16777216 [pid 5572] <... write resumed>) = 16777216 [pid 5573] munmap(0x7f919cc00000, 138412032 [pid 5572] munmap(0x7f919cc00000, 138412032) = 0 [pid 5573] <... munmap resumed>) = 0 [pid 5572] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5573] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5572] ioctl(4, LOOP_SET_FD, 3 [pid 5573] <... openat resumed>) = 4 [pid 5573] ioctl(4, LOOP_SET_FD, 3 [pid 5572] <... ioctl resumed>) = 0 [pid 5572] close(3) = 0 [pid 5572] close(4) = 0 [pid 5572] mkdir("./file2", 0777 [pid 5573] <... ioctl resumed>) = 0 [pid 5572] <... mkdir resumed>) = 0 [pid 5572] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5573] close(3) = 0 [pid 5573] close(4 [pid 5576] <... write resumed>) = 16777216 [pid 5573] <... close resumed>) = 0 [pid 5573] mkdir("./file2", 0777) = 0 [pid 5573] mount("/dev/loop3", "./file2", "jfs", 0, "") = 0 [pid 5573] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 82.794608][ T5572] loop0: detected capacity change from 0 to 32768 [ 82.801776][ T5573] loop3: detected capacity change from 0 to 32768 [pid 5573] chdir("./file2" [pid 5576] munmap(0x7f919cc00000, 138412032 [pid 5572] <... mount resumed>) = 0 [pid 5571] <... write resumed>) = 16777216 [pid 5572] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5572] chdir("./file2") = 0 [pid 5572] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5572] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5572] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5574] <... write resumed>) = 16777216 [pid 5573] <... chdir resumed>) = 0 [pid 5571] munmap(0x7f919cc00000, 138412032 [pid 5567] <... futex resumed>) = 0 [pid 5567] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5573] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5567] <... futex resumed>) = 1 [pid 5572] <... futex resumed>) = 0 [pid 5567] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5572] rename("./file2", "./file1" [pid 5576] <... munmap resumed>) = 0 [pid 5573] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5573] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5576] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5574] munmap(0x7f919cc00000, 138412032 [pid 5573] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5568] <... futex resumed>) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5571] <... munmap resumed>) = 0 [pid 5576] <... openat resumed>) = 4 [pid 5574] <... munmap resumed>) = 0 [pid 5573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5568] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5576] ioctl(4, LOOP_SET_FD, 3 [pid 5574] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5571] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5574] <... openat resumed>) = 4 [pid 5573] rename("./file2", "./file1" [pid 5572] <... rename resumed>) = -1 EIO (Input/output error) [pid 5571] <... openat resumed>) = 4 [pid 5568] <... futex resumed>) = 0 [pid 5574] ioctl(4, LOOP_SET_FD, 3 [pid 5576] <... ioctl resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5571] ioctl(4, LOOP_SET_FD, 3 [pid 5057] newfstatat(AT_FDCWD, "./29/file2", [pid 5568] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5576] close(3 [pid 5571] <... ioctl resumed>) = 0 [ 82.867656][ T5572] ERROR: (device loop0): diWrite: ixpxd invalid [ 82.867656][ T5572] [ 82.879796][ T5572] ERROR: (device loop0): remounting filesystem as read-only [ 82.887884][ T5572] ERROR: (device loop0): txAbort: [ 82.887884][ T5572] [ 82.894856][ T5576] loop2: detected capacity change from 0 to 32768 [ 82.902754][ T5571] loop5: detected capacity change from 0 to 32768 [ 82.902962][ T5573] ERROR: (device loop3): diWrite: ixpxd invalid [ 82.902962][ T5573] [pid 5571] close(3 [pid 5576] <... close resumed>) = 0 [pid 5572] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5567] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5571] <... close resumed>) = 0 [pid 5571] close(4) = 0 [pid 5571] mkdir("./file2", 0777) = 0 [pid 5571] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5572] <... futex resumed>) = 0 [pid 5572] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5574] <... ioctl resumed>) = 0 [pid 5576] close(4 [pid 5571] <... mount resumed>) = 0 [pid 5567] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5576] <... close resumed>) = 0 [pid 5574] close(3 [pid 5572] <... futex resumed>) = 0 [pid 5567] <... futex resumed>) = 1 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5576] mkdir("./file2", 0777 [pid 5574] <... close resumed>) = 0 [pid 5572] mkdir(".", 0777 [pid 5576] <... mkdir resumed>) = 0 [pid 5574] close(4 [pid 5572] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5571] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5057] openat(AT_FDCWD, "./29/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5576] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5574] <... close resumed>) = 0 [pid 5572] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5571] <... openat resumed>) = 3 [pid 5057] <... openat resumed>) = 4 [pid 5574] mkdir("./file2", 0777 [pid 5573] <... rename resumed>) = -1 EIO (Input/output error) [pid 5572] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5571] chdir("./file2" [pid 5567] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5573] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] <... chdir resumed>) = 0 [pid 5574] <... mkdir resumed>) = 0 [pid 5573] <... futex resumed>) = 1 [pid 5572] <... futex resumed>) = 0 [pid 5571] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5568] <... futex resumed>) = 0 [pid 5567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5574] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5573] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5572] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5568] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5571] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5568] <... futex resumed>) = 0 [pid 5567] exit_group(0 [pid 5572] <... futex resumed>) = ? [pid 5571] <... futex resumed>) = 1 [pid 5569] <... futex resumed>) = 0 [pid 5568] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5573] mkdir(".", 0777 [pid 5567] <... exit_group resumed>) = ? [pid 5573] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5572] +++ exited with 0 +++ [pid 5571] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5569] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] newfstatat(4, "", [pid 5574] <... mount resumed>) = 0 [pid 5573] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5569] <... futex resumed>) = 0 [pid 5567] +++ exited with 0 +++ [pid 5574] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5573] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5571] rename("./file2", "./file1" [pid 5569] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5567, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [ 82.909990][ T5574] loop4: detected capacity change from 0 to 32768 [ 82.918027][ T5573] ERROR: (device loop3): remounting filesystem as read-only [ 82.933691][ T5573] ERROR: (device loop3): txAbort: [ 82.933691][ T5573] [pid 5057] getdents64(4, [pid 5056] restart_syscall(<... resuming interrupted clone ...> [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] <... restart_syscall resumed>) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./29/file2") = 0 [pid 5056] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3 [pid 5056] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] <... close resumed>) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5057] rmdir("./29" [pid 5056] newfstatat(3, "", [pid 5057] <... rmdir resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] mkdir("./30", 0777 [pid 5056] getdents64(3, [pid 5057] <... mkdir resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5056] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... openat resumed>) = 3 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5574] <... openat resumed>) = 3 [pid 5573] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5056] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./30/binderfs") = 0 [pid 5056] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5574] chdir("./file2" [pid 5573] <... futex resumed>) = 1 [pid 5568] <... futex resumed>) = 0 [pid 5568] exit_group(0 [pid 5574] <... chdir resumed>) = 0 [pid 5568] <... exit_group resumed>) = ? [pid 5571] <... rename resumed>) = -1 EIO (Input/output error) [pid 5576] <... mount resumed>) = 0 [pid 5574] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5573] +++ exited with 0 +++ [pid 5568] +++ exited with 0 +++ [pid 5056] <... umount2 resumed>) = 0 [pid 5574] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5568, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5574] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5574] <... futex resumed>) = 1 [pid 5570] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5574] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5570] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] newfstatat(AT_FDCWD, "./30/file2", [pid 5574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5570] <... futex resumed>) = 0 [pid 5569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5574] rename("./file2", "./file1" [pid 5570] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5569] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [ 82.961197][ T5571] ERROR: (device loop5): diWrite: ixpxd invalid [ 82.961197][ T5571] [ 82.978068][ T5571] ERROR: (device loop5): remounting filesystem as read-only [ 82.985494][ T5571] ERROR: (device loop5): txAbort: [ 82.985494][ T5571] [pid 5059] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5576] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5571] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5569] <... futex resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5571] <... futex resumed>) = 0 [pid 5059] newfstatat(3, "", [pid 5056] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5571] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 5056] openat(AT_FDCWD, "./30/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5576] <... openat resumed>) = 3 [pid 5569] <... mmap resumed>) = 0x7f91a5066000 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] <... openat resumed>) = 4 [pid 5569] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5576] chdir("./file2" [pid 5569] <... mprotect resumed>) = 0 [pid 5056] newfstatat(4, "", [pid 5569] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5576] <... chdir resumed>) = 0 [pid 5569] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5578 attached [pid 5576] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] getdents64(4, [pid 5578] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5569] <... clone3 resumed> => {parent_tid=[5578]}, 88) = 5578 [pid 5578] <... rseq resumed>) = 0 [pid 5569] rt_sigprocmask(SIG_SETMASK, [], [pid 5578] set_robust_list(0x7f91a50869a0, 24 [pid 5569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5578] <... set_robust_list resumed>) = 0 [pid 5569] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5578] rt_sigprocmask(SIG_SETMASK, [], [pid 5569] <... futex resumed>) = 0 [pid 5578] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5569] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5578] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5576] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5059] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5578] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5576] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] getdents64(4, [pid 5576] <... futex resumed>) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5059] unlink("./29/binderfs" [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5576] rename("./file2", "./file1" [pid 5575] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... unlink resumed>) = 0 [pid 5578] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5575] <... futex resumed>) = 0 [pid 5056] close(4 [pid 5578] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... close resumed>) = 0 [pid 5578] <... futex resumed>) = 1 [pid 5569] <... futex resumed>) = 0 [pid 5056] rmdir("./30/file2" [pid 5578] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5569] exit_group(0 [pid 5056] <... rmdir resumed>) = 0 [pid 5578] <... futex resumed>) = ? [pid 5569] <... exit_group resumed>) = ? [pid 5578] +++ exited with 0 +++ [pid 5571] <... futex resumed>) = ? [pid 5056] getdents64(3, [pid 5571] +++ exited with 0 +++ [pid 5569] +++ exited with 0 +++ [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5569, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5056] close(3) = 0 [pid 5063] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] rmdir("./30") = 0 [pid 5056] mkdir("./31", 0777) = 0 [ 83.022349][ T5574] ERROR: (device loop4): diWrite: ixpxd invalid [ 83.022349][ T5574] [ 83.038075][ T5576] ERROR: (device loop2): diWrite: ixpxd invalid [ 83.038075][ T5576] [ 83.058959][ T5574] ERROR: (device loop4): remounting filesystem as read-only [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5570] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5063] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5570] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 3 [pid 5056] <... openat resumed>) = 3 [pid 5570] <... futex resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5570] <... mmap resumed>) = 0x7f91a5066000 [pid 5063] getdents64(3, [pid 5570] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5570] <... mprotect resumed>) = 0 [pid 5063] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5570] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5570] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5579 attached [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5579] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5570] <... clone3 resumed> => {parent_tid=[5579]}, 88) = 5579 [pid 5063] unlink("./29/binderfs" [pid 5579] <... rseq resumed>) = 0 [pid 5570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5579] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5570] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5570] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5579] mkdir(".", 0777 [pid 5063] <... unlink resumed>) = 0 [pid 5579] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5063] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5579] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5570] <... futex resumed>) = 0 [pid 5579] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5575] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5576] <... rename resumed>) = -1 EIO (Input/output error) [pid 5576] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5574] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] <... ioctl resumed>) = 0 [pid 5576] <... futex resumed>) = 0 [pid 5575] <... mmap resumed>) = 0x7f91a5066000 [pid 5576] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5574] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] close(3 [pid 5575] <... mprotect resumed>) = 0 [pid 5574] <... futex resumed>) = 0 [pid 5574] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] <... close resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5580 attached [pid 5575] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5580] set_robust_list(0x5555565206a0, 24) = 0 [pid 5575] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5570] exit_group(0 [pid 5580] chdir("./30" [pid 5579] <... futex resumed>) = ? [pid 5575] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5574] <... futex resumed>) = ? [pid 5570] <... exit_group resumed>) = ? [pid 5579] +++ exited with 0 +++ [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5580 ./strace-static-x86_64: Process 5581 attached [pid 5580] <... chdir resumed>) = 0 [pid 5574] +++ exited with 0 +++ [pid 5570] +++ exited with 0 +++ [pid 5575] <... clone3 resumed> => {parent_tid=[5581]}, 88) = 5581 [pid 5581] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5580] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5570, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5575] rt_sigprocmask(SIG_SETMASK, [], [pid 5581] <... rseq resumed>) = 0 [pid 5580] <... prctl resumed>) = 0 [pid 5575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5581] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5580] setpgid(0, 0 [pid 5575] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5581] rt_sigprocmask(SIG_SETMASK, [], [pid 5580] <... setpgid resumed>) = 0 [pid 5575] <... futex resumed>) = 0 [pid 5581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5581] mkdir(".", 0777 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5575] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5581] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5581] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5581] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5580] <... openat resumed>) = 3 [pid 5060] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5581] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] write(3, "1000", 4 [ 83.067423][ T5576] ERROR: (device loop2): remounting filesystem as read-only [ 83.078832][ T5574] ERROR: (device loop4): txAbort: [ 83.078832][ T5574] [ 83.087856][ T5576] ERROR: (device loop2): txAbort: [ 83.087856][ T5576] [ 83.096849][ T5574] ERROR: (device loop4): remounting filesystem as read-only [pid 5060] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5581] <... futex resumed>) = 1 [pid 5580] <... write resumed>) = 4 [pid 5575] <... futex resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5581] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] close(3 [pid 5575] exit_group(0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5581] <... futex resumed>) = ? [pid 5580] <... close resumed>) = 0 [pid 5576] <... futex resumed>) = ? [pid 5575] <... exit_group resumed>) = ? [pid 5060] getdents64(3, [pid 5581] +++ exited with 0 +++ [pid 5580] symlink("/dev/binderfs", "./binderfs" [pid 5576] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5580] <... symlink resumed>) = 0 [pid 5060] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5580] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5580] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5060] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5580] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5580] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] unlink("./28/binderfs" [pid 5580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5575] +++ exited with 0 +++ [pid 5060] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5580] <... mmap resumed>) = 0x7f91a5087000 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5575, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5580] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5058] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5580] <... mprotect resumed>) = 0 [pid 5058] <... openat resumed>) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5580] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5580] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5058] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./30/binderfs", ./strace-static-x86_64: Process 5582 attached [pid 5060] <... umount2 resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5582] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5580] <... clone3 resumed> => {parent_tid=[5582]}, 88) = 5582 [pid 5060] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] unlink("./30/binderfs" [pid 5582] <... rseq resumed>) = 0 [pid 5580] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... unlink resumed>) = 0 [pid 5582] set_robust_list(0x7f91a50a79a0, 24 [pid 5580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] newfstatat(AT_FDCWD, "./28/file2", [pid 5058] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] <... set_robust_list resumed>) = 0 [pid 5580] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5582] rt_sigprocmask(SIG_SETMASK, [], [pid 5580] <... futex resumed>) = 0 [pid 5060] umount2("./28/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5580] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./28/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./28/file2" [pid 5582] memfd_create("syzkaller", 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./28" [pid 5582] <... memfd_create resumed>) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] mkdir("./29", 0777 [pid 5058] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] <... mmap resumed>) = 0x7f919cc00000 [pid 5060] <... mkdir resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5058] newfstatat(AT_FDCWD, "./30/file2", [pid 5060] <... openat resumed>) = 3 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5058] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./30/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./30/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./30") = 0 [pid 5058] mkdir("./31", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5583 ./strace-static-x86_64: Process 5583 attached [pid 5583] set_robust_list(0x5555565206a0, 24) = 0 [pid 5583] chdir("./31") = 0 [pid 5583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5583] setpgid(0, 0) = 0 [pid 5583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5583] write(3, "1000", 4) = 4 [pid 5583] close(3) = 0 [pid 5583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5583] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5583] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5583] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5583] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5583] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5584 attached => {parent_tid=[5584]}, 88) = 5584 [pid 5584] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5583] rt_sigprocmask(SIG_SETMASK, [], [pid 5584] <... rseq resumed>) = 0 [pid 5583] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5584] set_robust_list(0x7f91a50a79a0, 24 [pid 5583] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5584] <... set_robust_list resumed>) = 0 [pid 5583] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5584] memfd_create("syzkaller", 0) = 3 [pid 5584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5584] <... mmap resumed>) = 0x7f919cc00000 [pid 5059] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./29/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./29/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./29/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./29" [pid 5063] <... umount2 resumed>) = 0 [pid 5060] close(3 [pid 5059] <... rmdir resumed>) = 0 [pid 5063] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5059] mkdir("./30", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] newfstatat(AT_FDCWD, "./29/file2", [pid 5059] <... openat resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5585 [pid 5059] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5585 attached [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5585] set_robust_list(0x5555565206a0, 24 [pid 5063] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5585] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5585] chdir("./29" [pid 5063] openat(AT_FDCWD, "./29/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5585] <... chdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] newfstatat(4, "", [pid 5585] <... prctl resumed>) = 0 [pid 5585] setpgid(0, 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5585] <... setpgid resumed>) = 0 [pid 5063] getdents64(4, [pid 5585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5585] <... openat resumed>) = 3 [pid 5063] close(4 [pid 5585] write(3, "1000", 4) = 4 [pid 5063] <... close resumed>) = 0 [pid 5585] close(3 [pid 5063] rmdir("./29/file2" [pid 5585] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5585] symlink("/dev/binderfs", "./binderfs" [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5585] <... symlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./29" [pid 5585] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 5585] <... futex resumed>) = 0 [pid 5585] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] mkdir("./30", 0777 [pid 5585] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5585] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... mkdir resumed>) = 0 [pid 5585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... openat resumed>) = 3 [pid 5585] <... mmap resumed>) = 0x7f91a5087000 [pid 5585] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5585] <... mprotect resumed>) = 0 [pid 5585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5586 attached => {parent_tid=[5586]}, 88) = 5586 [pid 5584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5586] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5585] rt_sigprocmask(SIG_SETMASK, [], [pid 5586] <... rseq resumed>) = 0 [pid 5586] set_robust_list(0x7f91a50a79a0, 24 [pid 5585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5586] <... set_robust_list resumed>) = 0 [pid 5585] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] rt_sigprocmask(SIG_SETMASK, [], [pid 5585] <... futex resumed>) = 0 [pid 5586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5585] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5586] memfd_create("syzkaller", 0) = 3 [pid 5586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5587 ./strace-static-x86_64: Process 5587 attached [pid 5587] set_robust_list(0x5555565206a0, 24) = 0 [pid 5587] chdir("./31") = 0 [pid 5587] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5587] setpgid(0, 0) = 0 [pid 5587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5587] write(3, "1000", 4) = 4 [pid 5587] close(3) = 0 [pid 5587] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5587] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5587] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5587] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5587] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5587] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5588]}, 88) = 5588 [pid 5587] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5587] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5587] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5588 attached [pid 5588] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5588] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5588] memfd_create("syzkaller", 0) = 3 [pid 5588] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5582] <... write resumed>) = 16777216 [pid 5582] munmap(0x7f919cc00000, 138412032) = 0 [pid 5582] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5582] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5582] close(3) = 0 [pid 5582] close(4) = 0 [pid 5582] mkdir("./file2", 0777) = 0 [pid 5582] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [ 83.662050][ T5582] loop1: detected capacity change from 0 to 32768 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5589 attached [pid 5589] set_robust_list(0x5555565206a0, 24 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5589 [pid 5589] <... set_robust_list resumed>) = 0 [pid 5589] chdir("./30") = 0 [pid 5589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5589] setpgid(0, 0 [pid 5582] <... mount resumed>) = 0 [pid 5589] <... setpgid resumed>) = 0 [pid 5582] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5582] chdir("./file2") = 0 [pid 5582] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5582] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5580] <... futex resumed>) = 0 [pid 5580] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5582] rename("./file2", "./file1" [pid 5589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5589] write(3, "1000", 4) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 5589] close(3 [pid 5063] close(3 [pid 5589] <... close resumed>) = 0 [pid 5589] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 [pid 5589] <... symlink resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5589] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5590 attached ) = 0 [pid 5586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5589] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5590 [pid 5589] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5589] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5590] set_robust_list(0x5555565206a0, 24 [pid 5589] <... mmap resumed>) = 0x7f91a5087000 [ 83.735865][ T5582] ERROR: (device loop1): diWrite: ixpxd invalid [ 83.735865][ T5582] [ 83.757006][ T5582] ERROR: (device loop1): remounting filesystem as read-only [ 83.779590][ T5582] ERROR: (device loop1): txAbort: [pid 5589] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5590] <... set_robust_list resumed>) = 0 [pid 5588] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5580] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5589] <... mprotect resumed>) = 0 [pid 5580] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5590] chdir("./30" [pid 5589] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5580] <... futex resumed>) = 0 [pid 5582] <... rename resumed>) = -1 EIO (Input/output error) [pid 5582] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5582] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5590] <... chdir resumed>) = 0 [pid 5589] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5590] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5580] <... mmap resumed>) = 0x7f91a5066000 [pid 5589] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5590] <... prctl resumed>) = 0 [pid 5580] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5590] setpgid(0, 0) = 0 [pid 5589] <... clone3 resumed> => {parent_tid=[5591]}, 88) = 5591 [pid 5580] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5591 attached [pid 5590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5589] rt_sigprocmask(SIG_SETMASK, [], [pid 5580] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5591] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5590] <... openat resumed>) = 3 [pid 5589] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5580] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5591] <... rseq resumed>) = 0 [pid 5590] write(3, "1000", 4 [pid 5589] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [ 83.779590][ T5582] [pid 5591] set_robust_list(0x7f91a50a79a0, 24 [pid 5590] <... write resumed>) = 4 [pid 5589] <... futex resumed>) = 0 [pid 5591] <... set_robust_list resumed>) = 0 [pid 5590] close(3 [pid 5589] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5591] rt_sigprocmask(SIG_SETMASK, [], [pid 5590] <... close resumed>) = 0 [pid 5590] symlink("/dev/binderfs", "./binderfs" [pid 5591] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5592 attached [pid 5591] memfd_create("syzkaller", 0 [pid 5590] <... symlink resumed>) = 0 [pid 5591] <... memfd_create resumed>) = 3 [pid 5592] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5592] <... rseq resumed>) = 0 [pid 5591] <... mmap resumed>) = 0x7f919cc00000 [pid 5592] set_robust_list(0x7f91a50869a0, 24 [pid 5590] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] <... write resumed>) = 16777216 [pid 5580] <... clone3 resumed> => {parent_tid=[5592]}, 88) = 5592 [pid 5592] <... set_robust_list resumed>) = 0 [pid 5590] <... futex resumed>) = 0 [pid 5584] munmap(0x7f919cc00000, 138412032 [pid 5580] rt_sigprocmask(SIG_SETMASK, [], [pid 5592] rt_sigprocmask(SIG_SETMASK, [], [pid 5590] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5592] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5590] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5580] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5580] <... futex resumed>) = 0 [pid 5592] mkdir(".", 0777 [pid 5580] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5592] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5592] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5590] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5592] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5590] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5592] <... futex resumed>) = 1 [pid 5584] <... munmap resumed>) = 0 [pid 5580] <... futex resumed>) = 0 [pid 5592] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5590] <... mmap resumed>) = 0x7f91a5087000 [pid 5584] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5580] exit_group(0 [pid 5590] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5580] <... exit_group resumed>) = ? [pid 5592] <... futex resumed>) = ? [pid 5592] +++ exited with 0 +++ [pid 5590] <... mprotect resumed>) = 0 [pid 5590] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5582] <... futex resumed>) = ? [pid 5590] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5584] <... openat resumed>) = 4 [pid 5590] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5584] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5593 attached [pid 5582] +++ exited with 0 +++ [pid 5580] +++ exited with 0 +++ [pid 5590] <... clone3 resumed> => {parent_tid=[5593]}, 88) = 5593 [pid 5593] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5590] rt_sigprocmask(SIG_SETMASK, [], [pid 5593] <... rseq resumed>) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5580, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- [pid 5593] set_robust_list(0x7f91a50a79a0, 24 [pid 5590] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5590] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5593] <... set_robust_list resumed>) = 0 [pid 5590] <... futex resumed>) = 0 [pid 5593] rt_sigprocmask(SIG_SETMASK, [], [pid 5590] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5593] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5593] memfd_create("syzkaller", 0 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, [pid 5593] <... memfd_create resumed>) = 3 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5584] <... ioctl resumed>) = 0 [pid 5057] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5584] close(3) = 0 [pid 5593] <... mmap resumed>) = 0x7f919cc00000 [pid 5584] close(4 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5584] <... close resumed>) = 0 [pid 5057] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5584] mkdir("./file2", 0777 [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./30/binderfs") = 0 [pid 5057] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5584] <... mkdir resumed>) = 0 [pid 5584] mount("/dev/loop0", "./file2", "jfs", 0, "") = 0 [pid 5584] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5584] chdir("./file2") = 0 [pid 5584] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5584] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5583] <... futex resumed>) = 0 [pid 5584] <... futex resumed>) = 1 [pid 5583] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] rename("./file2", "./file1" [pid 5583] <... futex resumed>) = 0 [ 83.864319][ T5584] loop0: detected capacity change from 0 to 32768 [pid 5583] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... umount2 resumed>) = 0 [ 83.915667][ T5584] ERROR: (device loop0): diWrite: ixpxd invalid [ 83.915667][ T5584] [pid 5057] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./30/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5583] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5583] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5583] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5057] openat(AT_FDCWD, "./30/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5583] <... mprotect resumed>) = 0 [pid 5057] <... openat resumed>) = 4 [pid 5583] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5057] newfstatat(4, "", [pid 5583] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5583] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5586] <... write resumed>) = 16777216 [pid 5057] getdents64(4, ./strace-static-x86_64: Process 5594 attached 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5594] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5057] getdents64(4, [pid 5594] set_robust_list(0x7f91a50869a0, 24 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5594] <... set_robust_list resumed>) = 0 [pid 5583] <... clone3 resumed> => {parent_tid=[5594]}, 88) = 5594 [pid 5057] close(4 [pid 5594] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5583] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] <... close resumed>) = 0 [pid 5594] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] rmdir("./30/file2" [pid 5583] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5583] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... rmdir resumed>) = 0 [pid 5594] <... futex resumed>) = 0 [pid 5583] <... futex resumed>) = 1 [pid 5057] getdents64(3, [pid 5594] mkdir(".", 0777 [pid 5583] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5594] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5594] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5057] close(3 [pid 5594] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5594] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5583] <... futex resumed>) = 0 [pid 5057] <... close resumed>) = 0 [ 83.963598][ T5584] ERROR: (device loop0): remounting filesystem as read-only [ 83.983897][ T5584] ERROR: (device loop0): txAbort: [ 83.983897][ T5584] [pid 5057] rmdir("./30") = 0 [pid 5057] mkdir("./31", 0777 [pid 5586] munmap(0x7f919cc00000, 138412032 [pid 5588] <... write resumed>) = 16777216 [pid 5591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5584] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] <... mkdir resumed>) = 0 [pid 5588] munmap(0x7f919cc00000, 138412032 [pid 5586] <... munmap resumed>) = 0 [pid 5584] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5586] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5584] <... futex resumed>) = 0 [pid 5583] exit_group(0 [pid 5594] <... futex resumed>) = ? [pid 5586] <... openat resumed>) = 4 [pid 5583] <... exit_group resumed>) = ? [pid 5057] <... openat resumed>) = 3 [pid 5594] +++ exited with 0 +++ [pid 5586] ioctl(4, LOOP_SET_FD, 3 [pid 5584] +++ exited with 0 +++ [ 84.008715][ T5584] ERROR: (device loop0): remounting filesystem as read-only [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5583] +++ exited with 0 +++ [pid 5588] <... munmap resumed>) = 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5583, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=19 /* 0.19 s */} --- [pid 5586] <... ioctl resumed>) = 0 [pid 5586] close(3) = 0 [pid 5586] close(4 [pid 5056] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5586] <... close resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5586] mkdir("./file2", 0777 [pid 5056] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5586] <... mkdir resumed>) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5586] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5588] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] getdents64(3, [pid 5588] <... openat resumed>) = 4 [pid 5588] ioctl(4, LOOP_SET_FD, 3 [pid 5586] <... mount resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5586] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5056] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5586] chdir("./file2" [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5588] <... ioctl resumed>) = 0 [pid 5588] close(3) = 0 [pid 5588] close(4) = 0 [pid 5588] mkdir("./file2", 0777) = 0 [pid 5588] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5586] <... chdir resumed>) = 0 [pid 5056] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5586] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5586] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5586] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] unlink("./31/binderfs" [pid 5586] <... futex resumed>) = 1 [pid 5585] <... futex resumed>) = 0 [ 84.045038][ T5586] loop4: detected capacity change from 0 to 32768 [ 84.066476][ T5588] loop2: detected capacity change from 0 to 32768 [pid 5586] rename("./file2", "./file1" [pid 5585] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... unlink resumed>) = 0 [pid 5585] <... futex resumed>) = 0 [pid 5056] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5585] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5588] <... mount resumed>) = 0 [pid 5588] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5588] chdir("./file2") = 0 [pid 5588] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5588] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5587] <... futex resumed>) = 0 [pid 5587] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5587] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5588] <... futex resumed>) = 1 [ 84.105164][ T5586] ERROR: (device loop4): diWrite: ixpxd invalid [ 84.105164][ T5586] [ 84.128851][ T5588] ERROR: (device loop2): diWrite: ixpxd invalid [ 84.128851][ T5588] [pid 5588] rename("./file2", "./file1" [pid 5587] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] <... umount2 resumed>) = 0 [pid 5587] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5587] <... futex resumed>) = 0 [pid 5585] <... futex resumed>) = 0 [pid 5056] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5587] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5587] <... mmap resumed>) = 0x7f91a5066000 [pid 5585] <... mmap resumed>) = 0x7f91a5066000 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5587] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5585] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5056] newfstatat(AT_FDCWD, "./31/file2", [pid 5587] <... mprotect resumed>) = 0 [pid 5586] <... rename resumed>) = -1 EIO (Input/output error) [pid 5585] <... mprotect resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5587] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5586] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5585] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5056] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5587] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5586] <... futex resumed>) = 0 [pid 5585] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5587] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5586] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5596 attached [ 84.151279][ T5586] ERROR: (device loop4): remounting filesystem as read-only [ 84.158577][ T5586] ERROR: (device loop4): txAbort: [ 84.158577][ T5586] [ 84.167760][ T5588] ERROR: (device loop2): remounting filesystem as read-only [pid 5056] openat(AT_FDCWD, "./31/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5596] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5587] <... clone3 resumed> => {parent_tid=[5595]}, 88) = 5595 [pid 5585] <... clone3 resumed> => {parent_tid=[5596]}, 88) = 5596 [pid 5056] <... openat resumed>) = 4 [pid 5056] newfstatat(4, "", [pid 5585] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5595 attached [pid 5587] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5595] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5595] <... rseq resumed>) = 0 [pid 5587] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5595] set_robust_list(0x7f91a50869a0, 24 [pid 5587] <... futex resumed>) = 0 [pid 5595] <... set_robust_list resumed>) = 0 [pid 5587] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5595] rt_sigprocmask(SIG_SETMASK, [], [pid 5596] <... rseq resumed>) = 0 [pid 5585] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] getdents64(4, [pid 5585] <... futex resumed>) = 0 [pid 5595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5585] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5595] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5596] set_robust_list(0x7f91a50869a0, 24 [pid 5056] getdents64(4, [pid 5595] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5596] <... set_robust_list resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4 [pid 5596] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./31/file2" [pid 5595] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... rmdir resumed>) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5595] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] close(3 [pid 5595] <... futex resumed>) = 1 [pid 5587] <... futex resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] rmdir("./31" [pid 5596] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5056] <... rmdir resumed>) = 0 [pid 5596] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5056] mkdir("./32", 0777 [pid 5595] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5596] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... mkdir resumed>) = 0 [pid 5596] <... futex resumed>) = 1 [pid 5585] <... futex resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5585] exit_group(0 [pid 5586] <... futex resumed>) = ? [pid 5585] <... exit_group resumed>) = ? [pid 5056] <... openat resumed>) = 3 [pid 5586] +++ exited with 0 +++ [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5596] +++ exited with 0 +++ [pid 5585] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5585, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=15 /* 0.15 s */} --- [pid 5588] <... rename resumed>) = -1 EIO (Input/output error) [pid 5588] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5588] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5587] exit_group(0 [pid 5595] <... futex resumed>) = ? [pid 5588] <... futex resumed>) = ? [pid 5587] <... exit_group resumed>) = ? [pid 5595] +++ exited with 0 +++ [pid 5588] +++ exited with 0 +++ [pid 5587] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5587, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5058] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] newfstatat(3, "", [pid 5060] <... openat resumed>) = 3 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5060] getdents64(3, [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5060] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./31/binderfs" [pid 5060] unlink("./29/binderfs" [pid 5058] <... unlink resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5058] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./31/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 84.202752][ T5588] ERROR: (device loop2): txAbort: [ 84.202752][ T5588] [ 84.234167][ T5588] ERROR: (device loop2): remounting filesystem as read-only [pid 5058] openat(AT_FDCWD, "./31/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./31/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./31" [pid 5057] <... ioctl resumed>) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5058] mkdir("./32", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5597 ./strace-static-x86_64: Process 5597 attached [pid 5597] set_robust_list(0x5555565206a0, 24) = 0 [pid 5597] chdir("./31") = 0 [pid 5597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5597] setpgid(0, 0) = 0 [pid 5597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5597] write(3, "1000", 4) = 4 [pid 5597] close(3) = 0 [pid 5597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5597] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5593] <... write resumed>) = 16777216 [pid 5593] munmap(0x7f919cc00000, 138412032 [pid 5597] <... futex resumed>) = 0 [pid 5593] <... munmap resumed>) = 0 [pid 5593] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5597] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5593] <... openat resumed>) = 4 [pid 5591] <... write resumed>) = 16777216 [pid 5597] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5597] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5593] ioctl(4, LOOP_SET_FD, 3 [pid 5591] munmap(0x7f919cc00000, 138412032 [pid 5597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5597] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5598]}, 88) = 5598 [pid 5597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5597] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5597] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5593] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5598 attached [pid 5591] <... munmap resumed>) = 0 [pid 5598] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5598] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5593] close(3 [pid 5591] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5598] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5598] memfd_create("syzkaller", 0) = 3 [pid 5598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5593] <... close resumed>) = 0 [pid 5593] close(4 [pid 5591] <... openat resumed>) = 4 [pid 5593] <... close resumed>) = 0 [pid 5591] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5593] mkdir("./file2", 0777) = 0 [pid 5593] mount("/dev/loop5", "./file2", "jfs", 0, "") = 0 [pid 5591] close(3 [pid 5593] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5591] <... close resumed>) = 0 [pid 5593] <... openat resumed>) = 3 [pid 5591] close(4 [pid 5593] chdir("./file2" [pid 5591] <... close resumed>) = 0 [pid 5593] <... chdir resumed>) = 0 [pid 5593] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5591] mkdir("./file2", 0777 [pid 5593] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 84.343781][ T5593] loop5: detected capacity change from 0 to 32768 [ 84.372249][ T5591] loop3: detected capacity change from 0 to 32768 [pid 5593] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5591] <... mkdir resumed>) = 0 [pid 5593] <... futex resumed>) = 1 [pid 5591] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5590] <... futex resumed>) = 0 [pid 5593] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5591] <... mount resumed>) = 0 [pid 5590] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5593] <... futex resumed>) = 0 [pid 5591] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5590] <... futex resumed>) = 1 [pid 5593] rename("./file2", "./file1" [pid 5591] <... openat resumed>) = 3 [pid 5590] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5591] chdir("./file2") = 0 [pid 5591] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5591] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5589] <... futex resumed>) = 0 [pid 5591] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5589] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5591] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5591] rename("./file2", "./file1" [pid 5589] <... futex resumed>) = 0 [ 84.433836][ T5593] ERROR: (device loop5): diWrite: ixpxd invalid [ 84.433836][ T5593] [ 84.457723][ T5591] ERROR: (device loop3): diWrite: ixpxd invalid [ 84.457723][ T5591] [ 84.467802][ T5593] ERROR: (device loop5): remounting filesystem as read-only [pid 5589] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5590] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5590] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5590] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5590] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5591] <... rename resumed>) = -1 EIO (Input/output error) [pid 5593] <... rename resumed>) = -1 EIO (Input/output error) [pid 5591] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5590] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5589] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] <... ioctl resumed>) = 0 [pid 5591] <... futex resumed>) = 0 [pid 5590] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5589] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] close(3 [pid 5056] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5599 attached [pid 5591] mkdir(".", 0777 [pid 5589] <... futex resumed>) = 0 [pid 5590] <... clone3 resumed> => {parent_tid=[5599]}, 88) = 5599 [pid 5589] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5599] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5590] rt_sigprocmask(SIG_SETMASK, [], [pid 5591] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5058] <... close resumed>) = 0 [pid 5591] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5599] <... rseq resumed>) = 0 [pid 5593] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5590] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5600 attached [pid 5599] set_robust_list(0x7f91a50869a0, 24 [pid 5593] <... futex resumed>) = 0 [pid 5590] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5600] set_robust_list(0x5555565206a0, 24 [pid 5599] <... set_robust_list resumed>) = 0 [pid 5593] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5591] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5590] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5600] <... set_robust_list resumed>) = 0 [pid 5599] rt_sigprocmask(SIG_SETMASK, [], [pid 5591] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5590] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5600 [pid 5600] chdir("./32" [pid 5599] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5591] <... futex resumed>) = 1 [pid 5589] <... futex resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./29/file2", [pid 5056] close(3 [pid 5600] <... chdir resumed>) = 0 [pid 5599] mkdir(".", 0777 [pid 5591] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5589] exit_group(0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] <... close resumed>) = 0 [pid 5600] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5599] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5591] <... futex resumed>) = ? [pid 5589] <... exit_group resumed>) = ? [pid 5060] umount2("./29/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5600] <... prctl resumed>) = 0 [pid 5599] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5591] +++ exited with 0 +++ [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5589] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5589, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5059] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5600] setpgid(0, 0 [pid 5599] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5600] <... setpgid resumed>) = 0 [pid 5599] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] openat(AT_FDCWD, "./29/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5601 attached [pid 5600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5599] <... futex resumed>) = 1 [pid 5590] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5059] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5601 [pid 5601] set_robust_list(0x5555565206a0, 24 [pid 5599] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5590] exit_group(0 [pid 5060] newfstatat(4, "", [pid 5059] <... openat resumed>) = 3 [pid 5600] <... openat resumed>) = 3 [pid 5601] <... set_robust_list resumed>) = 0 [pid 5599] <... futex resumed>) = ? [pid 5593] <... futex resumed>) = ? [pid 5600] write(3, "1000", 4 [pid 5590] <... exit_group resumed>) = ? [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] newfstatat(3, "", [pid 5593] +++ exited with 0 +++ [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5601] chdir("./32" [pid 5600] <... write resumed>) = 4 [pid 5599] +++ exited with 0 +++ [pid 5590] +++ exited with 0 +++ [pid 5060] getdents64(4, [pid 5059] getdents64(3, [pid 5601] <... chdir resumed>) = 0 [pid 5600] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5590, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=16 /* 0.16 s */} --- [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [ 84.481369][ T5591] ERROR: (device loop3): remounting filesystem as read-only [ 84.502127][ T5591] ERROR: (device loop3): txAbort: [ 84.502127][ T5591] [ 84.511175][ T5593] ERROR: (device loop5): txAbort: [ 84.511175][ T5593] [pid 5601] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5600] <... close resumed>) = 0 [pid 5060] getdents64(4, [pid 5059] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5600] symlink("/dev/binderfs", "./binderfs" [pid 5063] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5600] <... symlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] close(4 [pid 5059] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5600] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... close resumed>) = 0 [pid 5600] <... futex resumed>) = 0 [pid 5060] rmdir("./29/file2" [pid 5600] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5600] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] <... rmdir resumed>) = 0 [pid 5059] unlink("./30/binderfs" [pid 5601] <... prctl resumed>) = 0 [pid 5600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] newfstatat(3, "", [pid 5060] getdents64(3, [pid 5059] <... unlink resumed>) = 0 [pid 5600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] getdents64(3, [pid 5060] close(3 [pid 5600] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] <... close resumed>) = 0 [pid 5601] setpgid(0, 0 [pid 5600] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./29" [pid 5601] <... setpgid resumed>) = 0 [pid 5600] <... mprotect resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./30/binderfs" [pid 5060] <... rmdir resumed>) = 0 [pid 5601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5600] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... unlink resumed>) = 0 [pid 5060] mkdir("./30", 0777 [pid 5063] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5601] <... openat resumed>) = 3 [pid 5600] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5601] write(3, "1000", 4 [pid 5600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5601] <... write resumed>) = 4 ./strace-static-x86_64: Process 5602 attached [pid 5601] close(3 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... umount2 resumed>) = 0 [pid 5602] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5601] <... close resumed>) = 0 [pid 5600] <... clone3 resumed> => {parent_tid=[5602]}, 88) = 5602 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5059] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5602] <... rseq resumed>) = 0 [pid 5601] symlink("/dev/binderfs", "./binderfs" [pid 5600] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5602] set_robust_list(0x7f91a50a79a0, 24 [pid 5059] newfstatat(AT_FDCWD, "./30/file2", [pid 5602] <... set_robust_list resumed>) = 0 [pid 5601] <... symlink resumed>) = 0 [pid 5600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5602] rt_sigprocmask(SIG_SETMASK, [], [pid 5601] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5601] <... futex resumed>) = 0 [pid 5600] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5602] memfd_create("syzkaller", 0 [pid 5601] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5600] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] openat(AT_FDCWD, "./30/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5602] <... memfd_create resumed>) = 3 [pid 5601] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5601] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] newfstatat(4, "", [pid 5602] <... mmap resumed>) = 0x7f919cc00000 [pid 5601] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5598] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] newfstatat(AT_FDCWD, "./30/file2", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5601] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] getdents64(4, [pid 5601] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5601] <... mprotect resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(4, [pid 5601] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] openat(AT_FDCWD, "./30/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5601] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5601] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5059] close(4 [pid 5063] newfstatat(4, "", [pid 5059] <... close resumed>) = 0 ./strace-static-x86_64: Process 5603 attached [pid 5601] <... clone3 resumed> => {parent_tid=[5603]}, 88) = 5603 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5603] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5601] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] getdents64(4, [pid 5059] rmdir("./30/file2" [pid 5601] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] <... rmdir resumed>) = 0 [pid 5603] <... rseq resumed>) = 0 [pid 5601] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5603] set_robust_list(0x7f91a50a79a0, 24 [pid 5601] <... futex resumed>) = 0 [pid 5603] <... set_robust_list resumed>) = 0 [pid 5601] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] getdents64(4, [pid 5603] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5063] close(4 [pid 5059] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5059] rmdir("./30" [pid 5063] rmdir("./30/file2") = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./31", 0777 [pid 5063] getdents64(3, [pid 5059] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./30" [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5063] mkdir("./31", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5603] memfd_create("syzkaller", 0) = 3 [pid 5603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5598] <... write resumed>) = 16777216 [pid 5060] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5598] munmap(0x7f919cc00000, 138412032./strace-static-x86_64: Process 5604 attached [pid 5604] set_robust_list(0x5555565206a0, 24) = 0 [pid 5598] <... munmap resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5604 [pid 5604] chdir("./30") = 0 [pid 5604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5604] setpgid(0, 0) = 0 [pid 5604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "1000", 4) = 4 [pid 5604] close(3) = 0 [pid 5604] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5604] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5604] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5604] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5605 attached => {parent_tid=[5605]}, 88) = 5605 [pid 5605] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5604] rt_sigprocmask(SIG_SETMASK, [], [pid 5605] <... rseq resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5605] set_robust_list(0x7f91a50a79a0, 24 [pid 5598] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... ioctl resumed>) = 0 [pid 5598] <... openat resumed>) = 4 [pid 5059] close(3 [pid 5598] ioctl(4, LOOP_SET_FD, 3 [pid 5605] <... set_robust_list resumed>) = 0 [pid 5604] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5605] rt_sigprocmask(SIG_SETMASK, [], [pid 5604] <... futex resumed>) = 0 [pid 5605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5604] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5605] memfd_create("syzkaller", 0) = 3 [pid 5605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5059] <... close resumed>) = 0 [pid 5598] <... ioctl resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5606 attached [pid 5598] close(3 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5606 [pid 5606] set_robust_list(0x5555565206a0, 24 [pid 5598] <... close resumed>) = 0 [pid 5598] close(4 [pid 5606] <... set_robust_list resumed>) = 0 [pid 5606] chdir("./31") = 0 [pid 5598] <... close resumed>) = 0 [pid 5606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5606] setpgid(0, 0) = 0 [pid 5598] mkdir("./file2", 0777 [pid 5606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5598] <... mkdir resumed>) = 0 [pid 5606] write(3, "1000", 4 [pid 5598] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5606] <... write resumed>) = 4 [pid 5606] close(3) = 0 [pid 5606] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5606] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... ioctl resumed>) = 0 [pid 5606] <... futex resumed>) = 0 [pid 5606] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5598] <... mount resumed>) = 0 [pid 5598] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5598] <... openat resumed>) = 3 [pid 5606] <... mmap resumed>) = 0x7f91a5087000 [pid 5606] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5063] close(3 [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... close resumed>) = 0 [ 84.932642][ T5598] loop1: detected capacity change from 0 to 32768 [pid 5606] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5608 attached [pid 5598] chdir("./file2" [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5607 [pid 5608] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5598] <... chdir resumed>) = 0 [pid 5606] <... clone3 resumed> => {parent_tid=[5608]}, 88) = 5608 [pid 5608] <... rseq resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], [pid 5608] set_robust_list(0x7f91a50a79a0, 24./strace-static-x86_64: Process 5607 attached [pid 5607] set_robust_list(0x5555565206a0, 24 [pid 5608] <... set_robust_list resumed>) = 0 [pid 5607] <... set_robust_list resumed>) = 0 [pid 5606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5608] rt_sigprocmask(SIG_SETMASK, [], [pid 5606] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5606] <... futex resumed>) = 0 [pid 5608] memfd_create("syzkaller", 0 [pid 5607] chdir("./31") = 0 [pid 5606] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5598] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5607] setpgid(0, 0) = 0 [pid 5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5607] write(3, "1000", 4) = 4 [pid 5607] close(3) = 0 [pid 5607] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5607] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5608] <... memfd_create resumed>) = 3 [pid 5607] <... futex resumed>) = 0 [pid 5598] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5598] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5608] <... mmap resumed>) = 0x7f919cc00000 [pid 5607] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5598] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5597] <... futex resumed>) = 0 [pid 5607] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5597] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5598] <... futex resumed>) = 0 [pid 5597] <... futex resumed>) = 1 [pid 5598] rename("./file2", "./file1" [pid 5597] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5607] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5607] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5607] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5607] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5607] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5609]}, 88) = 5609 [pid 5607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5609 attached [pid 5607] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5607] <... futex resumed>) = 0 [pid 5609] <... rseq resumed>) = 0 [pid 5607] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5609] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5597] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5597] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] memfd_create("syzkaller", 0 [pid 5597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... memfd_create resumed>) = 3 [pid 5597] <... mmap resumed>) = 0x7f91a5066000 [pid 5609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5597] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [ 85.032717][ T5598] ERROR: (device loop1): diWrite: ixpxd invalid [ 85.032717][ T5598] [ 85.056018][ T5598] ERROR: (device loop1): remounting filesystem as read-only [pid 5597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5610 attached [pid 5610] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5597] <... clone3 resumed> => {parent_tid=[5610]}, 88) = 5610 [pid 5610] <... rseq resumed>) = 0 [pid 5597] rt_sigprocmask(SIG_SETMASK, [], [pid 5610] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5597] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5597] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5610] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5610] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5598] <... rename resumed>) = -1 EIO (Input/output error) [pid 5598] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5598] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] <... futex resumed>) = 1 [pid 5603] <... write resumed>) = 16777216 [pid 5597] <... futex resumed>) = 0 [pid 5610] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5597] exit_group(0) = ? [pid 5598] <... futex resumed>) = ? [pid 5598] +++ exited with 0 +++ [pid 5610] <... futex resumed>) = ? [ 85.096020][ T5598] ERROR: (device loop1): txAbort: [ 85.096020][ T5598] [ 85.122036][ T5598] ERROR: (device loop1): remounting filesystem as read-only [pid 5610] +++ exited with 0 +++ [pid 5597] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5597, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=17 /* 0.17 s */} --- [pid 5057] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5603] munmap(0x7f919cc00000, 138412032) = 0 [pid 5057] <... openat resumed>) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5602] <... write resumed>) = 16777216 [pid 5608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5603] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5602] munmap(0x7f919cc00000, 138412032 [pid 5057] getdents64(3, [pid 5609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5603] <... openat resumed>) = 4 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5603] ioctl(4, LOOP_SET_FD, 3 [pid 5057] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./31/binderfs") = 0 [pid 5057] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5057] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./31/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./31/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./31/file2") = 0 [pid 5057] getdents64(3, [pid 5602] <... munmap resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./31") = 0 [pid 5057] mkdir("./32", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5603] <... ioctl resumed>) = 0 [pid 5603] close(3) = 0 [pid 5603] close(4) = 0 [pid 5603] mkdir("./file2", 0777) = 0 [pid 5603] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5602] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 85.236244][ T5603] loop0: detected capacity change from 0 to 32768 [pid 5603] <... mount resumed>) = 0 [pid 5602] ioctl(4, LOOP_SET_FD, 3 [pid 5603] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5602] <... ioctl resumed>) = 0 [pid 5603] chdir("./file2") = 0 [pid 5603] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5603] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5601] <... futex resumed>) = 0 [pid 5603] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5601] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5601] <... futex resumed>) = 0 [pid 5603] rename("./file2", "./file1" [pid 5601] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5602] close(3) = 0 [pid 5602] close(4) = 0 [pid 5602] mkdir("./file2", 0777) = 0 [pid 5602] mount("/dev/loop2", "./file2", "jfs", 0, "") = 0 [pid 5602] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5602] chdir("./file2") = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 85.282393][ T5602] loop2: detected capacity change from 0 to 32768 [ 85.294566][ T5603] ERROR: (device loop0): diWrite: ixpxd invalid [ 85.294566][ T5603] [ 85.305262][ T5603] ERROR: (device loop0): remounting filesystem as read-only [pid 5602] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5602] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5602] rename("./file2", "./file1" [pid 5600] <... futex resumed>) = 0 [pid 5600] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5601] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5601] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5601] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [ 85.341761][ T5602] ERROR: (device loop2): diWrite: ixpxd invalid [ 85.341761][ T5602] [ 85.350327][ T5603] ERROR: (device loop0): txAbort: [ 85.350327][ T5603] [pid 5603] <... rename resumed>) = -1 EIO (Input/output error) [pid 5601] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5603] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5601] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5603] <... futex resumed>) = 0 [pid 5603] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5601] <... clone3 resumed> => {parent_tid=[5611]}, 88) = 5611 [pid 5601] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5611 attached NULL, 8) = 0 [pid 5600] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5611] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5601] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... rseq resumed>) = 0 [pid 5601] <... futex resumed>) = 0 [pid 5600] <... futex resumed>) = 0 [pid 5611] set_robust_list(0x7f91a50869a0, 24 [pid 5601] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5611] <... set_robust_list resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [], [pid 5600] <... mmap resumed>) = 0x7f91a5066000 [pid 5611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5611] mkdir(".", 0777 [pid 5600] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5611] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5611] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5600] <... mprotect resumed>) = 0 [pid 5611] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5611] <... futex resumed>) = 1 [pid 5601] <... futex resumed>) = 0 [pid 5600] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5611] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5601] exit_group(0 [pid 5600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5603] <... futex resumed>) = ? [pid 5601] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5612 attached [pid 5611] <... futex resumed>) = ? [pid 5603] +++ exited with 0 +++ [pid 5612] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5611] +++ exited with 0 +++ [pid 5612] <... rseq resumed>) = 0 [pid 5601] +++ exited with 0 +++ [pid 5600] <... clone3 resumed> => {parent_tid=[5612]}, 88) = 5612 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5601, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- [pid 5612] set_robust_list(0x7f91a50869a0, 24 [pid 5600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5612] <... set_robust_list resumed>) = 0 [pid 5602] <... rename resumed>) = -1 EIO (Input/output error) [pid 5600] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] rt_sigprocmask(SIG_SETMASK, [], [pid 5602] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] <... futex resumed>) = 0 [pid 5056] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5602] <... futex resumed>) = 0 [pid 5600] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] mkdir(".", 0777 [pid 5602] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5612] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5056] newfstatat(3, "", [pid 5612] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5612] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5056] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5612] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] exit_group(0 [pid 5056] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5612] <... futex resumed>) = ? [pid 5600] <... exit_group resumed>) = ? [pid 5612] +++ exited with 0 +++ [pid 5602] <... futex resumed>) = ? [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./32/binderfs" [pid 5602] +++ exited with 0 +++ [pid 5600] +++ exited with 0 +++ [pid 5056] <... unlink resumed>) = 0 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5600, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5056] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./32/binderfs") = 0 [pid 5058] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = 0 [pid 5056] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./32/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./32/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./32/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [ 85.383379][ T5602] ERROR: (device loop2): remounting filesystem as read-only [ 85.414305][ T5602] ERROR: (device loop2): txAbort: [ 85.414305][ T5602] [pid 5056] rmdir("./32") = 0 [pid 5056] mkdir("./33", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5608] <... write resumed>) = 16777216 [pid 5605] <... write resumed>) = 16777216 [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./32/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./32/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5605] munmap(0x7f919cc00000, 138412032 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4 [pid 5608] munmap(0x7f919cc00000, 138412032 [pid 5058] <... close resumed>) = 0 [pid 5609] <... write resumed>) = 16777216 [pid 5608] <... munmap resumed>) = 0 [pid 5058] rmdir("./32/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./32") = 0 [pid 5058] mkdir("./33", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5605] <... munmap resumed>) = 0 [pid 5609] munmap(0x7f919cc00000, 138412032 [pid 5605] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5608] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5605] <... openat resumed>) = 4 [pid 5605] ioctl(4, LOOP_SET_FD, 3 [pid 5608] <... openat resumed>) = 4 [pid 5609] <... munmap resumed>) = 0 [pid 5608] ioctl(4, LOOP_SET_FD, 3 [pid 5609] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5605] <... ioctl resumed>) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5605] close(3) = 0 [pid 5605] close(4) = 0 [pid 5609] ioctl(4, LOOP_SET_FD, 3 [pid 5608] <... ioctl resumed>) = 0 [pid 5605] mkdir("./file2", 0777 [pid 5057] close(3) = 0 [pid 5608] close(3 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5608] <... close resumed>) = 0 [pid 5605] <... mkdir resumed>) = 0 [pid 5608] close(4 [pid 5605] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5613 ./strace-static-x86_64: Process 5613 attached [pid 5608] <... close resumed>) = 0 [pid 5608] mkdir("./file2", 0777 [pid 5613] set_robust_list(0x5555565206a0, 24 [pid 5608] <... mkdir resumed>) = 0 [pid 5613] <... set_robust_list resumed>) = 0 [pid 5608] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5613] chdir("./32") = 0 [pid 5613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5605] <... mount resumed>) = 0 [pid 5613] <... prctl resumed>) = 0 [pid 5605] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5613] setpgid(0, 0 [pid 5605] <... openat resumed>) = 3 [pid 5613] <... setpgid resumed>) = 0 [pid 5605] chdir("./file2") = 0 [pid 5605] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5605] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5608] <... mount resumed>) = 0 [pid 5605] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5608] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5605] <... futex resumed>) = 1 [pid 5608] <... openat resumed>) = 3 [pid 5605] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5604] <... futex resumed>) = 0 [pid 5608] chdir("./file2" [pid 5604] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5613] <... openat resumed>) = 3 [pid 5608] <... chdir resumed>) = 0 [pid 5604] <... futex resumed>) = 1 [ 85.550739][ T5605] loop4: detected capacity change from 0 to 32768 [ 85.561631][ T5608] loop3: detected capacity change from 0 to 32768 [pid 5604] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5613] write(3, "1000", 4 [pid 5608] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5605] <... futex resumed>) = 0 [pid 5608] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5605] rename("./file2", "./file1" [pid 5613] <... write resumed>) = 4 [pid 5608] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5606] <... futex resumed>) = 0 [pid 5606] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5608] rename("./file2", "./file1" [pid 5606] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5613] close(3 [pid 5609] <... ioctl resumed>) = 0 [pid 5609] close(3 [pid 5613] <... close resumed>) = 0 [pid 5613] symlink("/dev/binderfs", "./binderfs" [pid 5609] <... close resumed>) = 0 [pid 5609] close(4 [pid 5613] <... symlink resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 5613] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] mkdir("./file2", 0777) = 0 [pid 5609] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5613] <... futex resumed>) = 0 [pid 5613] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5609] <... mount resumed>) = 0 [pid 5613] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5609] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5613] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 85.612874][ T5609] loop5: detected capacity change from 0 to 32768 [ 85.617839][ T5605] ERROR: (device loop4): diWrite: ixpxd invalid [ 85.617839][ T5605] [ 85.631683][ T5608] ERROR: (device loop3): diWrite: ixpxd invalid [ 85.631683][ T5608] [ 85.652565][ T5608] ERROR: (device loop3): remounting filesystem as read-only [pid 5613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... openat resumed>) = 3 [pid 5604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5604] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5613] <... mmap resumed>) = 0x7f91a5087000 [pid 5609] chdir("./file2" [pid 5604] <... futex resumed>) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5609] <... chdir resumed>) = 0 [pid 5604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] close(3 [pid 5613] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5604] <... mmap resumed>) = 0x7f91a5066000 [pid 5613] <... mprotect resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5604] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [ 85.660669][ T5605] ERROR: (device loop4): remounting filesystem as read-only [pid 5613] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5609] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5606] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5604] <... mprotect resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5613] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5609] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5609] <... futex resumed>) = 1 [pid 5607] <... futex resumed>) = 0 [pid 5606] <... futex resumed>) = 0 [pid 5606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5606] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5607] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] rename("./file2", "./file1" [pid 5607] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5615 attached ./strace-static-x86_64: Process 5614 attached [pid 5613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5607] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5606] <... clone3 resumed> => {parent_tid=[5615]}, 88) = 5615 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5606] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5615] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5614] set_robust_list(0x5555565206a0, 24 [pid 5604] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5614 [pid 5604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5614] <... set_robust_list resumed>) = 0 [pid 5613] <... clone3 resumed> => {parent_tid=[5616]}, 88) = 5616 ./strace-static-x86_64: Process 5616 attached ./strace-static-x86_64: Process 5617 attached [pid 5616] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5615] <... rseq resumed>) = 0 [pid 5614] chdir("./33" [pid 5613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5614] <... chdir resumed>) = 0 [pid 5613] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5616] <... rseq resumed>) = 0 [pid 5615] set_robust_list(0x7f91a50869a0, 24 [pid 5614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5613] <... futex resumed>) = 0 [pid 5604] <... clone3 resumed> => {parent_tid=[5617]}, 88) = 5617 [pid 5616] set_robust_list(0x7f91a50a79a0, 24 [pid 5613] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5614] <... prctl resumed>) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [], [pid 5616] <... set_robust_list resumed>) = 0 [pid 5604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5614] setpgid(0, 0 [pid 5604] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... setpgid resumed>) = 0 [pid 5617] <... rseq resumed>) = 0 [pid 5615] <... set_robust_list resumed>) = 0 [pid 5604] <... futex resumed>) = 0 [pid 5617] set_robust_list(0x7f91a50869a0, 24 [pid 5616] rt_sigprocmask(SIG_SETMASK, [], [pid 5615] rt_sigprocmask(SIG_SETMASK, [], [pid 5614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5604] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5617] <... set_robust_list resumed>) = 0 [ 85.684243][ T5609] ERROR: (device loop5): diWrite: ixpxd invalid [ 85.684243][ T5609] [ 85.684634][ T5608] ERROR: (device loop3): txAbort: [ 85.684634][ T5608] [ 85.702171][ T5605] ERROR: (device loop4): txAbort: [ 85.702171][ T5605] [ 85.704202][ T5609] ERROR: (device loop5): remounting filesystem as read-only [pid 5617] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5616] memfd_create("syzkaller", 0) = 3 [pid 5616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5617] mkdir(".", 0777 [pid 5615] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5605] <... rename resumed>) = -1 EIO (Input/output error) [pid 5605] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5615] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5614] write(3, "1000", 4 [pid 5617] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5605] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5615] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... write resumed>) = 4 [pid 5617] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5615] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] close(3 [pid 5609] <... rename resumed>) = -1 EIO (Input/output error) [pid 5608] <... rename resumed>) = -1 EIO (Input/output error) [pid 5607] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5617] <... futex resumed>) = 1 [pid 5615] <... futex resumed>) = 1 [pid 5614] <... close resumed>) = 0 [pid 5609] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5608] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] <... futex resumed>) = 0 [pid 5604] <... futex resumed>) = 0 [pid 5617] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5615] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] symlink("/dev/binderfs", "./binderfs" [pid 5609] <... futex resumed>) = 0 [pid 5608] <... futex resumed>) = 0 [pid 5607] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] exit_group(0 [pid 5608] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5607] <... futex resumed>) = 0 [pid 5609] mkdir(".", 0777 [pid 5617] <... futex resumed>) = ? [pid 5604] <... exit_group resumed>) = ? [pid 5617] +++ exited with 0 +++ [pid 5614] <... symlink resumed>) = 0 [pid 5609] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5607] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5606] exit_group(0 [pid 5605] <... futex resumed>) = ? [pid 5615] <... futex resumed>) = ? [pid 5609] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5608] <... futex resumed>) = ? [pid 5606] <... exit_group resumed>) = ? [pid 5605] +++ exited with 0 +++ [pid 5614] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5604] +++ exited with 0 +++ [pid 5615] +++ exited with 0 +++ [pid 5614] <... futex resumed>) = 0 [pid 5608] +++ exited with 0 +++ [pid 5606] +++ exited with 0 +++ [pid 5614] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5604, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=17 /* 0.17 s */} --- [pid 5614] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5606, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=14 /* 0.14 s */} --- [pid 5614] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5614] <... mmap resumed>) = 0x7f91a5087000 [pid 5609] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5060] getdents64(3, [pid 5059] <... openat resumed>) = 3 [pid 5614] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5609] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] newfstatat(3, "", [pid 5614] <... mprotect resumed>) = 0 [pid 5609] <... futex resumed>) = 1 [pid 5607] <... futex resumed>) = 0 [pid 5060] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5609] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5607] exit_group(0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(3, [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5609] <... futex resumed>) = ? [pid 5607] <... exit_group resumed>) = ? [pid 5060] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] unlink("./30/binderfs") = 0 [pid 5059] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./31/binderfs") = 0 [pid 5609] +++ exited with 0 +++ [pid 5607] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5607, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5063] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5614] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5618 attached [pid 5063] getdents64(3, [pid 5618] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5614] <... clone3 resumed> => {parent_tid=[5618]}, 88) = 5618 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] <... umount2 resumed>) = 0 [pid 5618] <... rseq resumed>) = 0 [pid 5618] set_robust_list(0x7f91a50a79a0, 24 [pid 5614] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5618] <... set_robust_list resumed>) = 0 [pid 5618] rt_sigprocmask(SIG_SETMASK, [], [pid 5614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = 0 [pid 5059] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5614] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./31/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5618] memfd_create("syzkaller", 0 [pid 5060] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5614] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 85.718710][ T5609] ERROR: (device loop5): txAbort: [ 85.718710][ T5609] [ 85.743109][ T5608] ERROR: (device loop3): remounting filesystem as read-only [pid 5618] <... memfd_create resumed>) = 3 [pid 5614] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] unlink("./31/binderfs" [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./31/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... unlink resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./30/file2", [pid 5059] <... openat resumed>) = 4 [pid 5618] <... mmap resumed>) = 0x7f919cc00000 [pid 5063] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] newfstatat(4, "", [pid 5060] umount2("./30/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] getdents64(4, [pid 5060] openat(AT_FDCWD, "./30/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 4 [pid 5059] getdents64(4, [pid 5060] newfstatat(4, "", [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] close(4 [pid 5060] getdents64(4, [pid 5059] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] rmdir("./31/file2" [pid 5060] getdents64(4, [pid 5059] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5059] close(3 [pid 5060] <... close resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5060] rmdir("./30/file2" [pid 5059] rmdir("./31" [pid 5060] <... rmdir resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./32", 0777) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5060] rmdir("./30" [pid 5059] <... openat resumed>) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./31", 0777) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] close(3) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./31/file2", [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5619 attached [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5619 [pid 5063] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5619] set_robust_list(0x5555565206a0, 24 [pid 5063] openat(AT_FDCWD, "./31/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5619] <... set_robust_list resumed>) = 0 [pid 5619] chdir("./33" [pid 5063] <... openat resumed>) = 4 [pid 5619] <... chdir resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5619] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5619] <... prctl resumed>) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5619] setpgid(0, 0 [pid 5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] getdents64(4, [pid 5619] <... setpgid resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] close(4) = 0 [pid 5619] <... openat resumed>) = 3 [pid 5063] rmdir("./31/file2" [pid 5619] write(3, "1000", 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5619] <... write resumed>) = 4 [pid 5619] close(3) = 0 [pid 5619] symlink("/dev/binderfs", "./binderfs" [pid 5063] getdents64(3, [pid 5619] <... symlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5619] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3) = 0 [pid 5619] <... futex resumed>) = 0 [pid 5619] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5619] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5063] rmdir("./31" [pid 5619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5063] <... rmdir resumed>) = 0 [pid 5619] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5063] mkdir("./32", 0777 [pid 5619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 5621 attached [pid 5621] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5621] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5619] <... clone3 resumed> => {parent_tid=[5621]}, 88) = 5621 [pid 5621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5621] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] <... mkdir resumed>) = 0 [pid 5619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5619] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 3 [pid 5619] <... futex resumed>) = 1 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5619] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5621] <... futex resumed>) = 0 [pid 5621] memfd_create("syzkaller", 0) = 3 [pid 5621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5622 ./strace-static-x86_64: Process 5622 attached [pid 5622] set_robust_list(0x5555565206a0, 24) = 0 [pid 5622] chdir("./32") = 0 [pid 5622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5622] setpgid(0, 0) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5623 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5623 [pid 5622] write(3, "1000", 4 [pid 5623] set_robust_list(0x5555565206a0, 24) = 0 [pid 5623] chdir("./31") = 0 [pid 5623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5623] setpgid(0, 0) = 0 [pid 5623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5622] <... write resumed>) = 4 [pid 5623] <... openat resumed>) = 3 [pid 5623] write(3, "1000", 4) = 4 [pid 5623] close(3) = 0 [pid 5623] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5623] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5623] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5623] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5623] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5623] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5624]}, 88) = 5624 [pid 5623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5623] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5623] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5622] close(3) = 0 ./strace-static-x86_64: Process 5624 attached [pid 5624] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5622] symlink("/dev/binderfs", "./binderfs" [pid 5624] <... rseq resumed>) = 0 [pid 5624] set_robust_list(0x7f91a50a79a0, 24 [pid 5622] <... symlink resumed>) = 0 [pid 5624] <... set_robust_list resumed>) = 0 [pid 5622] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5624] memfd_create("syzkaller", 0) = 3 [pid 5624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5622] <... futex resumed>) = 0 [pid 5622] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5622] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5622] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5618] <... write resumed>) = 16777216 [pid 5616] <... write resumed>) = 16777216 [pid 5622] <... mprotect resumed>) = 0 [pid 5622] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5618] munmap(0x7f919cc00000, 138412032 [pid 5622] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5625]}, 88) = 5625 ./strace-static-x86_64: Process 5625 attached [pid 5622] rt_sigprocmask(SIG_SETMASK, [], [pid 5625] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5622] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5622] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] <... rseq resumed>) = 0 [pid 5621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5618] <... munmap resumed>) = 0 [pid 5616] munmap(0x7f919cc00000, 138412032 [pid 5622] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5625] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5618] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... ioctl resumed>) = 0 [pid 5618] <... openat resumed>) = 4 [pid 5063] close(3 [pid 5625] memfd_create("syzkaller", 0 [pid 5618] ioctl(4, LOOP_SET_FD, 3 [pid 5616] <... munmap resumed>) = 0 [pid 5616] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5616] ioctl(4, LOOP_SET_FD, 3 [pid 5625] <... memfd_create resumed>) = 3 [pid 5625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5626 attached [pid 5626] set_robust_list(0x5555565206a0, 24) = 0 [pid 5626] chdir("./32") = 0 [pid 5626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5626] setpgid(0, 0) = 0 [pid 5626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5626] write(3, "1000", 4) = 4 [pid 5626] close(3) = 0 [pid 5626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5626] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5626] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5626] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5627 attached [pid 5625] <... mmap resumed>) = 0x7f919cc00000 [pid 5627] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5626] <... clone3 resumed> => {parent_tid=[5627]}, 88) = 5627 [pid 5626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5626] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5626 [pid 5627] <... rseq resumed>) = 0 [pid 5627] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5627] memfd_create("syzkaller", 0 [pid 5616] <... ioctl resumed>) = 0 [pid 5627] <... memfd_create resumed>) = 3 [pid 5627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5618] <... ioctl resumed>) = 0 [pid 5627] <... mmap resumed>) = 0x7f919cc00000 [pid 5618] close(3) = 0 [pid 5618] close(4 [pid 5616] close(3) = 0 [pid 5616] close(4 [pid 5618] <... close resumed>) = 0 [pid 5618] mkdir("./file2", 0777 [pid 5616] <... close resumed>) = 0 [pid 5616] mkdir("./file2", 0777) = 0 [pid 5618] <... mkdir resumed>) = 0 [ 86.234157][ T5618] loop0: detected capacity change from 0 to 32768 [ 86.241383][ T5616] loop1: detected capacity change from 0 to 32768 [pid 5616] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5618] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5616] <... mount resumed>) = 0 [pid 5616] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5616] chdir("./file2") = 0 [pid 5616] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5616] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5613] <... futex resumed>) = 0 [pid 5616] rename("./file2", "./file1" [pid 5613] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 86.308927][ T5616] ERROR: (device loop1): diWrite: ixpxd invalid [ 86.308927][ T5616] [ 86.344235][ T5616] ERROR: (device loop1): remounting filesystem as read-only [pid 5613] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5618] <... mount resumed>) = 0 [pid 5613] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5618] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5613] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5618] <... openat resumed>) = 3 [pid 5613] <... mprotect resumed>) = 0 [pid 5613] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5618] chdir("./file2" [pid 5613] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5618] <... chdir resumed>) = 0 [pid 5613] <... clone3 resumed> => {parent_tid=[5628]}, 88) = 5628 [pid 5618] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5613] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5613] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5618] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5628 attached [pid 5618] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5614] <... futex resumed>) = 0 [pid 5614] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] rename("./file2", "./file1" [pid 5628] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5628] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5628] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5628] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5628] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5613] <... futex resumed>) = 0 [pid 5628] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5616] <... rename resumed>) = -1 EIO (Input/output error) [pid 5614] <... futex resumed>) = 0 [pid 5616] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5616] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5613] exit_group(0 [pid 5628] <... futex resumed>) = ? [pid 5616] <... futex resumed>) = ? [pid 5613] <... exit_group resumed>) = ? [pid 5628] +++ exited with 0 +++ [pid 5616] +++ exited with 0 +++ [pid 5613] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5613, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=15 /* 0.15 s */} --- [pid 5057] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./32/binderfs") = 0 [pid 5057] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5624] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5614] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... umount2 resumed>) = 0 [ 86.358471][ T5616] ERROR: (device loop1): txAbort: [ 86.358471][ T5616] [ 86.384297][ T5616] ERROR: (device loop1): remounting filesystem as read-only [ 86.384428][ T5618] ERROR: (device loop0): diWrite: ixpxd invalid [ 86.384428][ T5618] [pid 5057] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./32/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./32/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./32/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./32") = 0 [pid 5057] mkdir("./33", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5618] <... rename resumed>) = -1 EIO (Input/output error) [pid 5618] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5614] <... futex resumed>) = 0 [pid 5614] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5614] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5618] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5618] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5618] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5614] <... futex resumed>) = 0 [pid 5614] exit_group(0) = ? [pid 5618] +++ exited with 0 +++ [pid 5614] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5614, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5056] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 86.432145][ T5618] ERROR: (device loop0): remounting filesystem as read-only [ 86.452016][ T5618] ERROR: (device loop0): txAbort: [ 86.452016][ T5618] [pid 5056] unlink("./33/binderfs" [pid 5625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5621] <... write resumed>) = 16777216 [pid 5056] <... unlink resumed>) = 0 [pid 5056] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5621] munmap(0x7f919cc00000, 138412032) = 0 [pid 5627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5621] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5621] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5621] close(3) = 0 [pid 5621] close(4) = 0 [pid 5621] mkdir("./file2", 0777) = 0 [ 86.566168][ T5621] loop2: detected capacity change from 0 to 32768 [pid 5621] mount("/dev/loop2", "./file2", "jfs", 0, "") = 0 [pid 5621] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5621] chdir("./file2") = 0 [pid 5621] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5621] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5619] <... futex resumed>) = 0 [pid 5619] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5619] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5621] rename("./file2", "./file1" [pid 5624] <... write resumed>) = 16777216 [ 86.643668][ T5621] ERROR: (device loop2): diWrite: ixpxd invalid [ 86.643668][ T5621] [ 86.681180][ T5621] ERROR: (device loop2): remounting filesystem as read-only [ 86.688463][ T5621] ERROR: (device loop2): txAbort: [pid 5624] munmap(0x7f919cc00000, 138412032 [pid 5619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5619] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5619] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5619] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5630]}, 88) = 5630 [pid 5619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5619] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5619] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5630 attached [ 86.688463][ T5621] [pid 5625] <... write resumed>) = 16777216 [pid 5624] <... munmap resumed>) = 0 [pid 5630] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5624] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5630] <... rseq resumed>) = 0 [pid 5624] ioctl(4, LOOP_SET_FD, 3 [pid 5630] set_robust_list(0x7f91a50869a0, 24 [pid 5057] <... ioctl resumed>) = 0 [pid 5630] <... set_robust_list resumed>) = 0 [pid 5625] munmap(0x7f919cc00000, 138412032 [pid 5624] <... ioctl resumed>) = 0 [pid 5621] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] close(3 [pid 5630] rt_sigprocmask(SIG_SETMASK, [], [pid 5621] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5630] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5624] close(3 [pid 5621] <... futex resumed>) = 0 [pid 5624] <... close resumed>) = 0 [pid 5621] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] <... close resumed>) = 0 [pid 5624] close(4 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5624] <... close resumed>) = 0 [pid 5630] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5630] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5631 [pid 5630] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5624] mkdir("./file2", 0777 [pid 5630] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5619] <... futex resumed>) = 0 [pid 5619] exit_group(0 [pid 5621] <... futex resumed>) = ? [pid 5619] <... exit_group resumed>) = ? [pid 5621] +++ exited with 0 +++ ./strace-static-x86_64: Process 5631 attached [pid 5624] <... mkdir resumed>) = 0 [pid 5631] set_robust_list(0x5555565206a0, 24 [pid 5624] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5631] <... set_robust_list resumed>) = 0 [pid 5631] chdir("./33" [pid 5630] +++ exited with 0 +++ [pid 5625] <... munmap resumed>) = 0 [pid 5619] +++ exited with 0 +++ [pid 5631] <... chdir resumed>) = 0 [pid 5631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5619, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=17 /* 0.17 s */} --- [pid 5631] setpgid(0, 0 [pid 5058] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5631] <... setpgid resumed>) = 0 [pid 5625] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5625] <... openat resumed>) = 4 [pid 5058] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5631] <... openat resumed>) = 3 [pid 5625] ioctl(4, LOOP_SET_FD, 3 [pid 5631] write(3, "1000", 4 [pid 5058] <... openat resumed>) = 3 [pid 5631] <... write resumed>) = 4 [pid 5631] close(3) = 0 [pid 5631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5631] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5631] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5631] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5627] <... write resumed>) = 16777216 [pid 5625] <... ioctl resumed>) = 0 [pid 5624] <... mount resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5631] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5625] close(3 [pid 5624] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5627] munmap(0x7f919cc00000, 138412032 [pid 5625] <... close resumed>) = 0 [pid 5624] <... openat resumed>) = 3 [pid 5058] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5632 attached [pid 5627] <... munmap resumed>) = 0 [pid 5625] close(4 [pid 5624] chdir("./file2" [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5631] <... clone3 resumed> => {parent_tid=[5632]}, 88) = 5632 [pid 5624] <... chdir resumed>) = 0 [pid 5058] newfstatat(AT_FDCWD, "./33/binderfs", [pid 5632] <... rseq resumed>) = 0 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], [pid 5624] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5632] set_robust_list(0x7f91a50a79a0, 24 [pid 5058] unlink("./33/binderfs") = 0 [pid 5058] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5625] <... close resumed>) = 0 [pid 5624] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5625] mkdir("./file2", 0777) = 0 [pid 5625] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5627] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5632] <... set_robust_list resumed>) = 0 [pid 5631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5625] <... mount resumed>) = 0 [pid 5624] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... umount2 resumed>) = 0 [pid 5627] <... openat resumed>) = 4 [pid 5625] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] rt_sigprocmask(SIG_SETMASK, [], [pid 5631] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5625] <... openat resumed>) = 3 [pid 5624] <... futex resumed>) = 1 [ 86.717736][ T5624] loop4: detected capacity change from 0 to 32768 [ 86.754739][ T5625] loop3: detected capacity change from 0 to 32768 [pid 5623] <... futex resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5631] <... futex resumed>) = 0 [pid 5627] ioctl(4, LOOP_SET_FD, 3 [pid 5625] chdir("./file2" [pid 5624] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5623] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] newfstatat(AT_FDCWD, "./33/file2", [pid 5632] memfd_create("syzkaller", 0 [pid 5631] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5625] <... chdir resumed>) = 0 [pid 5623] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5625] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5623] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5625] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5625] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5632] <... memfd_create resumed>) = 3 [pid 5627] <... ioctl resumed>) = 0 [pid 5622] <... futex resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5627] close(3 [pid 5622] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] <... mmap resumed>) = 0x7f919cc00000 [pid 5627] <... close resumed>) = 0 [pid 5625] <... futex resumed>) = 0 [pid 5624] rename("./file2", "./file1" [pid 5622] <... futex resumed>) = 1 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./33/file2", [pid 5627] close(4 [pid 5625] rename("./file2", "./file1" [pid 5622] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] openat(AT_FDCWD, "./33/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... openat resumed>) = 4 [pid 5056] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] newfstatat(4, "", [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] openat(AT_FDCWD, "./33/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5627] <... close resumed>) = 0 [pid 5058] getdents64(4, [pid 5056] <... openat resumed>) = 4 [pid 5627] mkdir("./file2", 0777 [pid 5056] newfstatat(4, "", [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5627] <... mkdir resumed>) = 0 [pid 5058] getdents64(4, [pid 5056] getdents64(4, [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] close(4 [pid 5056] getdents64(4, [pid 5058] <... close resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] rmdir("./33/file2" [pid 5056] close(4) = 0 [pid 5058] <... rmdir resumed>) = 0 [ 86.805469][ T5627] loop5: detected capacity change from 0 to 32768 [ 86.815733][ T5624] ERROR: (device loop4): diWrite: ixpxd invalid [ 86.815733][ T5624] [ 86.826869][ T5625] ERROR: (device loop3): diWrite: ixpxd invalid [ 86.826869][ T5625] [ 86.839647][ T5624] ERROR: (device loop4): remounting filesystem as read-only [ 86.847064][ T5625] ERROR: (device loop3): remounting filesystem as read-only [pid 5056] rmdir("./33/file2" [pid 5627] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5625] <... rename resumed>) = -1 EIO (Input/output error) [pid 5623] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] getdents64(3, [pid 5056] <... rmdir resumed>) = 0 [pid 5625] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] getdents64(3, [pid 5625] <... futex resumed>) = 1 [pid 5623] <... futex resumed>) = 0 [pid 5622] <... futex resumed>) = 0 [pid 5058] close(3 [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5622] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... close resumed>) = 0 [pid 5056] close(3 [pid 5625] mkdir(".", 0777 [pid 5623] <... mmap resumed>) = 0x7f91a5066000 [pid 5622] <... futex resumed>) = 0 [pid 5058] rmdir("./33" [pid 5056] <... close resumed>) = 0 [pid 5625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5623] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5622] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5625] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5623] <... mprotect resumed>) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5056] rmdir("./33" [pid 5623] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5623] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5625] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5623] <... clone3 resumed> => {parent_tid=[5633]}, 88) = 5633 [pid 5056] <... rmdir resumed>) = 0 [pid 5625] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] mkdir("./34", 0777./strace-static-x86_64: Process 5633 attached [pid 5625] <... futex resumed>) = 1 [pid 5623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5622] <... futex resumed>) = 0 [pid 5058] mkdir("./34", 0777 [pid 5623] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5623] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5622] exit_group(0 [pid 5056] <... mkdir resumed>) = 0 [pid 5633] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5627] <... mount resumed>) = 0 [pid 5622] <... exit_group resumed>) = ? [pid 5058] <... mkdir resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5625] +++ exited with 0 +++ [pid 5622] +++ exited with 0 +++ [pid 5633] <... rseq resumed>) = 0 [pid 5627] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5622, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] <... openat resumed>) = 3 [pid 5633] set_robust_list(0x7f91a50869a0, 24 [pid 5627] <... openat resumed>) = 3 [pid 5058] <... openat resumed>) = 3 [pid 5633] <... set_robust_list resumed>) = 0 [pid 5627] chdir("./file2" [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5633] rt_sigprocmask(SIG_SETMASK, [], [pid 5627] <... chdir resumed>) = 0 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5627] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5633] mkdir(".", 0777 [pid 5627] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5633] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5627] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5633] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5627] <... futex resumed>) = 1 [pid 5626] <... futex resumed>) = 0 [pid 5627] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5626] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5626] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5627] rename("./file2", "./file1" [pid 5626] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 86.847074][ T5625] ERROR: (device loop3): txAbort: [ 86.847074][ T5625] [ 86.872986][ T5624] ERROR: (device loop4): txAbort: [ 86.872986][ T5624] [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./32/binderfs") = 0 [pid 5059] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5624] <... rename resumed>) = -1 EIO (Input/output error) [pid 5633] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5633] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] <... futex resumed>) = 0 [pid 5633] <... futex resumed>) = 1 [pid 5633] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5624] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5624] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5623] exit_group(0 [pid 5633] <... futex resumed>) = ? [pid 5624] <... futex resumed>) = ? [pid 5623] <... exit_group resumed>) = ? [pid 5633] +++ exited with 0 +++ [pid 5624] +++ exited with 0 +++ [pid 5623] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5623, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5060] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./31/binderfs") = 0 [ 86.899414][ T5627] ERROR: (device loop5): diWrite: ixpxd invalid [ 86.899414][ T5627] [ 86.931112][ T5627] ERROR: (device loop5): remounting filesystem as read-only [ 86.944397][ T5627] ERROR: (device loop5): txAbort: [pid 5060] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5626] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5626] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5626] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5635]}, 88) = 5635 [pid 5626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5626] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5635 attached [pid 5626] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] <... umount2 resumed>) = 0 [pid 5635] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5635] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5635] mkdir(".", 0777 [pid 5060] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5635] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5635] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] newfstatat(AT_FDCWD, "./31/file2", [pid 5635] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5635] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./31/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5635] <... futex resumed>) = 1 [pid 5626] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./31/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5635] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [ 86.944397][ T5627] [pid 5060] close(4) = 0 [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5060] rmdir("./31/file2" [pid 5627] <... rename resumed>) = -1 EIO (Input/output error) [pid 5627] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... rmdir resumed>) = 0 [pid 5627] <... futex resumed>) = 0 [pid 5060] getdents64(3, [pid 5627] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5626] exit_group(0 [pid 5060] close(3 [pid 5635] <... futex resumed>) = ? [pid 5627] <... futex resumed>) = ? [pid 5626] <... exit_group resumed>) = ? [pid 5060] <... close resumed>) = 0 [pid 5627] +++ exited with 0 +++ [pid 5060] rmdir("./31" [pid 5635] +++ exited with 0 +++ [pid 5626] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5626, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=16 /* 0.16 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5060] mkdir("./32", 0777 [pid 5063] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] <... mkdir resumed>) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] <... openat resumed>) = 3 [pid 5063] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./32/binderfs") = 0 [pid 5063] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./32/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./32/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [ 86.981924][ T5627] ERROR: (device loop5): remounting filesystem as read-only [pid 5063] close(4) = 0 [pid 5063] rmdir("./32/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./32") = 0 [pid 5063] mkdir("./33", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5056] <... ioctl resumed>) = 0 [pid 5632] <... write resumed>) = 16777216 [pid 5058] <... ioctl resumed>) = 0 [pid 5056] close(3 [pid 5632] munmap(0x7f919cc00000, 138412032 [pid 5058] close(3 [pid 5056] <... close resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5636 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5637 ./strace-static-x86_64: Process 5637 attached ./strace-static-x86_64: Process 5636 attached [pid 5637] set_robust_list(0x5555565206a0, 24 [pid 5636] set_robust_list(0x5555565206a0, 24) = 0 [pid 5636] chdir("./34" [pid 5637] <... set_robust_list resumed>) = 0 [pid 5636] <... chdir resumed>) = 0 [pid 5636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5636] setpgid(0, 0) = 0 [pid 5637] chdir("./34" [pid 5636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5637] <... chdir resumed>) = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5636] <... openat resumed>) = 3 [pid 5637] <... prctl resumed>) = 0 [pid 5636] write(3, "1000", 4 [pid 5632] <... munmap resumed>) = 0 [pid 5637] setpgid(0, 0) = 0 [pid 5636] <... write resumed>) = 4 [pid 5636] close(3) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5636] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5636] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] <... openat resumed>) = 3 [pid 5636] <... futex resumed>) = 0 [pid 5637] write(3, "1000", 4 [pid 5636] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5637] <... write resumed>) = 4 [pid 5636] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5636] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5637] close(3 [pid 5636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5637] <... close resumed>) = 0 [pid 5636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5637] symlink("/dev/binderfs", "./binderfs" [pid 5636] <... mmap resumed>) = 0x7f91a5087000 [pid 5637] <... symlink resumed>) = 0 [pid 5636] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5637] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... mprotect resumed>) = 0 [pid 5637] <... futex resumed>) = 0 [pid 5636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5059] <... umount2 resumed>) = 0 [pid 5637] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5059] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5637] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./32/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5638 attached [pid 5637] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5636] <... clone3 resumed> => {parent_tid=[5638]}, 88) = 5638 [pid 5637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5638] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], [pid 5637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5637] <... mmap resumed>) = 0x7f91a5087000 [pid 5059] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./32/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5637] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5636] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] <... openat resumed>) = 4 [pid 5636] <... futex resumed>) = 0 [pid 5636] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5637] <... mprotect resumed>) = 0 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5638] <... rseq resumed>) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, [pid 5638] set_robust_list(0x7f91a50a79a0, 24 [pid 5637] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5638] <... set_robust_list resumed>) = 0 [pid 5637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5059] close(4) = 0 [pid 5059] rmdir("./32/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5637] <... clone3 resumed> => {parent_tid=[5639]}, 88) = 5639 [pid 5059] rmdir("./32" [pid 5637] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... rmdir resumed>) = 0 [pid 5059] mkdir("./33", 0777 [pid 5637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5637] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5637] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5639 attached [pid 5632] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] <... mkdir resumed>) = 0 [pid 5639] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5632] <... openat resumed>) = 4 [pid 5639] <... rseq resumed>) = 0 [pid 5632] ioctl(4, LOOP_SET_FD, 3 [pid 5639] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5638] rt_sigprocmask(SIG_SETMASK, [], [pid 5639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5639] memfd_create("syzkaller", 0 [pid 5638] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5639] <... memfd_create resumed>) = 3 [pid 5638] memfd_create("syzkaller", 0 [pid 5059] <... openat resumed>) = 3 [pid 5638] <... memfd_create resumed>) = 3 [pid 5638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5639] <... mmap resumed>) = 0x7f919cc00000 [pid 5638] <... mmap resumed>) = 0x7f919cc00000 [pid 5632] <... ioctl resumed>) = 0 [pid 5632] close(3) = 0 [pid 5632] close(4) = 0 [pid 5632] mkdir("./file2", 0777) = 0 [pid 5632] mount("/dev/loop1", "./file2", "jfs", 0, "") = 0 [pid 5632] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5632] chdir("./file2") = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5632] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 87.205360][ T5632] loop1: detected capacity change from 0 to 32768 [pid 5631] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = 0 [pid 5631] <... futex resumed>) = 1 [pid 5631] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] rename("./file2", "./file1" [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5641 ./strace-static-x86_64: Process 5641 attached [pid 5631] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5641] set_robust_list(0x5555565206a0, 24) = 0 [pid 5641] chdir("./32") = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5641] setpgid(0, 0) = 0 [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5641] write(3, "1000", 4 [pid 5631] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... write resumed>) = 4 [pid 5641] close(3) = 0 [pid 5631] <... futex resumed>) = 0 [pid 5641] symlink("/dev/binderfs", "./binderfs" [ 87.262188][ T5632] ERROR: (device loop1): diWrite: ixpxd invalid [ 87.262188][ T5632] [ 87.285556][ T5632] ERROR: (device loop1): remounting filesystem as read-only [pid 5631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5641] <... symlink resumed>) = 0 [pid 5641] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5641] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5641] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5641] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5631] <... mmap resumed>) = 0x7f91a5066000 [pid 5641] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5642]}, 88) = 5642 [pid 5641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5641] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5641] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5642 attached [pid 5642] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5642] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5642] memfd_create("syzkaller", 0) = 3 [pid 5631] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5631] <... mprotect resumed>) = 0 [pid 5631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5643 attached => {parent_tid=[5643]}, 88) = 5643 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], [pid 5643] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5631] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5631] <... futex resumed>) = 0 [pid 5643] rt_sigprocmask(SIG_SETMASK, [], [pid 5631] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5643] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5643] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5643] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5643] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [ 87.332294][ T5632] ERROR: (device loop1): txAbort: [ 87.332294][ T5632] [pid 5643] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5632] <... rename resumed>) = -1 EIO (Input/output error) [pid 5632] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5632] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] exit_group(0) = ? [pid 5643] <... futex resumed>) = ? [pid 5643] +++ exited with 0 +++ [pid 5632] <... futex resumed>) = ? [pid 5632] +++ exited with 0 +++ [pid 5631] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5631, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=15 /* 0.15 s */} --- [pid 5057] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5057] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", [pid 5063] close(3 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./33/binderfs") = 0 [pid 5057] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./33/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./33/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5644 attached [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5644] set_robust_list(0x5555565206a0, 24) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./33/file2") = 0 [pid 5057] getdents64(3, [pid 5644] chdir("./33") = 0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5057] close(3 [pid 5644] <... prctl resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5644] setpgid(0, 0 [pid 5057] rmdir("./33" [pid 5644] <... setpgid resumed>) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5644 [pid 5057] mkdir("./34", 0777 [pid 5644] <... openat resumed>) = 3 [pid 5644] write(3, "1000", 4 [pid 5057] <... mkdir resumed>) = 0 [pid 5644] <... write resumed>) = 4 [pid 5644] close(3 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5644] <... close resumed>) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs" [pid 5057] <... openat resumed>) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5644] <... symlink resumed>) = 0 [pid 5644] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5644] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5644] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5644] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5644] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5645 attached [ 87.381734][ T5632] ERROR: (device loop1): remounting filesystem as read-only [pid 5645] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5644] <... clone3 resumed> => {parent_tid=[5645]}, 88) = 5645 [pid 5645] <... rseq resumed>) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5645] set_robust_list(0x7f91a50a79a0, 24 [pid 5644] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] <... set_robust_list resumed>) = 0 [pid 5645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5645] memfd_create("syzkaller", 0 [pid 5644] <... futex resumed>) = 0 [pid 5644] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5645] <... memfd_create resumed>) = 3 [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5646 attached [pid 5642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5646 [pid 5646] set_robust_list(0x5555565206a0, 24) = 0 [pid 5646] chdir("./33") = 0 [pid 5646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5646] setpgid(0, 0) = 0 [pid 5646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5646] write(3, "1000", 4) = 4 [pid 5646] close(3) = 0 [pid 5646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5646] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5646] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5646] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5646] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5646] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5647 attached [pid 5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5647] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5646] <... clone3 resumed> => {parent_tid=[5647]}, 88) = 5647 [pid 5057] <... ioctl resumed>) = 0 [pid 5647] <... rseq resumed>) = 0 [pid 5646] rt_sigprocmask(SIG_SETMASK, [], [pid 5647] set_robust_list(0x7f91a50a79a0, 24 [pid 5646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5647] <... set_robust_list resumed>) = 0 [pid 5646] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [], [pid 5646] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5648 ./strace-static-x86_64: Process 5648 attached [pid 5647] memfd_create("syzkaller", 0 [pid 5648] set_robust_list(0x5555565206a0, 24) = 0 [pid 5648] chdir("./34" [pid 5647] <... memfd_create resumed>) = 3 [pid 5648] <... chdir resumed>) = 0 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5648] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5647] <... mmap resumed>) = 0x7f919cc00000 [pid 5648] <... prctl resumed>) = 0 [pid 5648] setpgid(0, 0) = 0 [pid 5648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5648] write(3, "1000", 4) = 4 [pid 5648] close(3) = 0 [pid 5648] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5648] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5648] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5648] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5648] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5648] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5649 attached => {parent_tid=[5649]}, 88) = 5649 [pid 5649] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5648] rt_sigprocmask(SIG_SETMASK, [], [pid 5649] <... rseq resumed>) = 0 [pid 5648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5649] set_robust_list(0x7f91a50a79a0, 24 [pid 5648] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5649] <... set_robust_list resumed>) = 0 [pid 5649] rt_sigprocmask(SIG_SETMASK, [], [pid 5648] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5649] memfd_create("syzkaller", 0) = 3 [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5638] <... write resumed>) = 16777216 [pid 5638] munmap(0x7f919cc00000, 138412032 [pid 5642] <... write resumed>) = 16777216 [pid 5638] <... munmap resumed>) = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5642] munmap(0x7f919cc00000, 138412032 [pid 5639] <... write resumed>) = 16777216 [pid 5638] <... openat resumed>) = 4 [pid 5638] ioctl(4, LOOP_SET_FD, 3 [pid 5642] <... munmap resumed>) = 0 [pid 5639] munmap(0x7f919cc00000, 138412032 [pid 5642] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5642] ioctl(4, LOOP_SET_FD, 3 [pid 5638] <... ioctl resumed>) = 0 [pid 5639] <... munmap resumed>) = 0 [pid 5638] close(3) = 0 [pid 5638] close(4 [pid 5642] <... ioctl resumed>) = 0 [pid 5642] close(3) = 0 [pid 5642] close(4) = 0 [pid 5639] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5638] <... close resumed>) = 0 [pid 5639] <... openat resumed>) = 4 [pid 5638] mkdir("./file2", 0777 [pid 5642] mkdir("./file2", 0777 [pid 5638] <... mkdir resumed>) = 0 [ 87.852942][ T5638] loop2: detected capacity change from 0 to 32768 [ 87.868812][ T5642] loop4: detected capacity change from 0 to 32768 [pid 5639] ioctl(4, LOOP_SET_FD, 3 [pid 5642] <... mkdir resumed>) = 0 [pid 5642] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5638] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5642] <... mount resumed>) = 0 [pid 5642] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5642] chdir("./file2") = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5642] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5641] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5639] <... ioctl resumed>) = 0 [pid 5641] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5642] rename("./file2", "./file1" [pid 5639] close(3) = 0 [pid 5639] close(4) = 0 [pid 5639] mkdir("./file2", 0777) = 0 [pid 5639] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5638] <... mount resumed>) = 0 [pid 5638] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5638] chdir("./file2") = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5638] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] <... futex resumed>) = 0 [pid 5638] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5636] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5636] <... futex resumed>) = 0 [pid 5639] <... mount resumed>) = 0 [ 87.895061][ T5639] loop0: detected capacity change from 0 to 32768 [ 87.926391][ T5642] ERROR: (device loop4): diWrite: ixpxd invalid [ 87.926391][ T5642] [pid 5638] rename("./file2", "./file1" [pid 5636] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5639] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5639] chdir("./file2") = 0 [pid 5639] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5639] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5637] <... futex resumed>) = 0 [pid 5639] rename("./file2", "./file1" [pid 5637] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] <... futex resumed>) = 0 [pid 5641] <... futex resumed>) = 0 [pid 5637] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5641] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [ 87.961643][ T5638] ERROR: (device loop2): diWrite: ixpxd invalid [ 87.961643][ T5638] [ 87.975565][ T5642] ERROR: (device loop4): remounting filesystem as read-only [ 87.978158][ T5639] ERROR: (device loop0): diWrite: ixpxd invalid [ 87.978158][ T5639] [ 88.002481][ T5638] ERROR: (device loop2): remounting filesystem as read-only [pid 5641] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5636] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5636] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5636] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5650 attached [pid 5650] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053./strace-static-x86_64: Process 5651 attached ) = 0 [pid 5650] set_robust_list(0x7f91a50869a0, 24 [pid 5651] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5650] <... set_robust_list resumed>) = 0 [pid 5636] <... clone3 resumed> => {parent_tid=[5651]}, 88) = 5651 [pid 5650] rt_sigprocmask(SIG_SETMASK, [], [pid 5651] <... rseq resumed>) = 0 [pid 5650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5642] <... rename resumed>) = -1 EIO (Input/output error) [pid 5641] <... clone3 resumed> => {parent_tid=[5650]}, 88) = 5650 [pid 5637] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5636] rt_sigprocmask(SIG_SETMASK, [], [pid 5650] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5651] set_robust_list(0x7f91a50869a0, 24 [pid 5642] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5651] <... set_robust_list resumed>) = 0 [pid 5641] <... futex resumed>) = 1 [pid 5637] <... futex resumed>) = 0 [pid 5650] <... futex resumed>) = 0 [pid 5636] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] mkdir(".", 0777 [pid 5642] <... futex resumed>) = 0 [pid 5641] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5650] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5642] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5651] rt_sigprocmask(SIG_SETMASK, [], [pid 5650] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5636] <... futex resumed>) = 0 [pid 5651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5637] <... mmap resumed>) = 0x7f91a5066000 [pid 5636] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5651] mkdir(".", 0777 [pid 5637] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5651] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5650] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5637] <... mprotect resumed>) = 0 [pid 5650] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5651] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5651] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5637] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5650] <... futex resumed>) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5651] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] exit_group(0 [pid 5637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5650] <... futex resumed>) = ? [pid 5642] <... futex resumed>) = ? [pid 5641] <... exit_group resumed>) = ? [pid 5651] <... futex resumed>) = 1 [pid 5642] +++ exited with 0 +++ [pid 5636] <... futex resumed>) = 0 [pid 5651] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] <... clone3 resumed> => {parent_tid=[5652]}, 88) = 5652 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5652 attached [pid 5650] +++ exited with 0 +++ [pid 5641] +++ exited with 0 +++ [pid 5637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5652] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5641, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5637] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5637] <... futex resumed>) = 0 [pid 5652] <... rseq resumed>) = 0 [pid 5637] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5652] set_robust_list(0x7f91a50869a0, 24 [pid 5060] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5652] <... set_robust_list resumed>) = 0 [pid 5652] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5652] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5060] <... openat resumed>) = 3 [pid 5652] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] newfstatat(3, "", [pid 5652] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5652] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(3, [pid 5652] <... futex resumed>) = 1 [pid 5637] <... futex resumed>) = 0 [ 88.002547][ T5642] ERROR: (device loop4): txAbort: [ 88.002547][ T5642] [ 88.009757][ T5638] ERROR: (device loop2): txAbort: [ 88.009757][ T5638] [ 88.032830][ T5639] ERROR: (device loop0): remounting filesystem as read-only [ 88.040142][ T5639] ERROR: (device loop0): txAbort: [ 88.040142][ T5639] [pid 5652] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5645] <... write resumed>) = 16777216 [pid 5645] munmap(0x7f919cc00000, 138412032 [pid 5060] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5639] <... rename resumed>) = -1 EIO (Input/output error) [pid 5639] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5639] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5637] exit_group(0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5652] <... futex resumed>) = ? [pid 5639] <... futex resumed>) = ? [pid 5637] <... exit_group resumed>) = ? [pid 5639] +++ exited with 0 +++ [pid 5652] +++ exited with 0 +++ [pid 5637] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5637, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5056] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] unlink("./32/binderfs" [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5638] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5638] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5636] exit_group(0 [pid 5651] <... futex resumed>) = ? [pid 5636] <... exit_group resumed>) = ? [pid 5651] +++ exited with 0 +++ [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./34/binderfs") = 0 [pid 5056] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5638] <... futex resumed>) = ? [pid 5645] <... munmap resumed>) = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 88.082174][ T5639] ERROR: (device loop0): remounting filesystem as read-only [ 88.089967][ T5638] ERROR: (device loop2): remounting filesystem as read-only [pid 5645] ioctl(4, LOOP_SET_FD, 3 [pid 5638] +++ exited with 0 +++ [pid 5636] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5636, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5058] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", [pid 5056] <... umount2 resumed>) = 0 [pid 5645] <... ioctl resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] getdents64(3, [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./34/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./34/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... openat resumed>) = 4 [pid 5060] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] newfstatat(4, "", [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5645] close(3 [pid 5058] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5645] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./32/file2", [pid 5056] getdents64(4, [pid 5645] close(4 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5645] <... close resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./34/binderfs" [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5645] mkdir("./file2", 0777 [pid 5060] umount2("./32/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5645] <... mkdir resumed>) = 0 [pid 5058] <... unlink resumed>) = 0 [pid 5056] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] openat(AT_FDCWD, "./32/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] close(4 [pid 5645] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5060] <... openat resumed>) = 4 [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./34/file2" [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... rmdir resumed>) = 0 [ 88.135520][ T5645] loop5: detected capacity change from 0 to 32768 [pid 5645] <... mount resumed>) = 0 [pid 5060] getdents64(4, [pid 5058] <... umount2 resumed>) = 0 [pid 5056] getdents64(3, [pid 5645] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5645] chdir("./file2") = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5056] close(3 [pid 5645] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5645] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5644] <... futex resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5645] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5644] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] rmdir("./34" [pid 5645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5644] <... futex resumed>) = 0 [pid 5645] rename("./file2", "./file1" [pid 5644] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] getdents64(4, [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... rmdir resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] newfstatat(AT_FDCWD, "./34/file2", [pid 5056] mkdir("./35", 0777 [pid 5060] close(4 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... close resumed>) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5060] rmdir("./32/file2" [pid 5058] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5647] <... write resumed>) = 16777216 [pid 5060] <... rmdir resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] getdents64(3, [pid 5058] openat(AT_FDCWD, "./34/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] <... openat resumed>) = 4 [pid 5060] close(3 [pid 5056] <... openat resumed>) = 3 [pid 5058] newfstatat(4, "", [pid 5060] <... close resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5060] rmdir("./32" [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, [pid 5060] <... rmdir resumed>) = 0 [pid 5060] mkdir("./33", 0777 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4 [pid 5647] munmap(0x7f919cc00000, 138412032 [pid 5060] <... mkdir resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5058] rmdir("./34/file2" [pid 5649] <... write resumed>) = 16777216 [pid 5645] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5058] <... rmdir resumed>) = 0 [pid 5649] munmap(0x7f919cc00000, 138412032 [pid 5645] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] getdents64(3, [pid 5645] <... futex resumed>) = 1 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5644] <... futex resumed>) = 0 [pid 5058] close(3 [pid 5644] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... close resumed>) = 0 [pid 5645] mkdir(".", 0777 [pid 5644] <... futex resumed>) = 0 [pid 5058] rmdir("./34" [pid 5645] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5644] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] <... rmdir resumed>) = 0 [pid 5645] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5058] mkdir("./35", 0777 [pid 5645] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... mkdir resumed>) = 0 [pid 5647] <... munmap resumed>) = 0 [pid 5645] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5647] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5649] <... munmap resumed>) = 0 [pid 5645] <... futex resumed>) = 1 [pid 5644] <... futex resumed>) = 0 [ 88.189526][ T5645] ERROR: (device loop5): diWrite: ixpxd invalid [ 88.189526][ T5645] [ 88.209170][ T5645] ERROR: (device loop5): remounting filesystem as read-only [ 88.222683][ T5645] ERROR: (device loop5): txAbort: [ 88.222683][ T5645] [pid 5644] exit_group(0 [pid 5647] ioctl(4, LOOP_SET_FD, 3 [pid 5649] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5644] <... exit_group resumed>) = ? [pid 5649] <... openat resumed>) = 4 [pid 5649] ioctl(4, LOOP_SET_FD, 3 [pid 5647] <... ioctl resumed>) = 0 [pid 5647] close(3 [pid 5649] <... ioctl resumed>) = 0 [pid 5645] +++ exited with 0 +++ [pid 5644] +++ exited with 0 +++ [pid 5649] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5644, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5649] <... close resumed>) = 0 [pid 5649] close(4) = 0 [pid 5649] mkdir("./file2", 0777 [pid 5063] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5647] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5647] close(4 [pid 5063] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5647] <... close resumed>) = 0 [pid 5649] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5649] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5063] newfstatat(3, "", [pid 5647] mkdir("./file2", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5647] <... mkdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5647] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5649] <... mount resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./33/binderfs", [pid 5649] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5649] <... openat resumed>) = 3 [pid 5649] chdir("./file2" [pid 5063] unlink("./33/binderfs" [pid 5649] <... chdir resumed>) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5649] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5648] <... futex resumed>) = 0 [pid 5649] <... futex resumed>) = 1 [ 88.271516][ T5647] loop3: detected capacity change from 0 to 32768 [ 88.278238][ T5649] loop1: detected capacity change from 0 to 32768 [pid 5648] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5649] rename("./file2", "./file1" [pid 5648] <... futex resumed>) = 0 [pid 5648] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5647] <... mount resumed>) = 0 [pid 5647] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5647] chdir("./file2") = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5647] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5647] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] <... futex resumed>) = 0 [pid 5646] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5647] <... futex resumed>) = 0 [ 88.331884][ T5649] ERROR: (device loop1): diWrite: ixpxd invalid [ 88.331884][ T5649] [ 88.362268][ T5649] ERROR: (device loop1): remounting filesystem as read-only [ 88.369572][ T5649] ERROR: (device loop1): txAbort: [ 88.369572][ T5649] [pid 5647] rename("./file2", "./file1" [pid 5649] <... rename resumed>) = -1 EIO (Input/output error) [pid 5646] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5649] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5648] <... futex resumed>) = 0 [pid 5649] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5648] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5649] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5648] <... futex resumed>) = 0 [pid 5649] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5648] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5649] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5649] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5648] <... futex resumed>) = 0 [pid 5649] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5648] exit_group(0 [pid 5649] <... futex resumed>) = ? [pid 5648] <... exit_group resumed>) = ? [pid 5058] <... ioctl resumed>) = 0 [pid 5649] +++ exited with 0 +++ [pid 5648] +++ exited with 0 +++ [pid 5647] <... rename resumed>) = -1 EIO (Input/output error) [pid 5058] close(3 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5648, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=15 /* 0.15 s */} --- [pid 5057] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./34/binderfs") = 0 [pid 5057] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5653 attached [pid 5647] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5646] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5653 [pid 5057] <... umount2 resumed>) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5647] <... futex resumed>) = 0 [pid 5646] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] mkdir(".", 0777 [pid 5646] <... futex resumed>) = 0 [pid 5647] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5646] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5647] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5653] set_robust_list(0x5555565206a0, 24) = 0 [pid 5653] chdir("./35" [pid 5056] close(3) = 0 [pid 5653] <... chdir resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5647] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5057] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5653] setpgid(0, 0) = 0 [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5653] write(3, "1000", 4) = 4 [pid 5653] close(3) = 0 [pid 5653] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5647] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5647] <... futex resumed>) = 1 [pid 5646] <... futex resumed>) = 0 [pid 5647] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5646] exit_group(0 [pid 5057] newfstatat(AT_FDCWD, "./34/file2", ./strace-static-x86_64: Process 5654 attached [pid 5647] <... futex resumed>) = ? [pid 5646] <... exit_group resumed>) = ? [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5654 [pid 5654] set_robust_list(0x5555565206a0, 24 [pid 5653] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] +++ exited with 0 +++ [pid 5646] +++ exited with 0 +++ [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5654] <... set_robust_list resumed>) = 0 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5646, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5057] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5653] <... futex resumed>) = 0 [pid 5653] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5059] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5653] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5654] chdir("./35" [pid 5059] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] openat(AT_FDCWD, "./34/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5653] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5654] <... chdir resumed>) = 0 [ 88.387146][ T5647] ERROR: (device loop3): diWrite: ixpxd invalid [ 88.387146][ T5647] [ 88.399571][ T5647] ERROR: (device loop3): remounting filesystem as read-only [ 88.421607][ T5647] ERROR: (device loop3): txAbort: [ 88.421607][ T5647] [pid 5653] <... mmap resumed>) = 0x7f91a5087000 [pid 5059] newfstatat(3, "", [pid 5057] <... openat resumed>) = 4 [pid 5654] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5654] <... prctl resumed>) = 0 [pid 5057] newfstatat(4, "", [pid 5653] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5654] setpgid(0, 0 [pid 5059] getdents64(3, [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5654] <... setpgid resumed>) = 0 [pid 5653] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] getdents64(4, [pid 5653] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5655 attached [pid 5654] <... openat resumed>) = 3 [pid 5653] <... clone3 resumed> => {parent_tid=[5655]}, 88) = 5655 [pid 5059] newfstatat(AT_FDCWD, "./33/binderfs", [pid 5057] close(4 [pid 5653] rt_sigprocmask(SIG_SETMASK, [], [pid 5655] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] <... close resumed>) = 0 [pid 5653] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5655] <... rseq resumed>) = 0 [pid 5653] <... futex resumed>) = 0 [pid 5057] rmdir("./34/file2" [pid 5653] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] <... rmdir resumed>) = 0 [pid 5655] set_robust_list(0x7f91a50a79a0, 24 [pid 5057] getdents64(3, [pid 5655] <... set_robust_list resumed>) = 0 [pid 5654] write(3, "1000", 4 [pid 5060] <... ioctl resumed>) = 0 [pid 5059] unlink("./33/binderfs" [pid 5655] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] close(3 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5655] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5654] <... write resumed>) = 4 [pid 5060] <... close resumed>) = 0 [pid 5059] <... unlink resumed>) = 0 [pid 5057] close(3 [pid 5655] memfd_create("syzkaller", 0 [pid 5654] close(3 [pid 5059] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... close resumed>) = 0 [pid 5655] <... memfd_create resumed>) = 3 [pid 5654] <... close resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] rmdir("./34" [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5654] symlink("/dev/binderfs", "./binderfs" [pid 5057] <... rmdir resumed>) = 0 [pid 5655] <... mmap resumed>) = 0x7f919cc00000 [pid 5057] mkdir("./35", 0777./strace-static-x86_64: Process 5656 attached [pid 5656] set_robust_list(0x5555565206a0, 24 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5656 [pid 5057] <... mkdir resumed>) = 0 [pid 5656] <... set_robust_list resumed>) = 0 [pid 5654] <... symlink resumed>) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5656] chdir("./33" [pid 5654] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] <... openat resumed>) = 3 [pid 5656] <... chdir resumed>) = 0 [pid 5654] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5654] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5656] <... prctl resumed>) = 0 [pid 5656] setpgid(0, 0 [pid 5654] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5654] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5654] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5654] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5657]}, 88) = 5657 [pid 5654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5654] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5654] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5657 attached [pid 5657] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5657] set_robust_list(0x7f91a50a79a0, 24 [pid 5656] <... setpgid resumed>) = 0 [pid 5657] <... set_robust_list resumed>) = 0 [pid 5657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5657] memfd_create("syzkaller", 0) = 3 [pid 5656] <... openat resumed>) = 3 [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5656] write(3, "1000", 4) = 4 [pid 5656] close(3) = 0 [pid 5656] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5656] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5656] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5656] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5656] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5656] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5658 attached [pid 5658] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5656] <... clone3 resumed> => {parent_tid=[5658]}, 88) = 5658 [pid 5658] <... rseq resumed>) = 0 [pid 5656] rt_sigprocmask(SIG_SETMASK, [], [pid 5658] set_robust_list(0x7f91a50a79a0, 24 [pid 5656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5658] <... set_robust_list resumed>) = 0 [pid 5656] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5658] rt_sigprocmask(SIG_SETMASK, [], [pid 5656] <... futex resumed>) = 0 [pid 5658] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5656] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5658] memfd_create("syzkaller", 0) = 3 [pid 5655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./33/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./33/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./33/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./33") = 0 [pid 5063] mkdir("./34", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5659 attached [pid 5659] set_robust_list(0x5555565206a0, 24) = 0 [pid 5659] chdir("./35") = 0 [pid 5659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5659] setpgid(0, 0) = 0 [pid 5659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5659] write(3, "1000", 4) = 4 [pid 5659] close(3) = 0 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5659 [pid 5659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5659] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5659] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5659] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5659] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5659] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5659] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5660]}, 88) = 5660 [pid 5659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5659] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5659] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5660 attached [pid 5660] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5660] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5660] memfd_create("syzkaller", 0) = 3 [pid 5660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./33/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./33/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5655] <... write resumed>) = 16777216 [pid 5655] munmap(0x7f919cc00000, 138412032 [pid 5059] <... openat resumed>) = 4 [pid 5059] newfstatat(4, "", [pid 5655] <... munmap resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5655] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5655] <... openat resumed>) = 4 [pid 5655] ioctl(4, LOOP_SET_FD, 3 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./33/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./33") = 0 [pid 5059] mkdir("./34", 0777 [pid 5655] <... ioctl resumed>) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5655] close(3 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5655] <... close resumed>) = 0 [pid 5655] close(4 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5655] <... close resumed>) = 0 [pid 5655] mkdir("./file2", 0777) = 0 [pid 5655] mount("/dev/loop2", "./file2", "jfs", 0, "") = 0 [pid 5655] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5655] chdir("./file2") = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5655] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5653] <... futex resumed>) = 0 [ 88.881977][ T5655] loop2: detected capacity change from 0 to 32768 [pid 5655] rename("./file2", "./file1" [pid 5653] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... write resumed>) = 16777216 [pid 5653] <... futex resumed>) = 0 [pid 5653] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5657] munmap(0x7f919cc00000, 138412032 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5657] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5661 attached [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5661 [ 88.932428][ T5655] ERROR: (device loop2): diWrite: ixpxd invalid [ 88.932428][ T5655] [pid 5657] <... openat resumed>) = 4 [pid 5653] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5657] ioctl(4, LOOP_SET_FD, 3 [pid 5653] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5661] set_robust_list(0x5555565206a0, 24 [pid 5653] <... mmap resumed>) = 0x7f91a5066000 [pid 5661] <... set_robust_list resumed>) = 0 [pid 5653] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5661] chdir("./34" [pid 5653] <... mprotect resumed>) = 0 [pid 5661] <... chdir resumed>) = 0 [pid 5653] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5661] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5653] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5661] <... prctl resumed>) = 0 [pid 5653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5661] setpgid(0, 0) = 0 [pid 5653] <... clone3 resumed> => {parent_tid=[5662]}, 88) = 5662 [pid 5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5653] rt_sigprocmask(SIG_SETMASK, [], [pid 5661] <... openat resumed>) = 3 [pid 5653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5653] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5661] write(3, "1000", 4) = 4 [pid 5661] close(3) = 0 [pid 5661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5661] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5661] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5661] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5661] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5661] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5663]}, 88) = 5663 [pid 5661] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5661] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5661] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5663 attached [pid 5663] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5663] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5663] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 5662 attached [pid 5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5657] <... ioctl resumed>) = 0 [pid 5663] <... mmap resumed>) = 0x7f919cc00000 [pid 5662] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5657] close(3 [pid 5662] set_robust_list(0x7f91a50869a0, 24 [pid 5657] <... close resumed>) = 0 [pid 5655] <... rename resumed>) = -1 EIO (Input/output error) [pid 5662] <... set_robust_list resumed>) = 0 [pid 5657] close(4 [pid 5655] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... close resumed>) = 0 [pid 5662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5657] mkdir("./file2", 0777 [pid 5655] <... futex resumed>) = 0 [pid 5655] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5662] mkdir(".", 0777 [pid 5657] <... mkdir resumed>) = 0 [pid 5662] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5662] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5657] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5662] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5662] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5653] <... futex resumed>) = 0 [pid 5662] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5653] exit_group(0 [pid 5662] <... futex resumed>) = ? [pid 5655] <... futex resumed>) = ? [pid 5653] <... exit_group resumed>) = ? [pid 5655] +++ exited with 0 +++ [pid 5662] +++ exited with 0 +++ [pid 5657] <... mount resumed>) = 0 [pid 5653] +++ exited with 0 +++ [pid 5657] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5653, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5657] <... openat resumed>) = 3 [pid 5657] chdir("./file2") = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5058] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5657] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5657] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5654] <... futex resumed>) = 0 [pid 5654] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] rename("./file2", "./file1" [pid 5654] <... futex resumed>) = 0 [ 88.991546][ T5655] ERROR: (device loop2): remounting filesystem as read-only [ 89.000043][ T5657] loop0: detected capacity change from 0 to 32768 [ 89.011757][ T5655] ERROR: (device loop2): txAbort: [ 89.011757][ T5655] [pid 5654] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5658] <... write resumed>) = 16777216 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5658] munmap(0x7f919cc00000, 138412032 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./35/binderfs") = 0 [pid 5058] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5658] <... munmap resumed>) = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5654] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5654] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5658] <... openat resumed>) = 4 [ 89.069912][ T5657] ERROR: (device loop0): diWrite: ixpxd invalid [ 89.069912][ T5657] [ 89.100968][ T5657] ERROR: (device loop0): remounting filesystem as read-only [pid 5658] ioctl(4, LOOP_SET_FD, 3 [pid 5654] <... mmap resumed>) = 0x7f91a5066000 [pid 5654] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5654] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5658] <... ioctl resumed>) = 0 [pid 5658] close(3) = 0 [pid 5658] close(4) = 0 [pid 5658] mkdir("./file2", 0777) = 0 [pid 5658] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5657] <... rename resumed>) = -1 EIO (Input/output error) [pid 5654] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5664]}, 88) = 5664 [pid 5657] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5654] rt_sigprocmask(SIG_SETMASK, [], [pid 5657] <... futex resumed>) = 0 [pid 5654] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5657] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5654] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5664 attached [pid 5658] <... mount resumed>) = 0 [pid 5654] <... futex resumed>) = 0 [pid 5658] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5658] chdir("./file2") = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5658] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5656] <... futex resumed>) = 0 [pid 5658] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5656] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] <... futex resumed>) = 0 [pid 5658] rename("./file2", "./file1" [pid 5656] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] <... ioctl resumed>) = 0 [pid 5664] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5664] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5664] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5664] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5664] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5664] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5654] <... futex resumed>) = 0 [ 89.125077][ T5658] loop4: detected capacity change from 0 to 32768 [ 89.133182][ T5657] ERROR: (device loop0): txAbort: [ 89.133182][ T5657] [ 89.161516][ T5658] ERROR: (device loop4): diWrite: ixpxd invalid [ 89.161516][ T5658] [pid 5654] exit_group(0 [pid 5664] <... futex resumed>) = ? [pid 5657] <... futex resumed>) = ? [pid 5654] <... exit_group resumed>) = ? [pid 5059] close(3 [pid 5664] +++ exited with 0 +++ [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5665 attached [pid 5657] +++ exited with 0 +++ [pid 5654] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5654, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=15 /* 0.15 s */} --- [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5665 [pid 5665] set_robust_list(0x5555565206a0, 24 [pid 5056] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5665] <... set_robust_list resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5656] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5665] chdir("./34" [pid 5656] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5665] <... chdir resumed>) = 0 [pid 5656] <... futex resumed>) = 0 [pid 5665] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] <... openat resumed>) = 3 [pid 5665] <... prctl resumed>) = 0 [pid 5656] <... mmap resumed>) = 0x7f91a5066000 [pid 5056] newfstatat(3, "", [pid 5665] setpgid(0, 0) = 0 [pid 5656] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5656] <... mprotect resumed>) = 0 [pid 5056] getdents64(3, [pid 5665] <... openat resumed>) = 3 [pid 5656] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5665] write(3, "1000", 4 [pid 5656] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5665] <... write resumed>) = 4 [pid 5656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5667 attached [pid 5665] close(3 [pid 5656] <... clone3 resumed> => {parent_tid=[5667]}, 88) = 5667 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5667] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5665] <... close resumed>) = 0 [pid 5656] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] newfstatat(AT_FDCWD, "./35/binderfs", [pid 5667] <... rseq resumed>) = 0 [pid 5665] symlink("/dev/binderfs", "./binderfs" [pid 5663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5656] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5667] set_robust_list(0x7f91a50869a0, 24 [pid 5665] <... symlink resumed>) = 0 [pid 5656] <... futex resumed>) = 0 [pid 5667] <... set_robust_list resumed>) = 0 [pid 5665] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] unlink("./35/binderfs" [pid 5667] rt_sigprocmask(SIG_SETMASK, [], [pid 5665] <... futex resumed>) = 0 [pid 5667] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5665] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5056] <... unlink resumed>) = 0 [pid 5667] mkdir(".", 0777 [pid 5665] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5658] <... rename resumed>) = -1 EIO (Input/output error) [pid 5667] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5665] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5658] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5667] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5658] <... futex resumed>) = 0 [pid 5665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5658] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] <... mmap resumed>) = 0x7f91a5087000 [pid 5665] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5667] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5668]}, 88) = 5668 [pid 5665] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5668 attached [pid 5667] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5668] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5667] <... futex resumed>) = 1 [pid 5665] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] <... futex resumed>) = 0 [pid 5668] <... rseq resumed>) = 0 [ 89.181563][ T5658] ERROR: (device loop4): remounting filesystem as read-only [ 89.211145][ T5658] ERROR: (device loop4): txAbort: [ 89.211145][ T5658] [pid 5656] exit_group(0 [pid 5668] set_robust_list(0x7f91a50a79a0, 24 [pid 5658] <... futex resumed>) = ? [pid 5656] <... exit_group resumed>) = ? [pid 5668] <... set_robust_list resumed>) = 0 [pid 5665] <... futex resumed>) = 0 [pid 5658] +++ exited with 0 +++ [pid 5660] <... write resumed>) = 16777216 [pid 5665] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5668] rt_sigprocmask(SIG_SETMASK, [], [pid 5667] +++ exited with 0 +++ [pid 5660] munmap(0x7f919cc00000, 138412032 [pid 5656] +++ exited with 0 +++ [pid 5668] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5656, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [pid 5668] memfd_create("syzkaller", 0 [pid 5060] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5668] <... memfd_create resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5668] <... mmap resumed>) = 0x7f919cc00000 [pid 5060] <... openat resumed>) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./33/binderfs") = 0 [pid 5060] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] <... munmap resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./33/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./33/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./33/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./33/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./33" [pid 5660] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5060] <... rmdir resumed>) = 0 [pid 5660] <... openat resumed>) = 4 [pid 5060] mkdir("./34", 0777 [pid 5660] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... mkdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5660] <... ioctl resumed>) = 0 [pid 5660] close(3) = 0 [pid 5660] close(4) = 0 [pid 5660] mkdir("./file2", 0777) = 0 [ 89.299947][ T5660] loop1: detected capacity change from 0 to 32768 [pid 5660] mount("/dev/loop1", "./file2", "jfs", 0, "") = 0 [pid 5660] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5660] chdir("./file2") = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5660] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5660] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5659] <... futex resumed>) = 0 [pid 5660] rename("./file2", "./file1" [pid 5659] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./35/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5663] <... write resumed>) = 16777216 [pid 5058] openat(AT_FDCWD, "./35/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./35/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5663] munmap(0x7f919cc00000, 138412032 [pid 5058] rmdir("./35") = 0 [pid 5058] mkdir("./36", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5663] <... munmap resumed>) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5660] <... rename resumed>) = -1 EIO (Input/output error) [pid 5663] <... openat resumed>) = 4 [pid 5660] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] ioctl(4, LOOP_SET_FD, 3 [pid 5660] <... futex resumed>) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5660] mkdir(".", 0777 [pid 5659] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5663] <... ioctl resumed>) = 0 [pid 5660] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5659] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5663] close(3 [pid 5660] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5663] <... close resumed>) = 0 [pid 5663] close(4 [pid 5660] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5663] <... close resumed>) = 0 [pid 5660] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5659] exit_group(0) = ? [pid 5663] mkdir("./file2", 0777) = 0 [pid 5663] mount("/dev/loop5", "./file2", "jfs", 0, "") = 0 [pid 5660] +++ exited with 0 +++ [pid 5659] +++ exited with 0 +++ [pid 5663] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5659, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5663] <... openat resumed>) = 3 [pid 5057] restart_syscall(<... resuming interrupted clone ...> [pid 5663] chdir("./file2" [pid 5057] <... restart_syscall resumed>) = 0 [pid 5057] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./35/binderfs") = 0 [pid 5057] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5663] <... chdir resumed>) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 89.396762][ T5660] ERROR: (device loop1): diWrite: ixpxd invalid [ 89.396762][ T5660] [ 89.410493][ T5660] ERROR: (device loop1): remounting filesystem as read-only [ 89.418439][ T5660] ERROR: (device loop1): txAbort: [ 89.418439][ T5660] [ 89.435850][ T5663] loop5: detected capacity change from 0 to 32768 [pid 5663] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5661] <... futex resumed>) = 0 [pid 5663] rename("./file2", "./file1" [pid 5661] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5661] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./35/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./35/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./35/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./35") = 0 [pid 5057] mkdir("./36", 0777) = 0 [ 89.485490][ T5663] ERROR: (device loop5): diWrite: ixpxd invalid [ 89.485490][ T5663] [ 89.511955][ T5663] ERROR: (device loop5): remounting filesystem as read-only [pid 5661] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5661] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5057] <... openat resumed>) = 3 [pid 5661] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5661] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5661] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5661] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5670]}, 88) = 5670 [pid 5661] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5661] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5661] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5670 attached [pid 5670] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5670] set_robust_list(0x7f91a50869a0, 24 [pid 5056] <... umount2 resumed>) = 0 [pid 5670] <... set_robust_list resumed>) = 0 [pid 5663] <... rename resumed>) = -1 EIO (Input/output error) [pid 5056] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5670] rt_sigprocmask(SIG_SETMASK, [], [pid 5663] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5663] <... futex resumed>) = 0 [pid 5056] newfstatat(AT_FDCWD, "./35/file2", [pid 5670] mkdir(".", 0777 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5670] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5663] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5670] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5670] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./35/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5670] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... openat resumed>) = 4 [pid 5670] <... futex resumed>) = 1 [pid 5661] <... futex resumed>) = 0 [pid 5056] newfstatat(4, "", [pid 5670] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5661] exit_group(0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5670] <... futex resumed>) = ? [pid 5661] <... exit_group resumed>) = ? [pid 5056] getdents64(4, [pid 5670] +++ exited with 0 +++ [pid 5663] <... futex resumed>) = ? [pid 5060] <... ioctl resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5060] close(3 [pid 5056] rmdir("./35/file2" [pid 5663] +++ exited with 0 +++ [pid 5661] +++ exited with 0 +++ [pid 5060] <... close resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5661, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 ./strace-static-x86_64: Process 5671 attached [pid 5063] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5671 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] rmdir("./35" [ 89.531170][ T5663] ERROR: (device loop5): txAbort: [ 89.531170][ T5663] [pid 5063] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] <... rmdir resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5056] mkdir("./36", 0777 [pid 5671] set_robust_list(0x5555565206a0, 24) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5671] chdir("./34" [pid 5063] getdents64(3, [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5671] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] <... openat resumed>) = 3 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5671] <... prctl resumed>) = 0 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5671] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5671] <... setpgid resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./34/binderfs" [pid 5671] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5671] write(3, "1000", 4) = 4 [pid 5063] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5671] close(3) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5671] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./34/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5671] <... symlink resumed>) = 0 [pid 5063] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5671] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5671] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./34/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5671] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] <... openat resumed>) = 4 [pid 5671] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] newfstatat(4, "", [pid 5671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5671] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5671] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./34/file2" [pid 5671] <... mprotect resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5671] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] getdents64(3, [pid 5671] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] close(3./strace-static-x86_64: Process 5672 attached [pid 5671] <... clone3 resumed> => {parent_tid=[5672]}, 88) = 5672 [pid 5063] <... close resumed>) = 0 [pid 5672] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5671] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] rmdir("./34" [pid 5672] <... rseq resumed>) = 0 [pid 5671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5672] set_robust_list(0x7f91a50a79a0, 24 [pid 5671] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 5671] <... futex resumed>) = 0 [pid 5668] <... write resumed>) = 16777216 [pid 5672] <... set_robust_list resumed>) = 0 [pid 5671] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] mkdir("./35", 0777 [pid 5672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5672] memfd_create("syzkaller", 0) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5668] munmap(0x7f919cc00000, 138412032 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5672] <... mmap resumed>) = 0x7f919cc00000 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5668] <... munmap resumed>) = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5058] <... ioctl resumed>) = 0 [pid 5668] <... openat resumed>) = 4 [pid 5668] ioctl(4, LOOP_SET_FD, 3 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5673 attached [pid 5668] <... ioctl resumed>) = 0 [pid 5668] close(3 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5673 [pid 5673] set_robust_list(0x5555565206a0, 24 [pid 5668] <... close resumed>) = 0 [pid 5673] <... set_robust_list resumed>) = 0 [pid 5668] close(4) = 0 [pid 5673] chdir("./36" [pid 5668] mkdir("./file2", 0777) = 0 [pid 5673] <... chdir resumed>) = 0 [pid 5673] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5668] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5057] <... ioctl resumed>) = 0 [pid 5673] <... prctl resumed>) = 0 [pid 5673] setpgid(0, 0) = 0 [pid 5673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 89.713569][ T5668] loop3: detected capacity change from 0 to 32768 [pid 5673] write(3, "1000", 4) = 4 [pid 5057] close(3) = 0 [pid 5673] close(3) = 0 [pid 5673] symlink("/dev/binderfs", "./binderfs" [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5673] <... symlink resumed>) = 0 [pid 5673] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5674 [pid 5673] <... futex resumed>) = 0 [pid 5673] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 ./strace-static-x86_64: Process 5674 attached [pid 5674] set_robust_list(0x5555565206a0, 24) = 0 [pid 5674] chdir("./36") = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5673] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5674] <... prctl resumed>) = 0 [pid 5674] setpgid(0, 0) = 0 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5673] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5674] write(3, "1000", 4 [pid 5673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5674] <... write resumed>) = 4 [pid 5674] close(3 [pid 5673] <... mmap resumed>) = 0x7f91a5087000 [pid 5674] <... close resumed>) = 0 [pid 5674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5674] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5674] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5674] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5674] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5668] <... mount resumed>) = 0 [pid 5668] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5674] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5674] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5668] <... openat resumed>) = 3 [pid 5674] <... clone3 resumed> => {parent_tid=[5675]}, 88) = 5675 [pid 5674] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5675 attached NULL, 8) = 0 [pid 5675] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5674] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... rseq resumed>) = 0 [pid 5674] <... futex resumed>) = 0 [pid 5675] set_robust_list(0x7f91a50a79a0, 24 [pid 5674] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5668] chdir("./file2" [pid 5675] <... set_robust_list resumed>) = 0 [pid 5675] rt_sigprocmask(SIG_SETMASK, [], [pid 5673] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5675] memfd_create("syzkaller", 0 [pid 5668] <... chdir resumed>) = 0 [pid 5673] <... mprotect resumed>) = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5675] <... memfd_create resumed>) = 3 [pid 5673] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5668] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5673] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5668] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... mmap resumed>) = 0x7f919cc00000 [pid 5673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5668] <... futex resumed>) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5668] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5665] <... futex resumed>) = 0 [pid 5668] rename("./file2", "./file1" [pid 5665] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... clone3 resumed> => {parent_tid=[5676]}, 88) = 5676 ./strace-static-x86_64: Process 5676 attached [pid 5673] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5676] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5673] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5673] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5676] <... rseq resumed>) = 0 [pid 5676] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5676] memfd_create("syzkaller", 0 [pid 5056] <... ioctl resumed>) = 0 [ 89.813103][ T5668] ERROR: (device loop3): diWrite: ixpxd invalid [ 89.813103][ T5668] [ 89.838247][ T5668] ERROR: (device loop3): remounting filesystem as read-only [pid 5056] close(3 [pid 5676] <... memfd_create resumed>) = 3 [pid 5676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5668] <... rename resumed>) = -1 EIO (Input/output error) [pid 5056] <... close resumed>) = 0 [pid 5676] <... mmap resumed>) = 0x7f919cc00000 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5677 ./strace-static-x86_64: Process 5677 attached [pid 5668] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5665] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5677] set_robust_list(0x5555565206a0, 24 [pid 5665] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5668] mkdir(".", 0777 [pid 5665] <... futex resumed>) = 0 [pid 5665] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5668] <... mkdir resumed>) = -1 EEXIST (File exists) [ 89.861071][ T5668] ERROR: (device loop3): txAbort: [ 89.861071][ T5668] [pid 5677] <... set_robust_list resumed>) = 0 [pid 5672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5668] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5677] chdir("./36") = 0 [pid 5677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5677] setpgid(0, 0) = 0 [pid 5668] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5677] write(3, "1000", 4) = 4 [pid 5677] close(3) = 0 [pid 5677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5677] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5677] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5668] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5668] <... futex resumed>) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5677] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5668] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] exit_group(0 [pid 5677] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5665] <... exit_group resumed>) = ? [pid 5677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5677] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5677] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5677] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5678]}, 88) = 5678 ./strace-static-x86_64: Process 5678 attached [pid 5677] rt_sigprocmask(SIG_SETMASK, [], [pid 5678] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5677] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5668] <... futex resumed>) = ? [pid 5678] <... rseq resumed>) = 0 [pid 5677] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5678] set_robust_list(0x7f91a50a79a0, 24 [pid 5677] <... futex resumed>) = 0 [pid 5678] <... set_robust_list resumed>) = 0 [pid 5677] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5678] memfd_create("syzkaller", 0) = 3 [pid 5668] +++ exited with 0 +++ [pid 5665] +++ exited with 0 +++ [pid 5678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5665, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5063] <... ioctl resumed>) = 0 [pid 5059] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./34/binderfs") = 0 [pid 5059] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5679 attached [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5679 [pid 5679] set_robust_list(0x5555565206a0, 24) = 0 [pid 5679] chdir("./35") = 0 [pid 5679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5679] setpgid(0, 0) = 0 [pid 5679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5679] write(3, "1000", 4) = 4 [pid 5679] close(3 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5679] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5679] symlink("/dev/binderfs", "./binderfs" [pid 5059] newfstatat(AT_FDCWD, "./34/file2", [pid 5679] <... symlink resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5679] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5679] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5679] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5059] openat(AT_FDCWD, "./34/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5679] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... openat resumed>) = 4 [pid 5679] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] newfstatat(4, "", [pid 5679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5679] <... mmap resumed>) = 0x7f91a5087000 [pid 5059] getdents64(4, [pid 5679] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5679] <... mprotect resumed>) = 0 [pid 5059] getdents64(4, [pid 5679] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5679] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5059] close(4 [pid 5679] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5059] <... close resumed>) = 0 [pid 5059] rmdir("./34/file2" [pid 5679] <... clone3 resumed> => {parent_tid=[5680]}, 88) = 5680 [pid 5059] <... rmdir resumed>) = 0 [pid 5679] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] getdents64(3, ./strace-static-x86_64: Process 5680 attached [pid 5679] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5680] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5679] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] close(3 [pid 5680] <... rseq resumed>) = 0 [pid 5679] <... futex resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5680] set_robust_list(0x7f91a50a79a0, 24 [pid 5679] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] rmdir("./34" [pid 5680] <... set_robust_list resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5680] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] mkdir("./35", 0777 [pid 5680] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5680] memfd_create("syzkaller", 0) = 3 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] <... openat resumed>) = 3 [pid 5680] <... mmap resumed>) = 0x7f919cc00000 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5672] <... write resumed>) = 16777216 [pid 5672] munmap(0x7f919cc00000, 138412032) = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5672] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5672] close(3) = 0 [pid 5672] close(4) = 0 [pid 5672] mkdir("./file2", 0777) = 0 [pid 5672] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5672] <... mount resumed>) = 0 [pid 5672] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5672] chdir("./file2") = 0 [ 90.257641][ T5672] loop4: detected capacity change from 0 to 32768 [pid 5672] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5672] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 5672] rename("./file2", "./file1" [ 90.319874][ T5672] ERROR: (device loop4): diWrite: ixpxd invalid [ 90.319874][ T5672] [pid 5671] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] <... write resumed>) = 16777216 [pid 5675] <... write resumed>) = 16777216 [pid 5671] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5059] <... ioctl resumed>) = 0 [pid 5676] munmap(0x7f919cc00000, 138412032 [pid 5675] munmap(0x7f919cc00000, 138412032 [pid 5671] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5671] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5059] close(3./strace-static-x86_64: Process 5681 attached [pid 5676] <... munmap resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5681] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5671] <... clone3 resumed> => {parent_tid=[5681]}, 88) = 5681 [pid 5681] <... rseq resumed>) = 0 [pid 5671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5681] set_robust_list(0x7f91a50869a0, 24 [pid 5671] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... set_robust_list resumed>) = 0 [pid 5671] <... futex resumed>) = 0 [pid 5681] rt_sigprocmask(SIG_SETMASK, [], [pid 5671] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5681] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 90.361138][ T5672] ERROR: (device loop4): remounting filesystem as read-only [ 90.388127][ T5672] ERROR: (device loop4): txAbort: [ 90.388127][ T5672] [pid 5681] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5681] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5681] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5681] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5676] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5675] <... munmap resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5676] <... openat resumed>) = 4 [pid 5675] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5676] ioctl(4, LOOP_SET_FD, 3 [pid 5675] <... openat resumed>) = 4 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5682 ./strace-static-x86_64: Process 5682 attached [pid 5672] <... rename resumed>) = -1 EIO (Input/output error) [pid 5682] set_robust_list(0x5555565206a0, 24) = 0 [pid 5682] chdir("./35") = 0 [pid 5682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5682] setpgid(0, 0) = 0 [pid 5682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5676] <... ioctl resumed>) = 0 [pid 5675] ioctl(4, LOOP_SET_FD, 3 [pid 5676] close(3 [pid 5682] <... openat resumed>) = 3 [pid 5672] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] write(3, "1000", 4 [pid 5672] <... futex resumed>) = 0 [pid 5682] <... write resumed>) = 4 [pid 5672] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5682] close(3 [pid 5671] exit_group(0 [pid 5682] <... close resumed>) = 0 [pid 5681] <... futex resumed>) = ? [pid 5672] <... futex resumed>) = ? [pid 5671] <... exit_group resumed>) = ? [pid 5682] symlink("/dev/binderfs", "./binderfs" [pid 5681] +++ exited with 0 +++ [pid 5672] +++ exited with 0 +++ [pid 5671] +++ exited with 0 +++ [pid 5682] <... symlink resumed>) = 0 [pid 5682] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5671, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5682] <... futex resumed>) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5682] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5676] <... close resumed>) = 0 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5682] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5676] close(4) = 0 [pid 5676] mkdir("./file2", 0777 [pid 5675] <... ioctl resumed>) = 0 [pid 5060] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5682] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5682] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5676] <... mkdir resumed>) = 0 [pid 5675] close(3 [pid 5060] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5675] <... close resumed>) = 0 [pid 5675] close(4 [pid 5682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5676] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5060] <... openat resumed>) = 3 [pid 5682] <... mmap resumed>) = 0x7f91a5087000 [pid 5060] newfstatat(3, "", [pid 5682] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5682] <... mprotect resumed>) = 0 [pid 5060] getdents64(3, [pid 5682] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5682] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5682] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5675] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5682] <... clone3 resumed> => {parent_tid=[5683]}, 88) = 5683 [pid 5675] mkdir("./file2", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5683 attached [pid 5682] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] unlink("./34/binderfs" [pid 5683] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5682] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5675] <... mkdir resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5683] <... rseq resumed>) = 0 [pid 5682] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5683] set_robust_list(0x7f91a50a79a0, 24 [pid 5682] <... futex resumed>) = 0 [pid 5683] <... set_robust_list resumed>) = 0 [pid 5682] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5683] memfd_create("syzkaller", 0) = 3 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5675] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5676] <... mount resumed>) = 0 [pid 5676] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5676] chdir("./file2") = 0 [pid 5676] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5676] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5673] <... futex resumed>) = 0 [pid 5676] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5673] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5673] <... futex resumed>) = 0 [ 90.425672][ T5672] ERROR: (device loop4): remounting filesystem as read-only [ 90.442325][ T5676] loop2: detected capacity change from 0 to 32768 [ 90.449212][ T5675] loop1: detected capacity change from 0 to 32768 [pid 5676] rename("./file2", "./file1" [pid 5673] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... umount2 resumed>) = 0 [pid 5678] <... write resumed>) = 16777216 [pid 5060] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./34/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./34/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5678] munmap(0x7f919cc00000, 138412032 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./34/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5675] <... mount resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5675] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5675] <... openat resumed>) = 3 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./34/file2") = 0 [pid 5675] chdir("./file2") = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5675] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] getdents64(3, [pid 5675] <... futex resumed>) = 1 [pid 5674] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5674] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] rename("./file2", "./file1" [pid 5060] close(3 [pid 5678] <... munmap resumed>) = 0 [pid 5678] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 90.508060][ T5676] ERROR: (device loop2): diWrite: ixpxd invalid [ 90.508060][ T5676] [ 90.542385][ T5676] ERROR: (device loop2): remounting filesystem as read-only [ 90.550377][ T5675] ERROR: (device loop1): diWrite: ixpxd invalid [pid 5060] <... close resumed>) = 0 [pid 5673] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5678] <... openat resumed>) = 4 [pid 5678] ioctl(4, LOOP_SET_FD, 3 [pid 5673] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] rmdir("./34" [pid 5676] <... rename resumed>) = -1 EIO (Input/output error) [pid 5673] <... futex resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5676] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] mkdir("./35", 0777 [pid 5678] <... ioctl resumed>) = 0 [pid 5678] close(3 [pid 5674] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5678] <... close resumed>) = 0 [pid 5674] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5676] <... futex resumed>) = 0 [pid 5675] <... rename resumed>) = -1 EIO (Input/output error) [pid 5674] <... mmap resumed>) = 0x7f91a5066000 [pid 5673] <... mmap resumed>) = 0x7f91a5066000 [pid 5060] <... mkdir resumed>) = 0 [pid 5678] close(4 [pid 5676] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5675] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5673] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5680] <... write resumed>) = 16777216 [pid 5678] <... close resumed>) = 0 [pid 5674] <... mprotect resumed>) = 0 [pid 5673] <... mprotect resumed>) = 0 [pid 5678] mkdir("./file2", 0777 [pid 5674] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5673] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... openat resumed>) = 3 [pid 5680] munmap(0x7f919cc00000, 138412032 [pid 5678] <... mkdir resumed>) = 0 [pid 5675] <... futex resumed>) = 0 [pid 5674] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5673] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5674] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5674] <... clone3 resumed> => {parent_tid=[5684]}, 88) = 5684 [pid 5674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5674] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5684 attached [pid 5678] mount("/dev/loop0", "./file2", "jfs", 0, ""./strace-static-x86_64: Process 5685 attached [pid 5684] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5685] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5684] <... rseq resumed>) = 0 [pid 5673] <... clone3 resumed> => {parent_tid=[5685]}, 88) = 5685 [pid 5685] <... rseq resumed>) = 0 [pid 5684] set_robust_list(0x7f91a50869a0, 24 [pid 5675] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5673] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5684] <... set_robust_list resumed>) = 0 [pid 5684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5684] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5684] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5685] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5685] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5673] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5685] mkdir(".", 0777 [pid 5673] <... futex resumed>) = 0 [pid 5685] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5684] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5673] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5685] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5684] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5674] <... futex resumed>) = 0 [pid 5684] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5674] exit_group(0 [pid 5684] <... futex resumed>) = ? [pid 5675] <... futex resumed>) = ? [pid 5674] <... exit_group resumed>) = ? [pid 5684] +++ exited with 0 +++ [pid 5680] <... munmap resumed>) = 0 [pid 5675] +++ exited with 0 +++ [pid 5674] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5674, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5057] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 90.550377][ T5675] [ 90.559479][ T5676] ERROR: (device loop2): txAbort: [ 90.559479][ T5676] [ 90.572036][ T5678] loop0: detected capacity change from 0 to 32768 [ 90.577374][ T5675] ERROR: (device loop1): remounting filesystem as read-only [ 90.586159][ T5675] ERROR: (device loop1): txAbort: [ 90.586159][ T5675] [pid 5057] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5680] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5678] <... mount resumed>) = 0 [pid 5057] <... openat resumed>) = 3 [pid 5678] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5057] newfstatat(3, "", [pid 5678] <... openat resumed>) = 3 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5685] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5680] <... openat resumed>) = 4 [pid 5678] chdir("./file2" [pid 5057] getdents64(3, [pid 5680] ioctl(4, LOOP_SET_FD, 3 [pid 5678] <... chdir resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5678] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5057] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5678] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5678] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] newfstatat(AT_FDCWD, "./36/binderfs", [pid 5678] <... futex resumed>) = 1 [pid 5677] <... futex resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5678] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5677] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] unlink("./36/binderfs" [pid 5685] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5677] <... futex resumed>) = 0 [pid 5057] <... unlink resumed>) = 0 [pid 5685] <... futex resumed>) = 1 [pid 5678] rename("./file2", "./file1" [pid 5677] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... futex resumed>) = 0 [pid 5057] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5685] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5680] <... ioctl resumed>) = 0 [pid 5673] exit_group(0 [pid 5685] <... futex resumed>) = ? [pid 5680] close(3 [pid 5676] <... futex resumed>) = ? [pid 5673] <... exit_group resumed>) = ? [pid 5680] <... close resumed>) = 0 [pid 5676] +++ exited with 0 +++ [pid 5680] close(4 [pid 5685] +++ exited with 0 +++ [pid 5680] <... close resumed>) = 0 [pid 5673] +++ exited with 0 +++ [pid 5680] mkdir("./file2", 0777 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5673, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5680] <... mkdir resumed>) = 0 [pid 5058] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [ 90.620632][ T5680] loop5: detected capacity change from 0 to 32768 [ 90.622862][ T5678] ERROR: (device loop0): diWrite: ixpxd invalid [ 90.622862][ T5678] [pid 5680] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", [pid 5683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5677] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5058] newfstatat(AT_FDCWD, "./36/binderfs", [pid 5680] <... mount resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5680] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] unlink("./36/binderfs" [pid 5680] <... openat resumed>) = 3 [pid 5677] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5680] chdir("./file2" [pid 5677] <... mprotect resumed>) = 0 [pid 5058] <... unlink resumed>) = 0 [pid 5680] <... chdir resumed>) = 0 [pid 5677] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5677] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5677] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5680] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 5686 attached [pid 5686] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5686] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5686] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5680] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5679] <... futex resumed>) = 0 [pid 5679] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5679] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5680] rename("./file2", "./file1" [pid 5677] <... clone3 resumed> => {parent_tid=[5686]}, 88) = 5686 [pid 5677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5677] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] <... futex resumed>) = 0 [pid 5677] <... futex resumed>) = 1 [pid 5686] mkdir(".", 0777 [pid 5677] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5686] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5686] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5686] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5677] <... futex resumed>) = 0 [pid 5686] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5678] <... rename resumed>) = -1 EIO (Input/output error) [pid 5678] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.668364][ T5678] ERROR: (device loop0): remounting filesystem as read-only [ 90.676869][ T5678] ERROR: (device loop0): txAbort: [ 90.676869][ T5678] [ 90.696254][ T5680] ERROR: (device loop5): diWrite: ixpxd invalid [ 90.696254][ T5680] [ 90.697184][ T5678] ERROR: (device loop0): remounting filesystem as read-only [pid 5678] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] <... umount2 resumed>) = 0 [pid 5677] exit_group(0 [pid 5686] <... futex resumed>) = ? [pid 5678] <... futex resumed>) = ? [pid 5677] <... exit_group resumed>) = ? [pid 5686] +++ exited with 0 +++ [pid 5678] +++ exited with 0 +++ [pid 5677] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5677, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5056] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5056] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... openat resumed>) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] getdents64(3, [pid 5058] newfstatat(AT_FDCWD, "./36/file2", [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] newfstatat(AT_FDCWD, "./36/binderfs", [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] openat(AT_FDCWD, "./36/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] unlink("./36/binderfs" [pid 5058] <... openat resumed>) = 4 [pid 5056] <... unlink resumed>) = 0 [pid 5058] newfstatat(4, "", [pid 5056] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5679] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] getdents64(4, [pid 5056] <... umount2 resumed>) = 0 [pid 5679] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5679] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5679] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] newfstatat(AT_FDCWD, "./36/file2", [pid 5679] <... mmap resumed>) = 0x7f91a5066000 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5679] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5056] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5679] <... mprotect resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5679] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5056] openat(AT_FDCWD, "./36/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5679] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5056] <... openat resumed>) = 4 [pid 5679] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5679] <... clone3 resumed> => {parent_tid=[5687]}, 88) = 5687 [pid 5056] getdents64(4, [pid 5679] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5679] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] getdents64(4, [pid 5679] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5679] <... futex resumed>) = 0 [pid 5056] close(4 [pid 5679] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./36/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3 [pid 5058] getdents64(4, [pid 5056] <... close resumed>) = 0 ./strace-static-x86_64: Process 5687 attached [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] rmdir("./36" [pid 5687] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5680] <... rename resumed>) = -1 EIO (Input/output error) [pid 5058] close(4 [pid 5056] <... rmdir resumed>) = 0 [pid 5687] <... rseq resumed>) = 0 [pid 5680] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... close resumed>) = 0 [pid 5687] set_robust_list(0x7f91a50869a0, 24 [pid 5680] <... futex resumed>) = 0 [pid 5056] mkdir("./37", 0777 [pid 5687] <... set_robust_list resumed>) = 0 [pid 5680] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] rmdir("./36/file2" [pid 5056] <... mkdir resumed>) = 0 [pid 5687] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5687] mkdir(".", 0777 [pid 5058] <... rmdir resumed>) = 0 [pid 5687] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5687] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5058] getdents64(3, [pid 5687] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5687] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5687] <... futex resumed>) = 1 [pid 5679] <... futex resumed>) = 0 [pid 5058] close(3 [pid 5679] exit_group(0 [pid 5680] <... futex resumed>) = ? [pid 5679] <... exit_group resumed>) = ? [pid 5680] +++ exited with 0 +++ [pid 5058] <... close resumed>) = 0 [pid 5058] rmdir("./36") = 0 [pid 5058] mkdir("./37", 0777 [pid 5687] +++ exited with 0 +++ [pid 5679] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5679, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=18 /* 0.18 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5058] <... mkdir resumed>) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5063] <... restart_syscall resumed>) = 0 [pid 5063] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./35/binderfs") = 0 [pid 5063] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 90.726935][ T5680] ERROR: (device loop5): remounting filesystem as read-only [ 90.740545][ T5680] ERROR: (device loop5): txAbort: [ 90.740545][ T5680] [pid 5063] newfstatat(AT_FDCWD, "./35/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./35/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./35/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./35") = 0 [pid 5063] mkdir("./36", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5688 attached , child_tidptr=0x555556520690) = 5688 [pid 5688] set_robust_list(0x5555565206a0, 24) = 0 [pid 5688] chdir("./35" [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./36/file2", [pid 5688] <... chdir resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5688] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5057] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5688] <... prctl resumed>) = 0 [pid 5057] openat(AT_FDCWD, "./36/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", [pid 5688] setpgid(0, 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5688] <... setpgid resumed>) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./36/file2" [pid 5688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5057] <... rmdir resumed>) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./36") = 0 [pid 5688] <... openat resumed>) = 3 [pid 5057] mkdir("./37", 0777 [pid 5688] write(3, "1000", 4 [pid 5057] <... mkdir resumed>) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5688] <... write resumed>) = 4 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5688] close(3) = 0 [pid 5688] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5688] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5688] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5688] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5688] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5689]}, 88) = 5689 [pid 5688] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5689 attached NULL, 8) = 0 [pid 5688] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5689] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5688] <... futex resumed>) = 0 [pid 5689] <... rseq resumed>) = 0 [pid 5688] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5689] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5689] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5689] memfd_create("syzkaller", 0) = 3 [pid 5689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5056] <... ioctl resumed>) = 0 [pid 5683] <... write resumed>) = 16777216 [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3 [pid 5056] close(3 [pid 5058] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] <... close resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5683] munmap(0x7f919cc00000, 138412032./strace-static-x86_64: Process 5691 attached ./strace-static-x86_64: Process 5690 attached ) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5690 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5691 [pid 5691] set_robust_list(0x5555565206a0, 24 [pid 5690] set_robust_list(0x5555565206a0, 24) = 0 [pid 5691] <... set_robust_list resumed>) = 0 [pid 5691] chdir("./37" [pid 5690] chdir("./37" [pid 5691] <... chdir resumed>) = 0 [pid 5690] <... chdir resumed>) = 0 [pid 5690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5690] setpgid(0, 0) = 0 [pid 5690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5691] <... prctl resumed>) = 0 [pid 5691] setpgid(0, 0) = 0 [pid 5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5691] write(3, "1000", 4) = 4 [pid 5691] close(3) = 0 [pid 5691] symlink("/dev/binderfs", "./binderfs" [pid 5690] <... openat resumed>) = 3 [pid 5683] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5691] <... symlink resumed>) = 0 [pid 5690] write(3, "1000", 4 [pid 5683] ioctl(4, LOOP_SET_FD, 3 [pid 5690] <... write resumed>) = 4 [pid 5683] <... ioctl resumed>) = 0 [pid 5691] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] close(3 [pid 5691] <... futex resumed>) = 0 [pid 5690] <... close resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5691] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5690] symlink("/dev/binderfs", "./binderfs" [pid 5691] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5690] <... symlink resumed>) = 0 [pid 5063] close(3 [pid 5691] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5690] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... close resumed>) = 0 [pid 5691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5690] <... futex resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5683] close(3) = 0 [pid 5683] close(4) = 0 [pid 5683] mkdir("./file2", 0777) = 0 [pid 5683] mount("/dev/loop3", "./file2", "jfs", 0, ""./strace-static-x86_64: Process 5692 attached [pid 5691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5690] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5692] set_robust_list(0x5555565206a0, 24) = 0 [pid 5690] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5691] <... mmap resumed>) = 0x7f91a5087000 [pid 5692] chdir("./36" [pid 5691] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5690] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5691] <... mprotect resumed>) = 0 [pid 5690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5692] <... chdir resumed>) = 0 [pid 5692] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5692] <... prctl resumed>) = 0 [pid 5691] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5692] setpgid(0, 0 [pid 5691] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5690] <... mmap resumed>) = 0x7f91a5087000 [pid 5692] <... setpgid resumed>) = 0 [pid 5691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5690] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5683] <... mount resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5692 [pid 5683] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5690] <... mprotect resumed>) = 0 [pid 5692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5683] <... openat resumed>) = 3 [pid 5683] chdir("./file2") = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5693 attached [pid 5692] <... openat resumed>) = 3 [pid 5691] <... clone3 resumed> => {parent_tid=[5693]}, 88) = 5693 [pid 5690] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5683] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5693] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5692] write(3, "1000", 4 [pid 5691] rt_sigprocmask(SIG_SETMASK, [], [pid 5690] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5693] <... rseq resumed>) = 0 [pid 5692] <... write resumed>) = 4 [pid 5691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5683] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5682] <... futex resumed>) = 0 [pid 5691] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5693] set_robust_list(0x7f91a50a79a0, 24 [pid 5682] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5693] <... set_robust_list resumed>) = 0 [pid 5691] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5694 attached [pid 5692] close(3 [pid 5690] <... clone3 resumed> => {parent_tid=[5694]}, 88) = 5694 [pid 5694] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5692] <... close resumed>) = 0 [pid 5690] rt_sigprocmask(SIG_SETMASK, [], [pid 5694] <... rseq resumed>) = 0 [pid 5693] rt_sigprocmask(SIG_SETMASK, [], [pid 5692] symlink("/dev/binderfs", "./binderfs" [pid 5694] set_robust_list(0x7f91a50a79a0, 24 [pid 5693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5694] <... set_robust_list resumed>) = 0 [pid 5694] rt_sigprocmask(SIG_SETMASK, [], [pid 5693] memfd_create("syzkaller", 0 [pid 5692] <... symlink resumed>) = 0 [pid 5690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5683] rename("./file2", "./file1" [pid 5694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5692] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] memfd_create("syzkaller", 0 [pid 5693] <... memfd_create resumed>) = 3 [pid 5692] <... futex resumed>) = 0 [pid 5690] <... futex resumed>) = 0 [pid 5690] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5692] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [ 91.052215][ T5683] loop3: detected capacity change from 0 to 32768 [pid 5694] <... memfd_create resumed>) = 3 [pid 5693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5692] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5694] <... mmap resumed>) = 0x7f919cc00000 [pid 5693] <... mmap resumed>) = 0x7f919cc00000 [pid 5692] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5692] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5692] <... mprotect resumed>) = 0 [ 91.106058][ T5683] ERROR: (device loop3): diWrite: ixpxd invalid [ 91.106058][ T5683] [pid 5692] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5682] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5692] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5682] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5682] <... futex resumed>) = 0 [pid 5682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 ./strace-static-x86_64: Process 5695 attached [pid 5682] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5695] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5692] <... clone3 resumed> => {parent_tid=[5695]}, 88) = 5695 [pid 5682] <... mprotect resumed>) = 0 [pid 5695] <... rseq resumed>) = 0 [pid 5695] set_robust_list(0x7f91a50a79a0, 24 [pid 5692] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5692] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5692] <... futex resumed>) = 0 [pid 5682] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5692] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5682] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5696]}, 88) = 5696 [pid 5682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5682] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5682] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5695] <... set_robust_list resumed>) = 0 [pid 5695] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5696 attached [pid 5696] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5696] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5696] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5696] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5696] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5695] memfd_create("syzkaller", 0) = 3 [pid 5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5696] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5696] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5682] <... futex resumed>) = 0 [pid 5696] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5683] <... rename resumed>) = -1 EIO (Input/output error) [pid 5683] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5683] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5682] exit_group(0 [pid 5696] <... futex resumed>) = ? [pid 5683] <... futex resumed>) = ? [pid 5682] <... exit_group resumed>) = ? [pid 5696] +++ exited with 0 +++ [pid 5683] +++ exited with 0 +++ [pid 5682] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5682, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5059] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 91.146544][ T5683] ERROR: (device loop3): remounting filesystem as read-only [ 91.173336][ T5683] ERROR: (device loop3): txAbort: [ 91.173336][ T5683] [pid 5059] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5059] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./35/binderfs") = 0 [pid 5059] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... ioctl resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] close(3 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... close resumed>) = 0 [pid 5059] newfstatat(AT_FDCWD, "./35/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./35/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5697 ./strace-static-x86_64: Process 5697 attached [pid 5059] close(4) = 0 [pid 5059] rmdir("./35/file2") = 0 [pid 5697] set_robust_list(0x5555565206a0, 24 [pid 5059] getdents64(3, [pid 5697] <... set_robust_list resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3 [pid 5697] chdir("./37" [pid 5059] <... close resumed>) = 0 [pid 5697] <... chdir resumed>) = 0 [pid 5697] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] rmdir("./35" [pid 5697] <... prctl resumed>) = 0 [pid 5697] setpgid(0, 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5697] <... setpgid resumed>) = 0 [pid 5697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] mkdir("./36", 0777 [pid 5697] <... openat resumed>) = 3 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5697] write(3, "1000", 4) = 4 [pid 5697] close(3) = 0 [pid 5697] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5697] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5697] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5697] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5697] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5697] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5698]}, 88) = 5698 ./strace-static-x86_64: Process 5698 attached [pid 5698] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5698] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5698] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5698] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5697] rt_sigprocmask(SIG_SETMASK, [], [pid 5694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5697] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5697] <... futex resumed>) = 1 [pid 5697] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5698] <... futex resumed>) = 0 [pid 5698] memfd_create("syzkaller", 0) = 3 [pid 5698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5689] <... write resumed>) = 16777216 [pid 5689] munmap(0x7f919cc00000, 138412032) = 0 [pid 5689] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5689] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5689] close(3) = 0 [pid 5689] close(4) = 0 [pid 5689] mkdir("./file2", 0777) = 0 [pid 5689] mount("/dev/loop4", "./file2", "jfs", 0, "") = 0 [pid 5689] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5689] chdir("./file2") = 0 [pid 5689] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5689] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5689] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5688] <... futex resumed>) = 0 [pid 5688] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5689] <... futex resumed>) = 0 [pid 5688] <... futex resumed>) = 1 [pid 5689] rename("./file2", "./file1" [ 91.521228][ T5689] loop4: detected capacity change from 0 to 32768 [ 91.573082][ T5689] ERROR: (device loop4): diWrite: ixpxd invalid [ 91.573082][ T5689] [ 91.611195][ T5689] ERROR: (device loop4): remounting filesystem as read-only [pid 5688] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5688] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5059] <... ioctl resumed>) = 0 [pid 5688] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5689] <... rename resumed>) = -1 EIO (Input/output error) [pid 5688] <... mprotect resumed>) = 0 [pid 5688] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5689] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5699 attached ) = 0 [pid 5688] <... clone3 resumed> => {parent_tid=[5699]}, 88) = 5699 [pid 5699] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5689] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5688] rt_sigprocmask(SIG_SETMASK, [], [pid 5699] <... rseq resumed>) = 0 [ 91.618490][ T5689] ERROR: (device loop4): txAbort: [ 91.618490][ T5689] [pid 5699] set_robust_list(0x7f91a50869a0, 24 [pid 5688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5699] <... set_robust_list resumed>) = 0 [pid 5699] rt_sigprocmask(SIG_SETMASK, [], [pid 5688] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5688] <... futex resumed>) = 0 [pid 5699] mkdir(".", 0777 [pid 5688] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5699] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5699] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5699] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5688] <... futex resumed>) = 0 [pid 5699] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5688] exit_group(0 [pid 5699] <... futex resumed>) = ? [pid 5689] <... futex resumed>) = ? [pid 5688] <... exit_group resumed>) = ? [pid 5699] +++ exited with 0 +++ [pid 5689] +++ exited with 0 +++ [pid 5698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5688] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5688, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5060] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./35/binderfs") = 0 [pid 5060] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5693] <... write resumed>) = 16777216 [pid 5059] close(3 [pid 5693] munmap(0x7f919cc00000, 138412032 [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5700 [pid 5694] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5700 attached [pid 5700] set_robust_list(0x5555565206a0, 24) = 0 [pid 5700] chdir("./36" [pid 5694] munmap(0x7f919cc00000, 138412032 [pid 5700] <... chdir resumed>) = 0 [pid 5700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5700] setpgid(0, 0) = 0 [pid 5700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5695] <... write resumed>) = 16777216 [pid 5693] <... munmap resumed>) = 0 [pid 5700] <... openat resumed>) = 3 [pid 5693] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5695] munmap(0x7f919cc00000, 138412032 [pid 5693] <... openat resumed>) = 4 [pid 5700] write(3, "1000", 4) = 4 [pid 5693] ioctl(4, LOOP_SET_FD, 3 [pid 5700] close(3) = 0 [pid 5700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5700] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5700] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5700] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5695] <... munmap resumed>) = 0 [pid 5694] <... munmap resumed>) = 0 [pid 5693] <... ioctl resumed>) = 0 [pid 5700] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5700] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5701]}, 88) = 5701 [pid 5700] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5701 attached NULL, 8) = 0 [pid 5700] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5700] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5701] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5693] close(3 [pid 5701] <... rseq resumed>) = 0 [pid 5693] <... close resumed>) = 0 [pid 5701] set_robust_list(0x7f91a50a79a0, 24 [pid 5693] close(4 [pid 5701] <... set_robust_list resumed>) = 0 [pid 5693] <... close resumed>) = 0 [pid 5701] rt_sigprocmask(SIG_SETMASK, [], [pid 5693] mkdir("./file2", 0777 [pid 5701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5693] <... mkdir resumed>) = 0 [pid 5701] memfd_create("syzkaller", 0 [pid 5693] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5701] <... memfd_create resumed>) = 3 [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5695] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5694] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5694] ioctl(4, LOOP_SET_FD, 3 [pid 5695] ioctl(4, LOOP_SET_FD, 3 [pid 5693] <... mount resumed>) = 0 [pid 5693] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5693] chdir("./file2") = 0 [pid 5693] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5693] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5693] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5691] <... futex resumed>) = 0 [pid 5691] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] <... futex resumed>) = 0 [pid 5691] <... futex resumed>) = 1 [pid 5693] rename("./file2", "./file1" [ 91.731384][ T5693] loop0: detected capacity change from 0 to 32768 [ 91.762401][ T5694] loop2: detected capacity change from 0 to 32768 [ 91.769391][ T5695] loop5: detected capacity change from 0 to 32768 [pid 5691] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] <... ioctl resumed>) = 0 [pid 5694] close(3) = 0 [pid 5694] close(4) = 0 [pid 5694] mkdir("./file2", 0777) = 0 [pid 5694] mount("/dev/loop2", "./file2", "jfs", 0, "") = 0 [pid 5694] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5694] chdir("./file2") = 0 [pid 5694] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5694] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5690] <... futex resumed>) = 0 [pid 5690] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5690] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] rename("./file2", "./file1" [pid 5695] <... ioctl resumed>) = 0 [pid 5695] close(3) = 0 [ 91.782195][ T5693] ERROR: (device loop0): diWrite: ixpxd invalid [ 91.782195][ T5693] [ 91.800531][ T5694] ERROR: (device loop2): diWrite: ixpxd invalid [ 91.800531][ T5694] [ 91.822739][ T5693] ERROR: (device loop0): remounting filesystem as read-only [pid 5695] close(4) = 0 [pid 5691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5695] mkdir("./file2", 0777 [pid 5691] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5691] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5695] <... mkdir resumed>) = 0 [pid 5691] <... mprotect resumed>) = 0 [pid 5695] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5691] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5702]}, 88) = 5702 [pid 5691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5702 attached [pid 5695] <... mount resumed>) = 0 [pid 5691] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5695] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5691] <... futex resumed>) = 0 [pid 5691] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5695] <... openat resumed>) = 3 [pid 5690] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5702] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5695] chdir("./file2" [pid 5690] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] <... rseq resumed>) = 0 [pid 5690] <... futex resumed>) = 0 [pid 5702] set_robust_list(0x7f91a50869a0, 24 [pid 5690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5702] <... set_robust_list resumed>) = 0 [pid 5690] <... mmap resumed>) = 0x7f91a5066000 [pid 5702] rt_sigprocmask(SIG_SETMASK, [], [pid 5690] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5702] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5690] <... mprotect resumed>) = 0 [pid 5702] mkdir(".", 0777 [pid 5690] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5702] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5702] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5690] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5702] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5702] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5691] <... futex resumed>) = 0 [pid 5690] <... clone3 resumed> => {parent_tid=[5703]}, 88) = 5703 [pid 5702] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5703 attached [pid 5695] <... chdir resumed>) = 0 [pid 5690] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [ 91.830017][ T5693] ERROR: (device loop0): txAbort: [ 91.830017][ T5693] [ 91.841900][ T5694] ERROR: (device loop2): remounting filesystem as read-only [ 91.864939][ T5693] ERROR: (device loop0): remounting filesystem as read-only [ 91.873030][ T5694] ERROR: (device loop2): txAbort: [ 91.873030][ T5694] [pid 5695] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5703] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5695] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5694] <... rename resumed>) = -1 EIO (Input/output error) [pid 5690] <... futex resumed>) = 0 [pid 5695] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5703] <... rseq resumed>) = 0 [pid 5695] <... futex resumed>) = 1 [pid 5692] <... futex resumed>) = 0 [pid 5690] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5703] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5703] mkdir(".", 0777 [pid 5692] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5703] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5692] <... futex resumed>) = 0 [pid 5703] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5692] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5695] rename("./file2", "./file1" [pid 5703] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5690] <... futex resumed>) = 0 [pid 5703] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5694] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] <... rename resumed>) = -1 EIO (Input/output error) [pid 5690] exit_group(0 [pid 5703] <... futex resumed>) = ? [pid 5690] <... exit_group resumed>) = ? [pid 5703] +++ exited with 0 +++ [pid 5693] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5694] <... futex resumed>) = ? [pid 5693] <... futex resumed>) = 0 [pid 5694] +++ exited with 0 +++ [pid 5693] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5690] +++ exited with 0 +++ [pid 5691] exit_group(0) = ? [pid 5702] <... futex resumed>) = ? [pid 5702] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5690, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5058] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./37/binderfs") = 0 [pid 5058] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5693] <... futex resumed>) = ? [pid 5693] +++ exited with 0 +++ [pid 5691] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5691, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=14 /* 0.14 s */} --- [pid 5056] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5698] <... write resumed>) = 16777216 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 91.883873][ T5695] ERROR: (device loop5): diWrite: ixpxd invalid [ 91.883873][ T5695] [ 91.922480][ T5695] ERROR: (device loop5): remounting filesystem as read-only [pid 5056] unlink("./37/binderfs" [pid 5698] munmap(0x7f919cc00000, 138412032 [pid 5692] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] <... unlink resumed>) = 0 [pid 5692] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5692] <... futex resumed>) = 0 [pid 5692] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5692] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5692] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] <... umount2 resumed>) = 0 [pid 5692] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5692] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5058] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./37/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./37/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./37/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./37") = 0 [pid 5058] mkdir("./38", 0777 [pid 5692] <... clone3 resumed> => {parent_tid=[5704]}, 88) = 5704 [pid 5058] <... mkdir resumed>) = 0 [pid 5692] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5704 attached [pid 5698] <... munmap resumed>) = 0 [pid 5692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5704] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5698] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5692] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5704] <... rseq resumed>) = 0 [pid 5698] <... openat resumed>) = 4 [pid 5692] <... futex resumed>) = 0 [ 91.930331][ T5695] ERROR: (device loop5): txAbort: [ 91.930331][ T5695] [pid 5692] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5704] set_robust_list(0x7f91a50869a0, 24 [pid 5698] ioctl(4, LOOP_SET_FD, 3 [pid 5701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5704] <... set_robust_list resumed>) = 0 [pid 5698] <... ioctl resumed>) = 0 [pid 5695] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] <... umount2 resumed>) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5704] rt_sigprocmask(SIG_SETMASK, [], [pid 5695] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5704] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5698] close(3 [pid 5704] mkdir(".", 0777 [pid 5698] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5704] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5698] close(4 [pid 5060] newfstatat(AT_FDCWD, "./35/file2", [pid 5704] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5695] <... futex resumed>) = 0 [pid 5060] umount2("./35/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5695] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./35/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] newfstatat(AT_FDCWD, "./37/file2", [pid 5704] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... openat resumed>) = 4 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5698] <... close resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5056] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5698] mkdir("./file2", 0777 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5704] <... futex resumed>) = 1 [pid 5698] <... mkdir resumed>) = 0 [pid 5692] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 5056] openat(AT_FDCWD, "./37/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5704] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5692] exit_group(0 [pid 5704] <... futex resumed>) = ? [pid 5692] <... exit_group resumed>) = ? [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5704] +++ exited with 0 +++ [pid 5698] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5695] <... futex resumed>) = ? [pid 5060] getdents64(4, [pid 5056] <... openat resumed>) = 4 [pid 5695] +++ exited with 0 +++ [pid 5692] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] newfstatat(4, "", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5692, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=12 /* 0.12 s */} --- [pid 5060] close(4 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./35/file2" [pid 5056] getdents64(4, [pid 5063] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./36/binderfs") = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, [pid 5063] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./37/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [ 91.954616][ T5698] loop1: detected capacity change from 0 to 32768 [pid 5056] rmdir("./37") = 0 [pid 5060] getdents64(3, [pid 5056] mkdir("./38", 0777 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5060] rmdir("./35" [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5698] <... mount resumed>) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5698] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] mkdir("./36", 0777) = 0 [pid 5698] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5698] chdir("./file2") = 0 [pid 5060] <... openat resumed>) = 3 [pid 5698] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5698] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5698] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5697] <... futex resumed>) = 0 [pid 5698] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5697] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 92.058782][ T5698] ERROR: (device loop1): diWrite: ixpxd invalid [ 92.058782][ T5698] [pid 5698] rename("./file2", "./file1" [pid 5697] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5701] <... write resumed>) = 16777216 [pid 5701] munmap(0x7f919cc00000, 138412032 [pid 5697] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5697] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5697] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5705]}, 88) = 5705 [pid 5697] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5697] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5697] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5701] <... munmap resumed>) = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5701] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5705 attached [pid 5705] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5705] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5698] <... rename resumed>) = -1 EIO (Input/output error) [pid 5698] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5705] rt_sigprocmask(SIG_SETMASK, [], [pid 5698] <... futex resumed>) = 0 [pid 5705] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5698] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5705] mkdir(".", 0777 [pid 5701] <... ioctl resumed>) = 0 [pid 5701] close(3) = 0 [pid 5701] close(4) = 0 [pid 5701] mkdir("./file2", 0777) = 0 [pid 5701] mount("/dev/loop3", "./file2", "jfs", 0, "") = 0 [pid 5701] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5701] chdir("./file2") = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5701] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5700] <... futex resumed>) = 0 [pid 5705] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5701] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5700] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5705] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5700] <... futex resumed>) = 0 [pid 5701] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5701] rename("./file2", "./file1" [ 92.108396][ T5698] ERROR: (device loop1): remounting filesystem as read-only [ 92.135866][ T5698] ERROR: (device loop1): txAbort: [ 92.135866][ T5698] [ 92.149967][ T5701] loop3: detected capacity change from 0 to 32768 [pid 5700] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5705] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... ioctl resumed>) = 0 [pid 5705] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5697] <... futex resumed>) = 0 [pid 5705] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5697] exit_group(0 [pid 5705] <... futex resumed>) = ? [pid 5698] <... futex resumed>) = ? [pid 5697] <... exit_group resumed>) = ? [pid 5705] +++ exited with 0 +++ [pid 5698] +++ exited with 0 +++ [pid 5697] +++ exited with 0 +++ [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5706 attached [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5697, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5706] set_robust_list(0x5555565206a0, 24) = 0 [pid 5057] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5706] chdir("./38" [pid 5700] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5700] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [ 92.178607][ T5701] ERROR: (device loop3): diWrite: ixpxd invalid [ 92.178607][ T5701] [ 92.198950][ T5701] ERROR: (device loop3): remounting filesystem as read-only [pid 5057] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5706] <... chdir resumed>) = 0 [pid 5700] <... futex resumed>) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5706 [pid 5057] <... openat resumed>) = 3 [pid 5706] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] newfstatat(3, "", [pid 5700] <... mmap resumed>) = 0x7f91a5066000 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5700] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5706] <... prctl resumed>) = 0 [pid 5057] getdents64(3, [pid 5700] <... mprotect resumed>) = 0 [pid 5706] setpgid(0, 0 [pid 5700] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5700] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5706] <... setpgid resumed>) = 0 [pid 5706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5700] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5706] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5707 attached [pid 5706] write(3, "1000", 4 [pid 5057] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5707] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5706] <... write resumed>) = 4 [pid 5700] <... clone3 resumed> => {parent_tid=[5707]}, 88) = 5707 [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5707] <... rseq resumed>) = 0 [pid 5706] close(3 [pid 5700] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] unlink("./37/binderfs" [pid 5707] set_robust_list(0x7f91a50869a0, 24 [pid 5706] <... close resumed>) = 0 [pid 5700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5707] <... set_robust_list resumed>) = 0 [pid 5706] symlink("/dev/binderfs", "./binderfs" [pid 5700] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... unlink resumed>) = 0 [pid 5707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5706] <... symlink resumed>) = 0 [pid 5700] <... futex resumed>) = 0 [pid 5057] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5707] mkdir(".", 0777 [pid 5700] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5706] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5706] <... futex resumed>) = 0 [pid 5707] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5706] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5707] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5706] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5707] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5707] <... futex resumed>) = 1 [pid 5700] <... futex resumed>) = 0 [pid 5706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5707] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5706] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5706] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5056] close(3 [pid 5706] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5056] <... close resumed>) = 0 ./strace-static-x86_64: Process 5708 attached [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5708] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5706] <... clone3 resumed> => {parent_tid=[5708]}, 88) = 5708 ./strace-static-x86_64: Process 5709 attached [pid 5708] <... rseq resumed>) = 0 [pid 5706] rt_sigprocmask(SIG_SETMASK, [], [pid 5708] set_robust_list(0x7f91a50a79a0, 24 [pid 5706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5709] set_robust_list(0x5555565206a0, 24 [pid 5708] <... set_robust_list resumed>) = 0 [pid 5706] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] <... set_robust_list resumed>) = 0 [pid 5708] rt_sigprocmask(SIG_SETMASK, [], [pid 5706] <... futex resumed>) = 0 [pid 5701] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] <... ioctl resumed>) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5709 [pid 5708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] close(3 [pid 5057] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./37/file2", [pid 5709] chdir("./38" [pid 5708] memfd_create("syzkaller", 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./37/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5710 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5710 [pid 5710] set_robust_list(0x5555565206a0, 24 [pid 5057] getdents64(4, [pid 5710] <... set_robust_list resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5709] <... chdir resumed>) = 0 [pid 5708] <... memfd_create resumed>) = 3 [pid 5706] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5701] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 [pid 5709] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5701] <... futex resumed>) = 0 [pid 5700] exit_group(0 [pid 5063] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5709] <... prctl resumed>) = 0 [pid 5708] <... mmap resumed>) = 0x7f919cc00000 [pid 5707] <... futex resumed>) = ? [pid 5700] <... exit_group resumed>) = ? [pid 5710] chdir("./36" [pid 5709] setpgid(0, 0 [pid 5707] +++ exited with 0 +++ [pid 5701] +++ exited with 0 +++ [pid 5700] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] close(4 [pid 5710] <... chdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./36/file2", [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5700, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=21 /* 0.21 s */} --- [pid 5057] <... close resumed>) = 0 [pid 5710] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5709] <... setpgid resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] restart_syscall(<... resuming interrupted clone ...> [pid 5057] rmdir("./37/file2" [pid 5710] <... prctl resumed>) = 0 [pid 5063] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... restart_syscall resumed>) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5710] setpgid(0, 0 [pid 5063] openat(AT_FDCWD, "./36/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] getdents64(3, [pid 5709] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5709] write(3, "1000", 4) = 4 [pid 5709] close(3 [pid 5063] newfstatat(4, "", [pid 5057] close(3 [pid 5709] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] <... close resumed>) = 0 [pid 5709] symlink("/dev/binderfs", "./binderfs" [pid 5063] getdents64(4, [pid 5057] rmdir("./37" [pid 5709] <... symlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] <... rmdir resumed>) = 0 [pid 5057] mkdir("./38", 0777 [pid 5063] getdents64(4, [pid 5059] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5709] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5709] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5710] <... setpgid resumed>) = 0 [pid 5709] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... mkdir resumed>) = 0 [pid 5709] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] close(4 [pid 5059] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5709] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] <... openat resumed>) = 3 [pid 5710] <... openat resumed>) = 3 [pid 5709] <... mmap resumed>) = 0x7f91a5087000 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5709] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5710] write(3, "1000", 4 [pid 5709] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... close resumed>) = 0 [pid 5059] <... openat resumed>) = 3 [pid 5710] <... write resumed>) = 4 [pid 5709] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] rmdir("./36/file2" [pid 5059] newfstatat(3, "", [pid 5710] close(3 [pid 5709] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5710] <... close resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5711 attached [pid 5710] symlink("/dev/binderfs", "./binderfs" [pid 5709] <... clone3 resumed> => {parent_tid=[5711]}, 88) = 5711 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5711] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5710] <... symlink resumed>) = 0 [pid 5709] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] getdents64(3, [pid 5711] <... rseq resumed>) = 0 [pid 5709] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5711] set_robust_list(0x7f91a50a79a0, 24 [pid 5710] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] close(3 [pid 5059] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5711] <... set_robust_list resumed>) = 0 [pid 5710] <... futex resumed>) = 0 [pid 5709] <... futex resumed>) = 0 [pid 5711] rt_sigprocmask(SIG_SETMASK, [], [pid 5710] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5709] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... close resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5711] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5710] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] rmdir("./36" [pid 5711] memfd_create("syzkaller", 0 [pid 5710] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] newfstatat(AT_FDCWD, "./36/binderfs", [pid 5711] <... memfd_create resumed>) = 3 [ 92.238249][ T5701] ERROR: (device loop3): txAbort: [ 92.238249][ T5701] [ 92.260836][ T5701] ERROR: (device loop3): remounting filesystem as read-only [pid 5711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5711] <... mmap resumed>) = 0x7f919cc00000 [pid 5710] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] mkdir("./37", 0777 [pid 5059] unlink("./36/binderfs" [pid 5710] <... mmap resumed>) = 0x7f91a5087000 [pid 5059] <... unlink resumed>) = 0 [pid 5710] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... mkdir resumed>) = 0 [pid 5059] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5710] <... mprotect resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5059] <... umount2 resumed>) = 0 [pid 5710] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... openat resumed>) = 3 [pid 5059] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5710] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5710] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5712 attached [pid 5059] newfstatat(AT_FDCWD, "./36/file2", [pid 5712] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5710] <... clone3 resumed> => {parent_tid=[5712]}, 88) = 5712 [pid 5712] <... rseq resumed>) = 0 [pid 5710] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5712] set_robust_list(0x7f91a50a79a0, 24 [pid 5710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5712] <... set_robust_list resumed>) = 0 [pid 5710] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5712] rt_sigprocmask(SIG_SETMASK, [], [pid 5710] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5712] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5712] memfd_create("syzkaller", 0 [pid 5710] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] openat(AT_FDCWD, "./36/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5712] <... memfd_create resumed>) = 3 [pid 5059] <... openat resumed>) = 4 [pid 5712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./36/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5059] rmdir("./36") = 0 [pid 5059] mkdir("./37", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5712] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5057] <... ioctl resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5713 ./strace-static-x86_64: Process 5713 attached [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5714 [pid 5713] set_robust_list(0x5555565206a0, 24) = 0 [pid 5713] chdir("./38") = 0 [pid 5713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5713] setpgid(0, 0) = 0 [pid 5713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5713] write(3, "1000", 4) = 4 [pid 5713] close(3) = 0 [pid 5713] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5713] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5714 attached ) = 0 [pid 5713] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5714] set_robust_list(0x5555565206a0, 24 [pid 5713] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5714] <... set_robust_list resumed>) = 0 [pid 5713] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5714] chdir("./37" [pid 5713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5713] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5714] <... chdir resumed>) = 0 [pid 5713] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5713] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5714] setpgid(0, 0 [pid 5713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5714] <... setpgid resumed>) = 0 [pid 5713] <... clone3 resumed> => {parent_tid=[5715]}, 88) = 5715 [pid 5713] rt_sigprocmask(SIG_SETMASK, [], [pid 5714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5713] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5713] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5715 attached [pid 5715] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5715] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5715] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5715] memfd_create("syzkaller", 0) = 3 [pid 5715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5714] <... openat resumed>) = 3 [pid 5714] write(3, "1000", 4) = 4 [pid 5714] close(3) = 0 [pid 5714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5714] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5714] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5714] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5714] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5714] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5716 attached [pid 5059] <... ioctl resumed>) = 0 [pid 5716] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5714] <... clone3 resumed> => {parent_tid=[5716]}, 88) = 5716 [pid 5716] <... rseq resumed>) = 0 [pid 5714] rt_sigprocmask(SIG_SETMASK, [], [pid 5716] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5714] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5716] rt_sigprocmask(SIG_SETMASK, [], [pid 5714] <... futex resumed>) = 0 [pid 5716] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5714] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5716] memfd_create("syzkaller", 0) = 3 [pid 5716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5711] <... write resumed>) = 16777216 [pid 5711] munmap(0x7f919cc00000, 138412032) = 0 [pid 5059] close(3 [pid 5711] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5059] <... close resumed>) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5711] <... openat resumed>) = 4 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5717 ./strace-static-x86_64: Process 5717 attached [pid 5717] set_robust_list(0x5555565206a0, 24) = 0 [pid 5717] chdir("./37") = 0 [pid 5717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5717] setpgid(0, 0) = 0 [pid 5717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5711] ioctl(4, LOOP_SET_FD, 3 [pid 5717] write(3, "1000", 4) = 4 [pid 5717] close(3) = 0 [pid 5717] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5717] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5717] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5717] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5717] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5717] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5717] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5718 attached [pid 5718] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5717] <... clone3 resumed> => {parent_tid=[5718]}, 88) = 5718 [pid 5717] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5717] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5717] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5718] <... rseq resumed>) = 0 [pid 5718] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5718] memfd_create("syzkaller", 0) = 3 [pid 5718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5711] <... ioctl resumed>) = 0 [pid 5708] <... write resumed>) = 16777216 [pid 5711] close(3) = 0 [ 92.804615][ T5711] loop0: detected capacity change from 0 to 32768 [pid 5708] munmap(0x7f919cc00000, 138412032 [pid 5711] close(4) = 0 [pid 5711] mkdir("./file2", 0777) = 0 [pid 5711] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5708] <... munmap resumed>) = 0 [pid 5708] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5708] ioctl(4, LOOP_SET_FD, 3 [pid 5711] <... mount resumed>) = 0 [pid 5711] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5711] chdir("./file2") = 0 [pid 5711] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5711] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5709] <... futex resumed>) = 0 [pid 5711] rename("./file2", "./file1" [pid 5709] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5709] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5708] <... ioctl resumed>) = 0 [pid 5708] close(3) = 0 [pid 5708] close(4) = 0 [pid 5708] mkdir("./file2", 0777) = 0 [pid 5708] mount("/dev/loop2", "./file2", "jfs", 0, "") = 0 [ 92.919363][ T5708] loop2: detected capacity change from 0 to 32768 [ 92.937490][ T5711] ERROR: (device loop0): diWrite: ixpxd invalid [ 92.937490][ T5711] [pid 5715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5708] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5708] chdir("./file2") = 0 [pid 5712] <... write resumed>) = 16777216 [pid 5708] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5708] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5708] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] <... futex resumed>) = 0 [pid 5706] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5708] <... futex resumed>) = 0 [pid 5708] rename("./file2", "./file1" [pid 5712] munmap(0x7f919cc00000, 138412032 [pid 5709] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5706] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5709] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5709] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5709] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5709] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5709] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5712] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5719 attached [pid 5712] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5711] <... rename resumed>) = -1 EIO (Input/output error) [pid 5709] <... clone3 resumed> => {parent_tid=[5719]}, 88) = 5719 [pid 5719] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5711] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] rt_sigprocmask(SIG_SETMASK, [], [pid 5719] <... rseq resumed>) = 0 [pid 5712] <... openat resumed>) = 4 [pid 5711] <... futex resumed>) = 0 [pid 5709] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5719] set_robust_list(0x7f91a50869a0, 24 [pid 5712] ioctl(4, LOOP_SET_FD, 3 [pid 5711] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5709] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5719] <... set_robust_list resumed>) = 0 [ 92.975962][ T5711] ERROR: (device loop0): remounting filesystem as read-only [ 92.992672][ T5708] ERROR: (device loop2): diWrite: ixpxd invalid [ 92.992672][ T5708] [ 93.001068][ T5711] ERROR: (device loop0): txAbort: [ 93.001068][ T5711] [pid 5719] rt_sigprocmask(SIG_SETMASK, [], [pid 5709] <... futex resumed>) = 0 [pid 5719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5709] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5719] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5719] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5712] <... ioctl resumed>) = 0 [pid 5719] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5712] close(3) = 0 [pid 5709] <... futex resumed>) = 0 [pid 5719] <... futex resumed>) = 1 [pid 5719] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] close(4 [pid 5709] exit_group(0 [pid 5719] <... futex resumed>) = ? [pid 5716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5712] <... close resumed>) = 0 [pid 5711] <... futex resumed>) = ? [pid 5709] <... exit_group resumed>) = ? [pid 5706] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5719] +++ exited with 0 +++ [pid 5711] +++ exited with 0 +++ [pid 5706] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5712] mkdir("./file2", 0777 [pid 5709] +++ exited with 0 +++ [pid 5706] <... futex resumed>) = 0 [pid 5706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5709, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5706] <... mmap resumed>) = 0x7f91a5066000 [pid 5718] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5712] <... mkdir resumed>) = 0 [pid 5706] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5056] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5712] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5706] <... mprotect resumed>) = 0 [pid 5706] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5056] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5706] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5056] newfstatat(3, "", [pid 5706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5720 attached [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5706] <... clone3 resumed> => {parent_tid=[5720]}, 88) = 5720 [pid 5056] getdents64(3, [pid 5706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5706] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5706] <... futex resumed>) = 0 [pid 5706] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./38/binderfs", [pid 5720] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5720] <... rseq resumed>) = 0 [pid 5720] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5712] <... mount resumed>) = 0 [pid 5056] unlink("./38/binderfs" [pid 5720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5056] <... unlink resumed>) = 0 [pid 5720] mkdir(".", 0777 [pid 5056] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5720] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5712] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5720] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5720] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5712] <... openat resumed>) = 3 [pid 5706] <... futex resumed>) = 0 [pid 5720] <... futex resumed>) = 1 [pid 5712] chdir("./file2" [pid 5720] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] <... chdir resumed>) = 0 [pid 5712] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5712] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] <... futex resumed>) = 0 [pid 5712] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5710] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5712] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5710] <... futex resumed>) = 0 [pid 5710] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 93.032683][ T5712] loop4: detected capacity change from 0 to 32768 [ 93.039223][ T5708] ERROR: (device loop2): remounting filesystem as read-only [ 93.072230][ T5708] ERROR: (device loop2): txAbort: [ 93.072230][ T5708] [pid 5712] rename("./file2", "./file1" [pid 5708] <... rename resumed>) = -1 EIO (Input/output error) [pid 5708] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5708] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] exit_group(0 [pid 5708] <... futex resumed>) = ? [pid 5706] <... exit_group resumed>) = ? [pid 5708] +++ exited with 0 +++ [pid 5720] <... futex resumed>) = ? [pid 5720] +++ exited with 0 +++ [pid 5706] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5706, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- [pid 5058] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] <... umount2 resumed>) = 0 [pid 5056] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... openat resumed>) = 3 [pid 5056] newfstatat(AT_FDCWD, "./38/file2", [pid 5058] newfstatat(3, "", [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] openat(AT_FDCWD, "./38/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... openat resumed>) = 4 [pid 5058] newfstatat(AT_FDCWD, "./38/binderfs", [pid 5056] newfstatat(4, "", [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] unlink("./38/binderfs" [pid 5056] getdents64(4, [pid 5058] <... unlink resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5058] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [ 93.095364][ T5712] ERROR: (device loop4): diWrite: ixpxd invalid [ 93.095364][ T5712] [ 93.095476][ T5708] ERROR: (device loop2): remounting filesystem as read-only [ 93.125965][ T5712] ERROR: (device loop4): remounting filesystem as read-only [pid 5056] rmdir("./38/file2") = 0 [pid 5710] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] getdents64(3, [pid 5710] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5710] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] close(3 [pid 5710] <... mmap resumed>) = 0x7f91a5066000 [pid 5056] <... close resumed>) = 0 [pid 5710] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5056] rmdir("./38") = 0 [pid 5710] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5056] mkdir("./39", 0777 [pid 5710] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5056] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5721 attached [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5710] <... clone3 resumed> => {parent_tid=[5721]}, 88) = 5721 [pid 5056] <... openat resumed>) = 3 [pid 5721] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5721] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5721] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] <... umount2 resumed>) = 0 [pid 5710] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5710] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5721] <... futex resumed>) = 0 [pid 5721] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5721] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5712] <... rename resumed>) = -1 EIO (Input/output error) [pid 5058] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5721] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5721] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] <... futex resumed>) = 0 [pid 5721] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5712] <... futex resumed>) = 0 [pid 5058] newfstatat(AT_FDCWD, "./38/file2", [pid 5712] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5710] exit_group(0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5721] <... futex resumed>) = ? [pid 5712] <... futex resumed>) = ? [pid 5710] <... exit_group resumed>) = ? [pid 5058] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5721] +++ exited with 0 +++ [pid 5712] +++ exited with 0 +++ [pid 5710] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5710, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... restart_syscall resumed>) = 0 [pid 5058] openat(AT_FDCWD, "./38/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./36/binderfs") = 0 [ 93.153580][ T5712] ERROR: (device loop4): txAbort: [ 93.153580][ T5712] [pid 5060] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... openat resumed>) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./38/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./38") = 0 [pid 5058] mkdir("./39", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... umount2 resumed>) = 0 [pid 5715] <... write resumed>) = 16777216 [pid 5060] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... openat resumed>) = 3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5060] newfstatat(AT_FDCWD, "./36/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./36/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./36/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5715] munmap(0x7f919cc00000, 138412032 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./36/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./36") = 0 [pid 5060] mkdir("./37", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5715] <... munmap resumed>) = 0 [pid 5715] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5715] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5715] close(3) = 0 [pid 5715] close(4) = 0 [pid 5715] mkdir("./file2", 0777) = 0 [ 93.301905][ T5715] loop1: detected capacity change from 0 to 32768 [pid 5715] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5718] <... write resumed>) = 16777216 [pid 5716] <... write resumed>) = 16777216 [pid 5718] munmap(0x7f919cc00000, 138412032 [pid 5716] munmap(0x7f919cc00000, 138412032 [pid 5715] <... mount resumed>) = 0 [pid 5715] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5715] chdir("./file2" [pid 5718] <... munmap resumed>) = 0 [pid 5716] <... munmap resumed>) = 0 [pid 5715] <... chdir resumed>) = 0 [pid 5715] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5715] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5713] <... futex resumed>) = 0 [pid 5715] rename("./file2", "./file1" [pid 5713] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5716] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5713] <... futex resumed>) = 0 [pid 5716] <... openat resumed>) = 4 [pid 5716] ioctl(4, LOOP_SET_FD, 3 [pid 5713] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5716] <... ioctl resumed>) = 0 [pid 5718] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5718] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5718] close(3) = 0 [pid 5718] close(4) = 0 [pid 5716] close(3 [pid 5718] mkdir("./file2", 0777 [pid 5716] <... close resumed>) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5718] <... mkdir resumed>) = 0 [pid 5716] close(4 [pid 5056] close(3 [pid 5716] <... close resumed>) = 0 [pid 5718] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5056] <... close resumed>) = 0 [pid 5716] mkdir("./file2", 0777 [pid 5713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5722 attached [pid 5716] <... mkdir resumed>) = 0 [pid 5713] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5722] set_robust_list(0x5555565206a0, 24 [pid 5716] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5713] <... futex resumed>) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5722 [pid 5722] <... set_robust_list resumed>) = 0 [pid 5713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5722] chdir("./39" [pid 5713] <... mmap resumed>) = 0x7f91a5066000 [pid 5722] <... chdir resumed>) = 0 [pid 5713] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5722] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5713] <... mprotect resumed>) = 0 [pid 5722] <... prctl resumed>) = 0 [pid 5713] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5722] setpgid(0, 0 [pid 5713] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5722] <... setpgid resumed>) = 0 [ 93.402838][ T5715] ERROR: (device loop1): diWrite: ixpxd invalid [ 93.402838][ T5715] [ 93.412692][ T5716] loop5: detected capacity change from 0 to 32768 [ 93.422081][ T5718] loop3: detected capacity change from 0 to 32768 [ 93.430329][ T5715] ERROR: (device loop1): remounting filesystem as read-only [pid 5722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5716] <... mount resumed>) = 0 [pid 5713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5723 attached [pid 5722] <... openat resumed>) = 3 [pid 5716] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5723] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5722] write(3, "1000", 4 [pid 5723] <... rseq resumed>) = 0 [pid 5722] <... write resumed>) = 4 [pid 5716] <... openat resumed>) = 3 [pid 5713] <... clone3 resumed> => {parent_tid=[5723]}, 88) = 5723 [pid 5723] set_robust_list(0x7f91a50869a0, 24 [pid 5722] close(3 [pid 5723] <... set_robust_list resumed>) = 0 [pid 5723] rt_sigprocmask(SIG_SETMASK, [], [pid 5722] <... close resumed>) = 0 [pid 5718] <... mount resumed>) = 0 [pid 5713] rt_sigprocmask(SIG_SETMASK, [], [pid 5723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5722] symlink("/dev/binderfs", "./binderfs" [pid 5723] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5718] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5722] <... symlink resumed>) = 0 [pid 5718] <... openat resumed>) = 3 [pid 5722] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] chdir("./file2" [pid 5713] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5723] <... futex resumed>) = 0 [pid 5722] <... futex resumed>) = 0 [pid 5718] <... chdir resumed>) = 0 [pid 5713] <... futex resumed>) = 1 [pid 5723] mkdir(".", 0777 [pid 5722] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5718] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5713] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5723] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5722] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5718] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5723] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5722] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5716] chdir("./file2" [pid 5718] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5723] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5722] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5718] <... futex resumed>) = 1 [pid 5717] <... futex resumed>) = 0 [pid 5716] <... chdir resumed>) = 0 [pid 5723] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5718] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5717] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5716] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5723] <... futex resumed>) = 1 [pid 5722] <... mmap resumed>) = 0x7f91a5087000 [pid 5718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5717] <... futex resumed>) = 0 [pid 5716] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5713] <... futex resumed>) = 0 [pid 5723] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5722] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5718] rename("./file2", "./file1" [pid 5717] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5716] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5722] <... mprotect resumed>) = 0 [pid 5716] <... futex resumed>) = 1 [pid 5714] <... futex resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5722] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5716] rename("./file2", "./file1" [pid 5714] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] close(3 [pid 5722] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5714] <... futex resumed>) = 0 [pid 5722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [ 93.481315][ T5715] ERROR: (device loop1): txAbort: [ 93.481315][ T5715] [ 93.499313][ T5718] ERROR: (device loop3): diWrite: ixpxd invalid [ 93.499313][ T5718] [ 93.510281][ T5715] ERROR: (device loop1): remounting filesystem as read-only [ 93.518959][ T5716] ERROR: (device loop5): diWrite: ixpxd invalid [ 93.518959][ T5716] [pid 5714] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5715] <... rename resumed>) = -1 EIO (Input/output error) ./strace-static-x86_64: Process 5724 attached [pid 5060] <... close resumed>) = 0 [pid 5724] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5724] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5724] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5715] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5715] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5722] <... clone3 resumed> => {parent_tid=[5724]}, 88) = 5724 [pid 5713] exit_group(0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5723] <... futex resumed>) = ? [pid 5722] rt_sigprocmask(SIG_SETMASK, [], [pid 5713] <... exit_group resumed>) = ? [pid 5715] <... futex resumed>) = ? [pid 5715] +++ exited with 0 +++ ./strace-static-x86_64: Process 5725 attached [pid 5722] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5725] set_robust_list(0x5555565206a0, 24 [pid 5723] +++ exited with 0 +++ [pid 5722] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] +++ exited with 0 +++ [pid 5725] <... set_robust_list resumed>) = 0 [pid 5724] <... futex resumed>) = 0 [pid 5722] <... futex resumed>) = 1 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5725 [pid 5725] chdir("./37" [pid 5724] memfd_create("syzkaller", 0 [pid 5722] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5717] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5713, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} --- [pid 5725] <... chdir resumed>) = 0 [pid 5724] <... memfd_create resumed>) = 3 [pid 5717] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5717] <... futex resumed>) = 0 [pid 5724] <... mmap resumed>) = 0x7f919cc00000 [pid 5717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5725] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5717] <... mmap resumed>) = 0x7f91a5066000 [pid 5714] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] restart_syscall(<... resuming interrupted clone ...> [pid 5725] <... prctl resumed>) = 0 [pid 5717] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5714] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5725] setpgid(0, 0 [pid 5717] <... mprotect resumed>) = 0 [pid 5057] <... restart_syscall resumed>) = 0 [pid 5717] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5725] <... setpgid resumed>) = 0 [pid 5717] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5717] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5726 attached [pid 5725] <... openat resumed>) = 3 [pid 5726] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5725] write(3, "1000", 4 [pid 5717] <... clone3 resumed> => {parent_tid=[5726]}, 88) = 5726 [pid 5726] <... rseq resumed>) = 0 [pid 5725] <... write resumed>) = 4 [pid 5717] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5726] set_robust_list(0x7f91a50869a0, 24 [pid 5725] close(3 [pid 5717] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5714] <... futex resumed>) = 0 [pid 5726] <... set_robust_list resumed>) = 0 [pid 5725] <... close resumed>) = 0 [pid 5718] <... rename resumed>) = -1 EIO (Input/output error) [pid 5717] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5716] <... rename resumed>) = -1 EIO (Input/output error) [pid 5714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5726] rt_sigprocmask(SIG_SETMASK, [], [pid 5725] symlink("/dev/binderfs", "./binderfs" [pid 5718] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5717] <... futex resumed>) = 0 [pid 5716] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5714] <... mmap resumed>) = 0x7f91a5066000 [pid 5058] close(3 [pid 5057] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5726] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5725] <... symlink resumed>) = 0 [pid 5718] <... futex resumed>) = 0 [pid 5717] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5716] <... futex resumed>) = 0 [pid 5714] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5058] <... close resumed>) = 0 [pid 5725] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] <... futex resumed>) = 0 [pid 5726] mkdir(".", 0777 [pid 5725] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5716] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5714] <... mprotect resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5727 attached [pid 5726] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5725] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5714] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5057] newfstatat(3, "", [pid 5727] set_robust_list(0x5555565206a0, 24 [pid 5726] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5725] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5714] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5727] <... set_robust_list resumed>) = 0 [pid 5726] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5727 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5728 attached [pid 5727] chdir("./39" [pid 5726] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] getdents64(3, [pid 5728] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5727] <... chdir resumed>) = 0 [pid 5726] <... futex resumed>) = 1 [pid 5725] <... mmap resumed>) = 0x7f91a5087000 [pid 5717] <... futex resumed>) = 0 [pid 5714] <... clone3 resumed> => {parent_tid=[5728]}, 88) = 5728 [pid 5728] <... rseq resumed>) = 0 [pid 5727] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5726] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [ 93.527659][ T5718] ERROR: (device loop3): remounting filesystem as read-only [ 93.539387][ T5716] ERROR: (device loop5): remounting filesystem as read-only [ 93.546417][ T5718] ERROR: (device loop3): txAbort: [ 93.546417][ T5718] [ 93.560048][ T5716] ERROR: (device loop5): txAbort: [ 93.560048][ T5716] [pid 5717] exit_group(0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5728] set_robust_list(0x7f91a50869a0, 24 [pid 5727] <... prctl resumed>) = 0 [pid 5726] <... futex resumed>) = ? [pid 5725] <... mprotect resumed>) = 0 [pid 5718] <... futex resumed>) = ? [pid 5717] <... exit_group resumed>) = ? [pid 5714] rt_sigprocmask(SIG_SETMASK, [], [pid 5728] <... set_robust_list resumed>) = 0 [pid 5727] setpgid(0, 0 [pid 5726] +++ exited with 0 +++ [pid 5725] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5718] +++ exited with 0 +++ [pid 5717] +++ exited with 0 +++ [pid 5714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5728] rt_sigprocmask(SIG_SETMASK, [], [pid 5727] <... setpgid resumed>) = 0 [pid 5725] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5714] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5717, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5728] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5714] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5729 attached [pid 5728] mkdir(".", 0777 [pid 5714] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5729] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5728] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5727] <... openat resumed>) = 3 [pid 5725] <... clone3 resumed> => {parent_tid=[5729]}, 88) = 5729 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5729] <... rseq resumed>) = 0 [pid 5728] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5727] write(3, "1000", 4 [pid 5725] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] newfstatat(AT_FDCWD, "./38/binderfs", [pid 5729] set_robust_list(0x7f91a50a79a0, 24 [pid 5728] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5727] <... write resumed>) = 4 [pid 5725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5729] <... set_robust_list resumed>) = 0 [pid 5728] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5727] close(3 [pid 5725] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5729] rt_sigprocmask(SIG_SETMASK, [], [pid 5728] <... futex resumed>) = 1 [pid 5727] <... close resumed>) = 0 [pid 5725] <... futex resumed>) = 0 [pid 5714] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5728] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5727] symlink("/dev/binderfs", "./binderfs" [pid 5725] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5714] exit_group(0 [pid 5059] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] unlink("./38/binderfs" [pid 5729] memfd_create("syzkaller", 0 [pid 5728] <... futex resumed>) = ? [pid 5727] <... symlink resumed>) = 0 [pid 5716] <... futex resumed>) = ? [pid 5714] <... exit_group resumed>) = ? [pid 5059] <... openat resumed>) = 3 [pid 5729] <... memfd_create resumed>) = 3 [pid 5728] +++ exited with 0 +++ [pid 5727] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5716] +++ exited with 0 +++ [pid 5714] +++ exited with 0 +++ [pid 5059] newfstatat(3, "", [pid 5057] <... unlink resumed>) = 0 [pid 5729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5727] <... futex resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5729] <... mmap resumed>) = 0x7f919cc00000 [pid 5727] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5714, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5059] getdents64(3, [pid 5727] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5727] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... restart_syscall resumed>) = 0 [pid 5059] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5059] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5727] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5727] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] unlink("./37/binderfs" [pid 5727] <... mprotect resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5059] <... unlink resumed>) = 0 [pid 5727] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... openat resumed>) = 3 [pid 5059] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5727] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] newfstatat(3, "", [pid 5727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5730 attached [pid 5063] getdents64(3, [pid 5730] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5727] <... clone3 resumed> => {parent_tid=[5730]}, 88) = 5730 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5730] <... rseq resumed>) = 0 [pid 5727] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5730] set_robust_list(0x7f91a50a79a0, 24 [pid 5727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5730] <... set_robust_list resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5730] rt_sigprocmask(SIG_SETMASK, [], [pid 5727] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5730] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5727] <... futex resumed>) = 0 [pid 5063] unlink("./37/binderfs") = 0 [pid 5730] memfd_create("syzkaller", 0 [pid 5063] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5727] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5730] <... memfd_create resumed>) = 3 [pid 5730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5059] <... umount2 resumed>) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5730] <... mmap resumed>) = 0x7f919cc00000 [pid 5063] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./37/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./37/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] newfstatat(AT_FDCWD, "./37/file2", [pid 5057] newfstatat(AT_FDCWD, "./38/file2", [pid 5063] close(4) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./37/file2" [pid 5059] openat(AT_FDCWD, "./37/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... openat resumed>) = 4 [pid 5057] openat(AT_FDCWD, "./38/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(3, [pid 5059] newfstatat(4, "", [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] <... openat resumed>) = 4 [pid 5059] getdents64(4, [pid 5063] close(3 [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5059] getdents64(4, [pid 5057] newfstatat(4, "", [pid 5059] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./37" [pid 5059] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5059] <... close resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] rmdir("./37/file2" [pid 5057] getdents64(4, [pid 5063] mkdir("./38", 0777) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5059] getdents64(3, [pid 5063] <... openat resumed>) = 3 [pid 5059] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] getdents64(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] close(3 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5059] <... close resumed>) = 0 [pid 5057] close(4 [pid 5059] rmdir("./37" [pid 5057] <... close resumed>) = 0 [pid 5059] <... rmdir resumed>) = 0 [pid 5057] rmdir("./38/file2") = 0 [pid 5057] getdents64(3, [pid 5059] mkdir("./38", 0777 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] <... mkdir resumed>) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5057] close(3 [pid 5059] ioctl(3, LOOP_CLR_FD [pid 5057] <... close resumed>) = 0 [pid 5057] rmdir("./38") = 0 [pid 5057] mkdir("./39", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5730] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5731 attached , child_tidptr=0x555556520690) = 5731 [pid 5731] set_robust_list(0x5555565206a0, 24) = 0 [pid 5731] chdir("./38") = 0 [pid 5731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5731] setpgid(0, 0) = 0 [pid 5731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5731] write(3, "1000", 4) = 4 [pid 5731] close(3) = 0 [pid 5731] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5731] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5731] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5731] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5731] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5732]}, 88) = 5732 [pid 5731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5731] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5732 attached [pid 5732] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5732] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5732] memfd_create("syzkaller", 0) = 3 [pid 5732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5724] <... write resumed>) = 16777216 [pid 5724] munmap(0x7f919cc00000, 138412032 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5733 attached [pid 5057] <... ioctl resumed>) = 0 [pid 5733] set_robust_list(0x5555565206a0, 24) = 0 [pid 5059] <... clone resumed>, child_tidptr=0x555556520690) = 5733 [pid 5733] chdir("./38") = 0 [pid 5733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5733] setpgid(0, 0) = 0 [pid 5733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5733] write(3, "1000", 4) = 4 [pid 5733] close(3 [pid 5724] <... munmap resumed>) = 0 [pid 5733] <... close resumed>) = 0 [pid 5733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5733] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] close(3 [pid 5733] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5057] <... close resumed>) = 0 [pid 5733] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5733] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 ./strace-static-x86_64: Process 5734 attached [pid 5733] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5724] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5734 [pid 5734] set_robust_list(0x5555565206a0, 24 [pid 5733] <... mprotect resumed>) = 0 [pid 5733] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5734] <... set_robust_list resumed>) = 0 [pid 5733] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5724] <... openat resumed>) = 4 [pid 5733] <... clone3 resumed> => {parent_tid=[5735]}, 88) = 5735 [pid 5733] rt_sigprocmask(SIG_SETMASK, [], [pid 5724] ioctl(4, LOOP_SET_FD, 3 [pid 5734] chdir("./39" [pid 5733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5733] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5735 attached ) = 0 [pid 5735] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5733] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5735] <... rseq resumed>) = 0 [pid 5735] set_robust_list(0x7f91a50a79a0, 24 [pid 5734] <... chdir resumed>) = 0 [pid 5735] <... set_robust_list resumed>) = 0 [pid 5735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5735] memfd_create("syzkaller", 0 [pid 5734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5735] <... memfd_create resumed>) = 3 [pid 5735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5734] <... prctl resumed>) = 0 [pid 5735] <... mmap resumed>) = 0x7f919cc00000 [pid 5734] setpgid(0, 0) = 0 [pid 5734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5724] <... ioctl resumed>) = 0 [pid 5724] close(3 [pid 5734] <... openat resumed>) = 3 [pid 5734] write(3, "1000", 4 [pid 5724] <... close resumed>) = 0 [pid 5734] <... write resumed>) = 4 [pid 5724] close(4 [pid 5734] close(3) = 0 [pid 5734] symlink("/dev/binderfs", "./binderfs" [pid 5724] <... close resumed>) = 0 [pid 5734] <... symlink resumed>) = 0 [pid 5724] mkdir("./file2", 0777 [pid 5734] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] <... mkdir resumed>) = 0 [pid 5724] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5734] <... futex resumed>) = 0 [pid 5734] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5734] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [ 94.055597][ T5724] loop0: detected capacity change from 0 to 32768 [pid 5734] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5734] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5724] <... mount resumed>) = 0 [pid 5734] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5724] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5734] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5724] <... openat resumed>) = 3 [pid 5724] chdir("./file2"./strace-static-x86_64: Process 5736 attached ) = 0 [pid 5736] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5736] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5736] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5724] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5734] <... clone3 resumed> => {parent_tid=[5736]}, 88) = 5736 [pid 5724] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5734] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5724] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5736] <... futex resumed>) = 0 [pid 5734] <... futex resumed>) = 1 [pid 5724] <... futex resumed>) = 1 [pid 5722] <... futex resumed>) = 0 [pid 5734] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5724] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5722] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5736] memfd_create("syzkaller", 0 [pid 5724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5722] <... futex resumed>) = 0 [pid 5736] <... memfd_create resumed>) = 3 [pid 5724] rename("./file2", "./file1" [pid 5722] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5729] <... write resumed>) = 16777216 [pid 5729] munmap(0x7f919cc00000, 138412032 [pid 5722] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5722] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [ 94.146471][ T5724] ERROR: (device loop0): diWrite: ixpxd invalid [ 94.146471][ T5724] [ 94.183531][ T5724] ERROR: (device loop0): remounting filesystem as read-only [pid 5729] <... munmap resumed>) = 0 [pid 5722] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5722] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5737]}, 88) = 5737 [pid 5722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5722] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5722] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5737 attached [pid 5732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5730] <... write resumed>) = 16777216 [pid 5729] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5724] <... rename resumed>) = -1 EIO (Input/output error) [pid 5737] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5737] set_robust_list(0x7f91a50869a0, 24 [pid 5729] <... openat resumed>) = 4 [pid 5724] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5729] ioctl(4, LOOP_SET_FD, 3 [pid 5730] munmap(0x7f919cc00000, 138412032 [pid 5737] <... set_robust_list resumed>) = 0 [pid 5729] <... ioctl resumed>) = 0 [pid 5724] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5737] rt_sigprocmask(SIG_SETMASK, [], [pid 5729] close(3 [pid 5737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5737] mkdir(".", 0777 [pid 5729] <... close resumed>) = 0 [pid 5737] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5729] close(4 [pid 5737] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5729] <... close resumed>) = 0 [pid 5737] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5729] mkdir("./file2", 0777 [pid 5737] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5722] <... futex resumed>) = 0 [pid 5722] exit_group(0 [pid 5729] <... mkdir resumed>) = 0 [pid 5724] <... futex resumed>) = ? [pid 5722] <... exit_group resumed>) = ? [pid 5737] +++ exited with 0 +++ [pid 5730] <... munmap resumed>) = 0 [pid 5729] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5724] +++ exited with 0 +++ [pid 5722] +++ exited with 0 +++ [ 94.209305][ T5724] ERROR: (device loop0): txAbort: [ 94.209305][ T5724] [ 94.243223][ T5729] loop4: detected capacity change from 0 to 32768 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5722, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=17 /* 0.17 s */} --- [pid 5729] <... mount resumed>) = 0 [pid 5729] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5056] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5730] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5056] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5729] <... openat resumed>) = 3 [pid 5730] <... openat resumed>) = 4 [pid 5729] chdir("./file2" [pid 5056] <... openat resumed>) = 3 [pid 5730] ioctl(4, LOOP_SET_FD, 3 [pid 5056] newfstatat(3, "", [pid 5729] <... chdir resumed>) = 0 [pid 5729] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5729] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5056] getdents64(3, [pid 5729] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5729] <... futex resumed>) = 1 [pid 5725] <... futex resumed>) = 0 [pid 5725] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5729] rename("./file2", "./file1" [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5725] <... futex resumed>) = 0 [pid 5056] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5725] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./39/binderfs" [pid 5730] <... ioctl resumed>) = 0 [pid 5730] close(3) = 0 [pid 5730] close(4) = 0 [pid 5730] mkdir("./file2", 0777) = 0 [pid 5730] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5056] <... unlink resumed>) = 0 [pid 5056] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 94.302879][ T5730] loop2: detected capacity change from 0 to 32768 [ 94.311340][ T5729] ERROR: (device loop4): diWrite: ixpxd invalid [ 94.311340][ T5729] [ 94.320869][ T5729] ERROR: (device loop4): remounting filesystem as read-only [pid 5736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5730] <... mount resumed>) = 0 [pid 5730] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5730] chdir("./file2") = 0 [pid 5730] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5730] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5730] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5727] <... futex resumed>) = 0 [pid 5727] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5730] <... futex resumed>) = 0 [pid 5727] <... futex resumed>) = 1 [pid 5730] rename("./file2", "./file1" [pid 5727] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5725] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5729] <... rename resumed>) = -1 EIO (Input/output error) [pid 5725] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5729] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5725] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5729] <... futex resumed>) = 0 [pid 5725] <... mmap resumed>) = 0x7f91a5066000 [pid 5729] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5725] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 94.351098][ T5729] ERROR: (device loop4): txAbort: [ 94.351098][ T5729] [ 94.362767][ T5730] ERROR: (device loop2): diWrite: ixpxd invalid [ 94.362767][ T5730] [ 94.377796][ T5730] ERROR: (device loop2): remounting filesystem as read-only [pid 5725] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5738 attached => {parent_tid=[5738]}, 88) = 5738 [pid 5738] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5725] rt_sigprocmask(SIG_SETMASK, [], [pid 5738] <... rseq resumed>) = 0 [pid 5725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5738] set_robust_list(0x7f91a50869a0, 24 [pid 5725] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] <... set_robust_list resumed>) = 0 [pid 5725] <... futex resumed>) = 0 [pid 5738] rt_sigprocmask(SIG_SETMASK, [], [pid 5725] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5738] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5738] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5738] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5738] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5725] <... futex resumed>) = 0 [pid 5738] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5725] exit_group(0 [pid 5738] <... futex resumed>) = ? [pid 5729] <... futex resumed>) = ? [pid 5725] <... exit_group resumed>) = ? [pid 5729] +++ exited with 0 +++ [pid 5738] +++ exited with 0 +++ [pid 5725] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5725, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=13 /* 0.13 s */} --- [pid 5727] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5060] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5727] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5727] <... mmap resumed>) = 0x7f91a5066000 [pid 5730] <... rename resumed>) = -1 EIO (Input/output error) [pid 5730] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5730] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5727] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5060] <... openat resumed>) = 3 [pid 5727] <... mprotect resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5727] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5727] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] getdents64(3, [pid 5727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5739 attached [pid 5060] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5727] <... clone3 resumed> => {parent_tid=[5739]}, 88) = 5739 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5739] <... rseq resumed>) = 0 [pid 5727] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] newfstatat(AT_FDCWD, "./37/binderfs", [pid 5727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5739] set_robust_list(0x7f91a50869a0, 24 [pid 5727] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5739] <... set_robust_list resumed>) = 0 [pid 5727] <... futex resumed>) = 0 [pid 5060] unlink("./37/binderfs" [pid 5739] rt_sigprocmask(SIG_SETMASK, [], [pid 5727] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5739] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5739] mkdir(".", 0777 [pid 5060] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] <... mkdir resumed>) = -1 EEXIST (File exists) [ 94.411926][ T5730] ERROR: (device loop2): txAbort: [ 94.411926][ T5730] [pid 5739] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = 0 [pid 5739] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5727] <... futex resumed>) = 0 [pid 5727] exit_group(0) = ? [pid 5739] +++ exited with 0 +++ [pid 5730] <... futex resumed>) = ? [pid 5730] +++ exited with 0 +++ [pid 5727] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5727, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=12 /* 0.12 s */} --- [pid 5060] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5060] newfstatat(AT_FDCWD, "./37/file2", [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./37/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5060] openat(AT_FDCWD, "./37/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./39/binderfs" [pid 5060] <... openat resumed>) = 4 [pid 5058] <... unlink resumed>) = 0 [pid 5060] newfstatat(4, "", [pid 5058] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./37/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./37") = 0 [pid 5060] mkdir("./38", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./39/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5736] <... write resumed>) = 16777216 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./39/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5736] munmap(0x7f919cc00000, 138412032 [pid 5058] <... openat resumed>) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./39/file2" [pid 5736] <... munmap resumed>) = 0 [pid 5732] <... write resumed>) = 16777216 [pid 5732] munmap(0x7f919cc00000, 138412032 [pid 5058] <... rmdir resumed>) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./39") = 0 [pid 5058] mkdir("./40", 0777) = 0 [pid 5736] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5736] <... openat resumed>) = 4 [pid 5058] <... openat resumed>) = 3 [pid 5736] ioctl(4, LOOP_SET_FD, 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5732] <... munmap resumed>) = 0 [pid 5732] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5736] <... ioctl resumed>) = 0 [pid 5732] ioctl(4, LOOP_SET_FD, 3 [pid 5736] close(3) = 0 [pid 5732] <... ioctl resumed>) = 0 [pid 5732] close(3) = 0 [pid 5732] close(4) = 0 [pid 5736] close(4) = 0 [pid 5732] mkdir("./file2", 0777 [pid 5736] mkdir("./file2", 0777 [pid 5732] <... mkdir resumed>) = 0 [pid 5732] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5736] <... mkdir resumed>) = 0 [ 94.527682][ T5736] loop1: detected capacity change from 0 to 32768 [ 94.553896][ T5732] loop5: detected capacity change from 0 to 32768 [pid 5736] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5735] <... write resumed>) = 16777216 [pid 5736] <... mount resumed>) = 0 [pid 5732] <... mount resumed>) = 0 [pid 5732] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5732] chdir("./file2") = 0 [pid 5732] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5732] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5731] <... futex resumed>) = 0 [pid 5732] rename("./file2", "./file1" [pid 5731] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5736] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5731] <... futex resumed>) = 0 [pid 5736] <... openat resumed>) = 3 [pid 5731] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5736] chdir("./file2") = 0 [pid 5736] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5735] munmap(0x7f919cc00000, 138412032) = 0 [pid 5736] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5736] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5734] <... futex resumed>) = 0 [pid 5736] rename("./file2", "./file1" [pid 5734] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 94.602941][ T5732] ERROR: (device loop5): diWrite: ixpxd invalid [ 94.602941][ T5732] [ 94.630951][ T5732] ERROR: (device loop5): remounting filesystem as read-only [ 94.646964][ T5736] ERROR: (device loop1): diWrite: ixpxd invalid [pid 5735] ioctl(4, LOOP_SET_FD, 3 [pid 5734] <... futex resumed>) = 0 [pid 5734] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... umount2 resumed>) = 0 [pid 5731] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5731] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5731] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5731] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5740]}, 88) = 5740 [pid 5731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5731] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5731] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5740 attached [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5740] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5056] newfstatat(AT_FDCWD, "./39/file2", [pid 5740] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5740] mkdir(".", 0777 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5740] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5740] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5056] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5740] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5740] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5731] <... futex resumed>) = 0 [pid 5740] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./39/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, [pid 5735] <... ioctl resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5735] close(3) = 0 [pid 5735] close(4 [pid 5056] close(4 [pid 5735] <... close resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./39/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./39") = 0 [pid 5735] mkdir("./file2", 0777 [pid 5056] mkdir("./40", 0777 [pid 5735] <... mkdir resumed>) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5735] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5056] <... openat resumed>) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5736] <... rename resumed>) = -1 EIO (Input/output error) [pid 5736] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] <... futex resumed>) = 0 [pid 5734] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5734] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5736] <... futex resumed>) = 1 [pid 5736] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5736] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5736] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] <... futex resumed>) = 0 [pid 5734] exit_group(0) = ? [pid 5736] <... futex resumed>) = ? [pid 5736] +++ exited with 0 +++ [pid 5734] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5734, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5057] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./39/binderfs") = 0 [pid 5057] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5057] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./39/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./39/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, [pid 5732] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./39/file2") = 0 [pid 5732] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5731] exit_group(0 [pid 5057] close(3 [pid 5740] <... futex resumed>) = ? [pid 5732] <... futex resumed>) = ? [pid 5731] <... exit_group resumed>) = ? [pid 5057] <... close resumed>) = 0 [pid 5740] +++ exited with 0 +++ [pid 5732] +++ exited with 0 +++ [pid 5057] rmdir("./39" [pid 5735] <... mount resumed>) = 0 [pid 5731] +++ exited with 0 +++ [pid 5057] <... rmdir resumed>) = 0 [pid 5735] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5731, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=20 /* 0.20 s */} --- [pid 5735] chdir("./file2" [pid 5063] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5735] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5735] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 3 [ 94.646964][ T5736] [ 94.647217][ T5735] loop3: detected capacity change from 0 to 32768 [ 94.661287][ T5736] ERROR: (device loop1): remounting filesystem as read-only [ 94.665087][ T5732] ERROR: (device loop5): txAbort: [ 94.665087][ T5732] [ 94.671291][ T5736] ERROR: (device loop1): txAbort: [ 94.671291][ T5736] [ 94.694917][ T5732] ERROR: (device loop5): remounting filesystem as read-only [pid 5735] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] newfstatat(3, "", [pid 5057] mkdir("./40", 0777 [pid 5735] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] <... mkdir resumed>) = 0 [pid 5735] <... futex resumed>) = 1 [pid 5733] <... futex resumed>) = 0 [pid 5063] getdents64(3, [pid 5733] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] rename("./file2", "./file1" [pid 5733] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5733] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./38/binderfs") = 0 [pid 5063] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5733] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5733] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5733] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [ 94.736430][ T5735] ERROR: (device loop3): diWrite: ixpxd invalid [ 94.736430][ T5735] [ 94.771411][ T5735] ERROR: (device loop3): remounting filesystem as read-only [pid 5733] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5741 attached [pid 5741] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5733] <... clone3 resumed> => {parent_tid=[5741]}, 88) = 5741 [pid 5741] <... rseq resumed>) = 0 [pid 5733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5741] set_robust_list(0x7f91a50869a0, 24 [pid 5733] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5741] <... set_robust_list resumed>) = 0 [pid 5733] <... futex resumed>) = 0 [pid 5733] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5741] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5741] mkdir(".", 0777 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5742 attached [pid 5741] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5742 [pid 5742] set_robust_list(0x5555565206a0, 24 [pid 5741] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5735] <... rename resumed>) = -1 EIO (Input/output error) [pid 5742] <... set_robust_list resumed>) = 0 [pid 5742] chdir("./40") = 0 [pid 5742] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5742] setpgid(0, 0) = 0 [pid 5741] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5735] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5741] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] <... futex resumed>) = 0 [pid 5742] write(3, "1000", 4 [pid 5741] <... futex resumed>) = 1 [pid 5735] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5733] <... futex resumed>) = 0 [pid 5742] <... write resumed>) = 4 [pid 5741] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] close(3 [pid 5742] close(3 [pid 5733] exit_group(0 [pid 5060] <... close resumed>) = 0 [pid 5742] <... close resumed>) = 0 [pid 5741] <... futex resumed>) = ? [pid 5735] <... futex resumed>) = ? [pid 5733] <... exit_group resumed>) = ? [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5742] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5742] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5742] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5735] +++ exited with 0 +++ [pid 5742] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 94.793383][ T5735] ERROR: (device loop3): txAbort: [ 94.793383][ T5735] [pid 5742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5742] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5742] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5744 attached => {parent_tid=[5744]}, 88) = 5744 [pid 5744] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5742] rt_sigprocmask(SIG_SETMASK, [], [pid 5744] <... rseq resumed>) = 0 [pid 5742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5741] +++ exited with 0 +++ [pid 5733] +++ exited with 0 +++ [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5743 ./strace-static-x86_64: Process 5743 attached [pid 5744] set_robust_list(0x7f91a50a79a0, 24 [pid 5742] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5733, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=17 /* 0.17 s */} --- [pid 5744] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5744] memfd_create("syzkaller", 0 [pid 5063] newfstatat(AT_FDCWD, "./38/file2", [pid 5744] <... memfd_create resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5742] <... futex resumed>) = 0 [pid 5744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5742] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5059] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5743] set_robust_list(0x5555565206a0, 24 [pid 5744] <... mmap resumed>) = 0x7f919cc00000 [pid 5743] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5743] chdir("./38" [pid 5059] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./38/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5743] <... chdir resumed>) = 0 [pid 5743] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] <... openat resumed>) = 3 [pid 5743] <... prctl resumed>) = 0 [pid 5743] setpgid(0, 0 [pid 5063] <... openat resumed>) = 4 [pid 5059] newfstatat(3, "", [pid 5743] <... setpgid resumed>) = 0 [pid 5743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] newfstatat(4, "", [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5743] <... openat resumed>) = 3 [pid 5743] write(3, "1000", 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, [pid 5743] <... write resumed>) = 4 [pid 5063] getdents64(4, [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5743] close(3 [pid 5059] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5743] <... close resumed>) = 0 [pid 5743] symlink("/dev/binderfs", "./binderfs" [pid 5059] newfstatat(AT_FDCWD, "./38/binderfs", [pid 5743] <... symlink resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5743] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] unlink("./38/binderfs" [pid 5743] <... futex resumed>) = 0 [pid 5743] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5743] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5059] <... unlink resumed>) = 0 [pid 5743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] getdents64(4, [pid 5059] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5743] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] close(4 [pid 5743] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... close resumed>) = 0 [pid 5743] <... mprotect resumed>) = 0 [pid 5743] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] rmdir("./38/file2" [pid 5743] <... clone3 resumed> => {parent_tid=[5745]}, 88) = 5745 [pid 5743] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5743] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 5743] <... futex resumed>) = 0 [pid 5743] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] getdents64(3, ./strace-static-x86_64: Process 5745 attached 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5056] <... ioctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./38" [pid 5745] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5063] <... rmdir resumed>) = 0 [pid 5745] <... rseq resumed>) = 0 [pid 5063] mkdir("./39", 0777 [pid 5745] set_robust_list(0x7f91a50a79a0, 24 [pid 5063] <... mkdir resumed>) = 0 [pid 5745] <... set_robust_list resumed>) = 0 [pid 5745] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5745] memfd_create("syzkaller", 0) = 3 [pid 5745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... openat resumed>) = 3 [pid 5745] <... mmap resumed>) = 0x7f919cc00000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5059] <... umount2 resumed>) = 0 [pid 5059] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] newfstatat(AT_FDCWD, "./38/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./38/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5059] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(4, [pid 5056] close(3 [pid 5059] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] <... close resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5059] close(4) = 0 [pid 5059] rmdir("./38/file2") = 0 [pid 5059] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5746 [pid 5059] rmdir("./38") = 0 [pid 5059] mkdir("./39", 0777) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5059] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5746 attached [pid 5746] set_robust_list(0x5555565206a0, 24) = 0 [pid 5746] chdir("./40") = 0 [pid 5746] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5746] setpgid(0, 0) = 0 [pid 5746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5746] write(3, "1000", 4) = 4 [pid 5746] close(3) = 0 [pid 5746] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5746] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5746] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5746] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5746] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5746] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5747]}, 88) = 5747 [pid 5746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5746] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5746] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5747 attached [pid 5747] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5747] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5747] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5747] memfd_create("syzkaller", 0) = 3 [pid 5057] <... ioctl resumed>) = 0 [pid 5747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5748 attached [pid 5748] set_robust_list(0x5555565206a0, 24) = 0 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5748 [pid 5748] chdir("./40") = 0 [pid 5748] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5748] setpgid(0, 0) = 0 [pid 5748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5748] write(3, "1000", 4) = 4 [pid 5748] close(3) = 0 [pid 5748] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5748] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5748] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5748] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5748] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5748] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5749 attached [pid 5749] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5748] <... clone3 resumed> => {parent_tid=[5749]}, 88) = 5749 [pid 5749] <... rseq resumed>) = 0 [pid 5748] rt_sigprocmask(SIG_SETMASK, [], [pid 5749] set_robust_list(0x7f91a50a79a0, 24 [pid 5748] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5749] <... set_robust_list resumed>) = 0 [pid 5748] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5749] rt_sigprocmask(SIG_SETMASK, [], [pid 5748] <... futex resumed>) = 0 [pid 5749] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5748] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5749] memfd_create("syzkaller", 0) = 3 [pid 5749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] <... ioctl resumed>) = 0 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5750 ./strace-static-x86_64: Process 5750 attached [pid 5750] set_robust_list(0x5555565206a0, 24) = 0 [pid 5750] chdir("./39") = 0 [pid 5750] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5750] setpgid(0, 0) = 0 [pid 5750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5750] write(3, "1000", 4) = 4 [pid 5750] close(3) = 0 [pid 5750] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5750] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5750] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5750] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5751]}, 88) = 5751 [pid 5750] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5750] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5751 attached [pid 5751] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5751] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5751] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5751] memfd_create("syzkaller", 0) = 3 [pid 5751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] close(3 [pid 5751] <... mmap resumed>) = 0x7f919cc00000 [pid 5063] <... close resumed>) = 0 [pid 5747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5752 attached , child_tidptr=0x555556520690) = 5752 [pid 5752] set_robust_list(0x5555565206a0, 24) = 0 [pid 5752] chdir("./39") = 0 [pid 5752] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5752] setpgid(0, 0) = 0 [pid 5752] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5752] write(3, "1000", 4) = 4 [pid 5749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5752] close(3) = 0 [pid 5752] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5752] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5752] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5752] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5752] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5752] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5752] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5752] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5753 attached => {parent_tid=[5753]}, 88) = 5753 [pid 5753] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5752] rt_sigprocmask(SIG_SETMASK, [], [pid 5753] <... rseq resumed>) = 0 [pid 5752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5753] set_robust_list(0x7f91a50a79a0, 24 [pid 5752] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5753] <... set_robust_list resumed>) = 0 [pid 5753] rt_sigprocmask(SIG_SETMASK, [], [pid 5752] <... futex resumed>) = 0 [pid 5753] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5752] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5753] memfd_create("syzkaller", 0) = 3 [pid 5753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5745] <... write resumed>) = 16777216 [pid 5745] munmap(0x7f919cc00000, 138412032 [pid 5744] <... write resumed>) = 16777216 [pid 5745] <... munmap resumed>) = 0 [pid 5744] munmap(0x7f919cc00000, 138412032 [pid 5745] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5745] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5745] close(3) = 0 [pid 5751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5745] close(4 [pid 5744] <... munmap resumed>) = 0 [pid 5745] <... close resumed>) = 0 [pid 5745] mkdir("./file2", 0777 [pid 5744] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5745] <... mkdir resumed>) = 0 [pid 5745] mount("/dev/loop4", "./file2", "jfs", 0, "" [ 95.512658][ T5745] loop4: detected capacity change from 0 to 32768 [pid 5744] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5744] close(3) = 0 [pid 5744] close(4) = 0 [pid 5744] mkdir("./file2", 0777 [pid 5745] <... mount resumed>) = 0 [pid 5745] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5744] <... mkdir resumed>) = 0 [pid 5753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5745] <... openat resumed>) = 3 [pid 5744] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5745] chdir("./file2") = 0 [pid 5745] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5745] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5743] <... futex resumed>) = 0 [pid 5745] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5743] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5743] <... futex resumed>) = 0 [pid 5745] rename("./file2", "./file1" [ 95.561345][ T5744] loop2: detected capacity change from 0 to 32768 [pid 5743] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5747] <... write resumed>) = 16777216 [pid 5747] munmap(0x7f919cc00000, 138412032 [pid 5749] <... write resumed>) = 16777216 [pid 5749] munmap(0x7f919cc00000, 138412032) = 0 [ 95.613025][ T5745] ERROR: (device loop4): diWrite: ixpxd invalid [ 95.613025][ T5745] [ 95.638164][ T5745] ERROR: (device loop4): remounting filesystem as read-only [pid 5743] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5743] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5743] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5743] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5744] <... mount resumed>) = 0 [pid 5743] <... mprotect resumed>) = 0 [pid 5749] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5744] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5749] <... openat resumed>) = 4 [pid 5744] <... openat resumed>) = 3 [pid 5743] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5744] chdir("./file2" [pid 5743] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5749] ioctl(4, LOOP_SET_FD, 3 [pid 5747] <... munmap resumed>) = 0 [pid 5745] <... rename resumed>) = -1 EIO (Input/output error) [pid 5744] <... chdir resumed>) = 0 [pid 5743] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5744] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5744] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5744] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5749] <... ioctl resumed>) = 0 [pid 5742] <... futex resumed>) = 0 [pid 5747] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5742] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5754 attached [pid 5747] <... openat resumed>) = 4 [pid 5745] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5744] <... futex resumed>) = 0 [pid 5743] <... clone3 resumed> => {parent_tid=[5754]}, 88) = 5754 [pid 5742] <... futex resumed>) = 1 [pid 5749] close(3 [pid 5747] ioctl(4, LOOP_SET_FD, 3 [pid 5745] <... futex resumed>) = 0 [pid 5744] rename("./file2", "./file1" [pid 5743] rt_sigprocmask(SIG_SETMASK, [], [pid 5742] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5749] <... close resumed>) = 0 [pid 5747] <... ioctl resumed>) = 0 [pid 5745] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5749] close(4 [pid 5747] close(3 [pid 5743] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5749] <... close resumed>) = 0 [pid 5747] <... close resumed>) = 0 [pid 5743] <... futex resumed>) = 0 [pid 5749] mkdir("./file2", 0777 [pid 5743] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5754] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5749] <... mkdir resumed>) = 0 [pid 5747] close(4 [pid 5749] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5747] <... close resumed>) = 0 [pid 5747] mkdir("./file2", 0777 [pid 5754] <... rseq resumed>) = 0 [pid 5749] <... mount resumed>) = 0 [pid 5747] <... mkdir resumed>) = 0 [pid 5754] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5754] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5754] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5747] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5749] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5754] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5749] <... openat resumed>) = 3 [pid 5743] <... futex resumed>) = 0 [pid 5754] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5743] exit_group(0 [pid 5749] chdir("./file2" [pid 5754] <... futex resumed>) = ? [pid 5749] <... chdir resumed>) = 0 [pid 5745] <... futex resumed>) = ? [pid 5743] <... exit_group resumed>) = ? [pid 5754] +++ exited with 0 +++ [pid 5749] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5745] +++ exited with 0 +++ [pid 5743] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5743, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=16 /* 0.16 s */} --- [pid 5749] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 95.658754][ T5745] ERROR: (device loop4): txAbort: [ 95.658754][ T5745] [ 95.672854][ T5749] loop1: detected capacity change from 0 to 32768 [ 95.691438][ T5747] loop0: detected capacity change from 0 to 32768 [ 95.691693][ T5744] ERROR: (device loop2): diWrite: ixpxd invalid [ 95.691693][ T5744] [pid 5060] newfstatat(3, "", [pid 5749] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 5749] <... futex resumed>) = 1 [pid 5748] <... futex resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5748] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5749] rename("./file2", "./file1" [pid 5748] <... futex resumed>) = 0 [pid 5060] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./38/binderfs") = 0 [pid 5060] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5742] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5742] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5748] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5742] <... futex resumed>) = 0 [pid 5747] <... mount resumed>) = 0 [pid 5742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5747] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5742] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5747] <... openat resumed>) = 3 [pid 5742] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5755 attached [pid 5747] chdir("./file2" [pid 5060] <... umount2 resumed>) = 0 [pid 5755] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5747] <... chdir resumed>) = 0 [pid 5742] <... clone3 resumed> => {parent_tid=[5755]}, 88) = 5755 [pid 5755] <... rseq resumed>) = 0 [pid 5747] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5742] rt_sigprocmask(SIG_SETMASK, [], [pid 5060] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5755] set_robust_list(0x7f91a50869a0, 24 [pid 5747] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5755] <... set_robust_list resumed>) = 0 [pid 5747] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(AT_FDCWD, "./38/file2", [pid 5755] rt_sigprocmask(SIG_SETMASK, [], [pid 5747] <... futex resumed>) = 1 [pid 5746] <... futex resumed>) = 0 [pid 5742] <... futex resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5747] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 95.740599][ T5749] ERROR: (device loop1): diWrite: ixpxd invalid [ 95.740599][ T5749] [ 95.750708][ T5744] ERROR: (device loop2): remounting filesystem as read-only [ 95.772657][ T5744] ERROR: (device loop2): txAbort: [ 95.772657][ T5744] [pid 5742] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5747] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5746] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./38/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5755] mkdir(".", 0777 [pid 5747] rename("./file2", "./file1" [pid 5746] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5746] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] openat(AT_FDCWD, "./38/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5744] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] <... openat resumed>) = 4 [pid 5744] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] newfstatat(4, "", [pid 5744] <... futex resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5744] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] close(4) = 0 [pid 5060] rmdir("./38/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./38") = 0 [pid 5060] mkdir("./39", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5755] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5748] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5748] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5755] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5748] <... futex resumed>) = 0 [pid 5748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5755] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5753] <... write resumed>) = 16777216 [pid 5748] <... mmap resumed>) = 0x7f91a5066000 [pid 5749] <... rename resumed>) = -1 EIO (Input/output error) [pid 5755] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5753] munmap(0x7f919cc00000, 138412032 [pid 5751] <... write resumed>) = 16777216 [pid 5749] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5748] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5751] munmap(0x7f919cc00000, 138412032 [pid 5749] <... futex resumed>) = 0 [pid 5751] <... munmap resumed>) = 0 [pid 5748] <... mprotect resumed>) = 0 [pid 5755] <... futex resumed>) = 1 [pid 5748] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5755] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5749] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5751] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5753] <... munmap resumed>) = 0 [pid 5748] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5747] <... rename resumed>) = -1 EIO (Input/output error) [pid 5746] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5742] <... futex resumed>) = 0 [pid 5746] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5746] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5746] <... mprotect resumed>) = 0 [pid 5742] exit_group(0 [pid 5755] <... futex resumed>) = ? [pid 5746] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5742] <... exit_group resumed>) = ? [pid 5755] +++ exited with 0 +++ [pid 5748] <... clone3 resumed> => {parent_tid=[5756]}, 88) = 5756 [pid 5746] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5756 attached [pid 5748] rt_sigprocmask(SIG_SETMASK, [], [pid 5746] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5744] <... futex resumed>) = ? [pid 5756] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5748] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5744] +++ exited with 0 +++ [pid 5742] +++ exited with 0 +++ [pid 5746] <... clone3 resumed> => {parent_tid=[5757]}, 88) = 5757 [pid 5751] <... openat resumed>) = 4 [pid 5746] rt_sigprocmask(SIG_SETMASK, [], [pid 5753] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5746] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5757 attached [pid 5756] <... rseq resumed>) = 0 [pid 5753] <... openat resumed>) = 4 [pid 5748] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5747] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5746] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5757] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5756] set_robust_list(0x7f91a50869a0, 24 [ 95.785986][ T5749] ERROR: (device loop1): remounting filesystem as read-only [ 95.797201][ T5747] ERROR: (device loop0): diWrite: ixpxd invalid [ 95.797201][ T5747] [ 95.804811][ T5749] ERROR: (device loop1): txAbort: [ 95.804811][ T5749] [ 95.817500][ T5747] ERROR: (device loop0): remounting filesystem as read-only [ 95.825095][ T5747] ERROR: (device loop0): txAbort: [ 95.825095][ T5747] [pid 5753] ioctl(4, LOOP_SET_FD, 3 [pid 5751] ioctl(4, LOOP_SET_FD, 3 [pid 5748] <... futex resumed>) = 0 [pid 5747] <... futex resumed>) = 0 [pid 5746] <... futex resumed>) = 0 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5742, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5757] <... rseq resumed>) = 0 [pid 5756] <... set_robust_list resumed>) = 0 [pid 5748] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5746] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5757] set_robust_list(0x7f91a50869a0, 24 [pid 5756] rt_sigprocmask(SIG_SETMASK, [], [pid 5757] <... set_robust_list resumed>) = 0 [pid 5756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5757] rt_sigprocmask(SIG_SETMASK, [], [pid 5756] mkdir(".", 0777 [pid 5757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5757] mkdir(".", 0777 [pid 5756] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5757] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5756] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5058] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5757] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5756] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... openat resumed>) = 3 [pid 5757] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] newfstatat(3, "", [pid 5757] <... futex resumed>) = 1 [pid 5746] <... futex resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5757] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5746] exit_group(0 [pid 5058] getdents64(3, [pid 5757] <... futex resumed>) = ? [pid 5756] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5746] <... exit_group resumed>) = ? [pid 5757] +++ exited with 0 +++ [pid 5756] <... futex resumed>) = 1 [pid 5748] <... futex resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5756] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5753] <... ioctl resumed>) = 0 [pid 5748] exit_group(0 [pid 5058] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5756] <... futex resumed>) = ? [pid 5753] close(3 [pid 5749] <... futex resumed>) = ? [pid 5748] <... exit_group resumed>) = ? [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5756] +++ exited with 0 +++ [pid 5753] <... close resumed>) = 0 [pid 5749] +++ exited with 0 +++ [pid 5748] +++ exited with 0 +++ [pid 5753] close(4 [pid 5747] +++ exited with 0 +++ [pid 5746] +++ exited with 0 +++ [pid 5058] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5753] <... close resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5748, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5746, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- [pid 5057] restart_syscall(<... resuming interrupted clone ...> [pid 5753] mkdir("./file2", 0777 [pid 5058] unlink("./40/binderfs" [pid 5057] <... restart_syscall resumed>) = 0 [pid 5056] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, [pid 5058] <... unlink resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5753] <... mkdir resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] unlink("./40/binderfs" [pid 5753] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5058] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... unlink resumed>) = 0 [pid 5057] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... openat resumed>) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5751] <... ioctl resumed>) = 0 [pid 5057] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5753] <... mount resumed>) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5753] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5753] <... openat resumed>) = 3 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] unlink("./40/binderfs" [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5753] chdir("./file2" [pid 5058] newfstatat(AT_FDCWD, "./40/file2", [pid 5056] newfstatat(AT_FDCWD, "./40/file2", [pid 5057] <... unlink resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5753] <... chdir resumed>) = 0 [pid 5058] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5753] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./40/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5753] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5058] openat(AT_FDCWD, "./40/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... openat resumed>) = 4 [pid 5751] close(3 [pid 5056] newfstatat(4, "", [pid 5753] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... openat resumed>) = 4 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5753] <... futex resumed>) = 1 [pid 5752] <... futex resumed>) = 0 [pid 5058] newfstatat(4, "", [pid 5056] getdents64(4, [pid 5753] rename("./file2", "./file1" [pid 5752] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5752] <... futex resumed>) = 0 [pid 5751] <... close resumed>) = 0 [pid 5058] getdents64(4, [pid 5056] getdents64(4, [pid 5752] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5751] close(4 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5751] <... close resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [ 95.856924][ T5753] loop5: detected capacity change from 0 to 32768 [ 95.868256][ T5751] loop3: detected capacity change from 0 to 32768 [pid 5056] close(4 [pid 5751] mkdir("./file2", 0777 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] <... close resumed>) = 0 [pid 5058] close(4) = 0 [pid 5056] rmdir("./40/file2") = 0 [pid 5056] getdents64(3, [pid 5751] <... mkdir resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./40") = 0 [pid 5056] mkdir("./41", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5751] mount("/dev/loop3", "./file2", "jfs", 0, "" [pid 5058] rmdir("./40/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./40") = 0 [pid 5058] mkdir("./41", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5751] <... mount resumed>) = 0 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5751] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5751] chdir("./file2") = 0 [pid 5751] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5751] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5751] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5750] <... futex resumed>) = 0 [pid 5750] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5751] <... futex resumed>) = 0 [pid 5750] <... futex resumed>) = 1 [pid 5751] rename("./file2", "./file1" [pid 5750] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5753] <... rename resumed>) = -1 EIO (Input/output error) [pid 5752] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5752] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5753] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5752] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5753] <... futex resumed>) = 0 [pid 5752] <... mmap resumed>) = 0x7f91a5066000 [pid 5753] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5752] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5752] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5752] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5758]}, 88) = 5758 [pid 5752] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5752] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5752] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5758 attached [ 95.919427][ T5753] ERROR: (device loop5): diWrite: ixpxd invalid [ 95.919427][ T5753] [ 95.943214][ T5753] ERROR: (device loop5): remounting filesystem as read-only [ 95.953332][ T5753] ERROR: (device loop5): txAbort: [ 95.953332][ T5753] [ 95.953962][ T5751] ERROR: (device loop3): diWrite: ixpxd invalid [ 95.953962][ T5751] [pid 5758] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5750] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5750] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5758] set_robust_list(0x7f91a50869a0, 24 [pid 5750] <... mprotect resumed>) = 0 [pid 5758] <... set_robust_list resumed>) = 0 [pid 5750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5758] rt_sigprocmask(SIG_SETMASK, [], [pid 5750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5759 attached [pid 5758] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5750] <... clone3 resumed> => {parent_tid=[5759]}, 88) = 5759 [pid 5750] rt_sigprocmask(SIG_SETMASK, [], [pid 5759] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5758] mkdir(".", 0777 [pid 5750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5758] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5750] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5750] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5759] <... rseq resumed>) = 0 [pid 5758] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5759] set_robust_list(0x7f91a50869a0, 24 [pid 5758] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5758] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5759] <... set_robust_list resumed>) = 0 [pid 5759] rt_sigprocmask(SIG_SETMASK, [], [pid 5758] <... futex resumed>) = 1 [pid 5759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5752] <... futex resumed>) = 0 [pid 5752] exit_group(0) = ? [pid 5759] mkdir(".", 0777 [pid 5753] <... futex resumed>) = ? [pid 5759] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5753] +++ exited with 0 +++ [pid 5759] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5758] +++ exited with 0 +++ [pid 5752] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5752, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5063] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./39/binderfs") = 0 [pid 5063] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5063] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./39/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./39/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./39/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./39") = 0 [pid 5063] mkdir("./40", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [ 96.020220][ T5751] ERROR: (device loop3): remounting filesystem as read-only [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5751] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5760 [pid 5751] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5760 attached ) = 0 [pid 5751] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5760] set_robust_list(0x5555565206a0, 24) = 0 [pid 5760] chdir("./39") = 0 [pid 5760] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5760] setpgid(0, 0) = 0 [pid 5760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5760] write(3, "1000", 4) = 4 [pid 5760] close(3) = 0 [pid 5760] symlink("/dev/binderfs", "./binderfs" [pid 5058] <... ioctl resumed>) = 0 [ 96.061336][ T5751] ERROR: (device loop3): txAbort: [ 96.061336][ T5751] [ 96.069002][ T5759] BUG: Bad page state in process syz-executor243 pfn:7ece7 [ 96.081425][ T5759] page:ffffea0001fb39c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7ece7 [pid 5760] <... symlink resumed>) = 0 [pid 5058] close(3) = 0 [pid 5760] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5760] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, ./strace-static-x86_64: Process 5761 attached [pid 5761] set_robust_list(0x5555565206a0, 24) = 0 [pid 5761] chdir("./41") = 0 [pid 5761] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5760] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5760] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5761 [pid 5761] <... prctl resumed>) = 0 [pid 5761] setpgid(0, 0) = 0 [pid 5760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5761] <... openat resumed>) = 3 [pid 5760] <... mmap resumed>) = 0x7f91a5087000 [pid 5761] write(3, "1000", 4) = 4 [pid 5761] close(3) = 0 [pid 5761] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5761] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5761] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5761] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5761] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5761] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5761] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5760] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5761] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5761] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5760] <... mprotect resumed>) = 0 [pid 5761] <... clone3 resumed> => {parent_tid=[5762]}, 88) = 5762 [pid 5761] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5761] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5760] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5760] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5762 attached [pid 5761] <... futex resumed>) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5762] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5761] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5762] <... rseq resumed>) = 0 [pid 5762] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5762] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5762] memfd_create("syzkaller", 0) = 3 [pid 5762] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5056] close(3) = 0 [ 96.121279][ T5759] flags: 0xfff1000000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 96.148508][ T5759] page_type: 0xffffffff() [ 96.156241][ T5759] raw: 00fff1000000820c ffffea00008301c8 ffffc90005507990 0000000000000000 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5764 attached ./strace-static-x86_64: Process 5763 attached [pid 5763] set_robust_list(0x5555565206a0, 24) = 0 [pid 5763] chdir("./41") = 0 [pid 5763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5763] setpgid(0, 0) = 0 [pid 5763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5763] write(3, "1000", 4) = 4 [pid 5763] close(3) = 0 [pid 5763] symlink("/dev/binderfs", "./binderfs" [pid 5764] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5763] <... symlink resumed>) = 0 [pid 5760] <... clone3 resumed> => {parent_tid=[5764]}, 88) = 5764 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5763 [pid 5764] <... rseq resumed>) = 0 [pid 5763] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5763] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5764] set_robust_list(0x7f91a50a79a0, 24 [pid 5760] rt_sigprocmask(SIG_SETMASK, [], [pid 5764] <... set_robust_list resumed>) = 0 [pid 5763] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5764] rt_sigprocmask(SIG_SETMASK, [], [pid 5760] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5764] memfd_create("syzkaller", 0 [pid 5763] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5760] <... futex resumed>) = 0 [pid 5763] <... mprotect resumed>) = 0 [pid 5764] <... memfd_create resumed>) = 3 [pid 5760] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5763] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5764] <... mmap resumed>) = 0x7f919cc00000 [pid 5763] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5765]}, 88) = 5765 [pid 5763] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5763] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5763] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5765 attached [pid 5765] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5765] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5765] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5765] memfd_create("syzkaller", 0) = 3 [pid 5765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./40/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 96.174538][ T5759] raw: 000000000000001c ffff888029171000 00000000ffffffff 0000000000000000 [ 96.211164][ T5759] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 96.218503][ T5759] page_owner tracks the page as allocated [pid 5057] openat(AT_FDCWD, "./40/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./40/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./40") = 0 [ 96.234616][ T5759] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x40c40(GFP_NOFS|__GFP_COMP), pid 5751, tgid 5750 (syz-executor243), ts 95934543795, free_ts 95901613067 [ 96.271539][ T5759] post_alloc_hook+0x2d0/0x350 [pid 5057] mkdir("./41", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 96.282637][ T5759] get_page_from_freelist+0xa28/0x3780 [ 96.288122][ T5759] __alloc_pages+0x22f/0x2440 [ 96.305349][ T5759] alloc_pages_mpol+0x258/0x5f0 [ 96.316875][ T5759] folio_alloc+0x1e/0xe0 [ 96.326479][ T5759] filemap_alloc_folio+0x3bb/0x490 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5766 ./strace-static-x86_64: Process 5766 attached [pid 5766] set_robust_list(0x5555565206a0, 24) = 0 [pid 5766] chdir("./40") = 0 [pid 5766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5766] setpgid(0, 0) = 0 [pid 5766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5766] write(3, "1000", 4) = 4 [ 96.341056][ T5759] do_read_cache_folio+0x1b8/0x540 [ 96.346195][ T5759] read_cache_page+0x5b/0x160 [ 96.350881][ T5759] __get_metapage+0x993/0x1170 [ 96.374016][ T5759] diRead+0x650/0xb00 [ 96.379918][ T5759] jfs_iget+0x84/0x4c0 [pid 5766] close(3 [pid 5764] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5762] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5766] <... close resumed>) = 0 [pid 5766] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5766] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5766] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5766] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5766] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5766] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5767 attached => {parent_tid=[5767]}, 88) = 5767 [pid 5767] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5766] rt_sigprocmask(SIG_SETMASK, [], [pid 5767] <... rseq resumed>) = 0 [pid 5766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5767] set_robust_list(0x7f91a50a79a0, 24 [pid 5766] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5767] <... set_robust_list resumed>) = 0 [pid 5766] <... futex resumed>) = 0 [pid 5766] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5767] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 96.393923][ T5759] jfs_fill_super+0x6c8/0xd20 [ 96.398623][ T5759] mount_bdev+0x1df/0x2d0 [ 96.411062][ T5759] legacy_get_tree+0x109/0x220 [ 96.415828][ T5759] vfs_get_tree+0x8c/0x370 [ 96.426182][ T5759] path_mount+0x14e6/0x1f20 [ 96.431869][ T5759] page last free pid 5056 tgid 5056 stack trace: [pid 5767] memfd_create("syzkaller", 0) = 3 [pid 5767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [ 96.447468][ T5759] free_unref_page_prepare+0x51f/0xb10 [ 96.466178][ T5759] free_unref_page+0x33/0x3c0 [ 96.470955][ T5759] lmLogShutdown+0x371/0x780 [ 96.491130][ T5759] lmLogClose+0x577/0x710 [ 96.495521][ T5759] jfs_umount+0x2f0/0x430 [ 96.499870][ T5759] jfs_put_super+0x88/0x1d0 [ 96.531094][ T5759] generic_shutdown_super+0x159/0x3d0 [ 96.536563][ T5759] kill_block_super+0x3b/0x90 [ 96.546551][ T5759] deactivate_locked_super+0xbc/0x1a0 [ 96.571064][ T5759] deactivate_super+0xde/0x100 [ 96.575868][ T5759] cleanup_mnt+0x222/0x450 [ 96.580316][ T5759] task_work_run+0x14d/0x240 [ 96.611083][ T5759] ptrace_notify+0x10d/0x130 [ 96.615758][ T5759] syscall_exit_to_user_mode_prepare+0x126/0x230 [ 96.631088][ T5759] syscall_exit_to_user_mode+0x11/0x2b0 [ 96.636683][ T5759] do_syscall_64+0xe0/0x250 [ 96.646879][ T5759] Modules linked in: [ 96.650801][ T5759] CPU: 0 PID: 5759 Comm: syz-executor243 Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 [ 96.660861][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 96.670900][ T5759] Call Trace: [ 96.674162][ T5759] [ 96.677078][ T5759] dump_stack_lvl+0x125/0x1b0 [ 96.681748][ T5759] bad_page+0xb4/0x200 [ 96.685805][ T5759] ? folio_flags+0x130/0x130 [ 96.690382][ T5759] ? page_bad_reason+0x9d/0x1e0 [ 96.695222][ T5759] free_unref_page_prepare+0x545/0xb10 [ 96.700672][ T5759] ? __mem_cgroup_uncharge_list+0x116/0x170 [ 96.706556][ T5759] free_unref_page_list+0xe6/0xb40 [ 96.711662][ T5759] ? rcu_is_watching+0x12/0xb0 [ 96.716411][ T5759] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 96.722382][ T5759] release_pages+0x32a/0x14f0 [ 96.727046][ T5759] ? mlock_drain_local+0x22e/0x4f0 [ 96.732140][ T5759] ? put_pages_list+0x570/0x570 [ 96.736973][ T5759] ? filemap_remove_folio+0x210/0x210 [ 96.742330][ T5759] ? lru_add_drain_cpu+0x455/0x860 [ 96.747428][ T5759] __folio_batch_release+0x77/0xe0 [ 96.752524][ T5759] truncate_inode_pages_range+0x33e/0xf00 [ 96.758233][ T5759] ? truncate_inode_partial_folio+0x740/0x740 [ 96.764295][ T5759] ? filemap_write_and_wait_range+0x103/0x120 [ 96.770348][ T5759] ? sync_blockdev+0x70/0x90 [ 96.774924][ T5759] jfs_remount+0x4bd/0x650 [ 96.779335][ T5759] ? parse_options+0xf10/0xf10 [ 96.784090][ T5759] ? shrink_dcache_sb+0x28a/0x350 [ 96.789105][ T5759] ? d_prune_aliases+0x1e0/0x1e0 [ 96.794033][ T5759] ? lock_sync+0x190/0x190 [ 96.798430][ T5759] ? parse_options+0xf10/0xf10 [ 96.803183][ T5759] legacy_reconfigure+0x119/0x180 [ 96.808191][ T5759] reconfigure_super+0x44f/0xb10 [ 96.813112][ T5759] ? fs_umode_to_dtype+0xc0/0xc0 [ 96.818033][ T5759] path_mount+0x172e/0x1f20 [ 96.822532][ T5759] ? kmem_cache_free+0x129/0x350 [ 96.827459][ T5759] ? finish_automount+0xa40/0xa40 [ 96.832472][ T5759] ? lock_release+0xa5/0x690 [ 96.837055][ T5759] ? putname+0x12e/0x170 [ 96.841286][ T5759] __x64_sys_mount+0x293/0x310 [ 96.846040][ T5759] ? copy_mnt_ns+0x9f0/0x9f0 [ 96.850622][ T5759] ? _raw_spin_unlock_irq+0x2e/0x50 [ 96.855813][ T5759] ? ptrace_notify+0xf4/0x130 [ 96.860477][ T5759] do_syscall_64+0xd3/0x250 [ 96.864966][ T5759] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 96.870849][ T5759] RIP: 0033:0x7f91a50ec0da [ 96.875246][ T5759] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 96.894835][ T5759] RSP: 002b:00007f91a5086038 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 96.903227][ T5759] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 00007f91a50ec0da [ 96.911182][ T5759] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [pid 5765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5764] <... write resumed>) = 16777216 [ 96.919133][ T5759] RBP: 0000000000000000 R08: 00007f91a50860d0 R09: 0000000000000000 [ 96.927085][ T5759] R10: 0000000001a404ac R11: 0000000000000286 R12: 0000000020000100 [ 96.935057][ T5759] R13: 00007f91a50860d0 R14: 0000000000000000 R15: 0000000020000a80 [ 96.943026][ T5759] [pid 5767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5764] munmap(0x7f919cc00000, 138412032 [pid 5762] <... write resumed>) = 16777216 [pid 5762] munmap(0x7f919cc00000, 138412032 [pid 5764] <... munmap resumed>) = 0 [pid 5765] <... write resumed>) = 16777216 [pid 5764] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5762] <... munmap resumed>) = 0 [pid 5765] munmap(0x7f919cc00000, 138412032 [pid 5764] <... openat resumed>) = 4 [pid 5762] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5767] <... write resumed>) = 16777216 [pid 5767] munmap(0x7f919cc00000, 138412032 [pid 5764] ioctl(4, LOOP_SET_FD, 3 [pid 5762] <... openat resumed>) = 4 [pid 5759] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5765] <... munmap resumed>) = 0 [pid 5767] <... munmap resumed>) = 0 [pid 5764] <... ioctl resumed>) = 0 [pid 5762] ioctl(4, LOOP_SET_FD, 3 [pid 5759] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5767] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5765] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5764] close(3 [pid 5762] <... ioctl resumed>) = 0 [pid 5759] <... futex resumed>) = 1 [pid 5750] <... futex resumed>) = 0 [pid 5767] <... openat resumed>) = 4 [pid 5764] <... close resumed>) = 0 [pid 5762] close(3 [pid 5759] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5750] exit_group(0 [pid 5764] close(4 [pid 5762] <... close resumed>) = 0 [pid 5759] <... futex resumed>) = ? [pid 5750] <... exit_group resumed>) = ? [pid 5767] ioctl(4, LOOP_SET_FD, 3 [pid 5764] <... close resumed>) = 0 [pid 5762] close(4 [pid 5759] +++ exited with 0 +++ [pid 5765] <... openat resumed>) = 4 [pid 5751] <... futex resumed>) = ? [pid 5762] <... close resumed>) = 0 [pid 5762] mkdir("./file2", 0777) = 0 [pid 5762] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5764] mkdir("./file2", 0777 [pid 5765] ioctl(4, LOOP_SET_FD, 3 [pid 5764] <... mkdir resumed>) = 0 [pid 5764] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5767] <... ioctl resumed>) = 0 [pid 5751] +++ exited with 0 +++ [pid 5750] +++ exited with 0 +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5750, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=39 /* 0.39 s */} --- [pid 5767] close(3) = 0 [pid 5767] close(4) = 0 [pid 5767] mkdir("./file2", 0777) = 0 [pid 5767] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5059] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... ioctl resumed>) = 0 [pid 5767] <... mount resumed>) = 0 [pid 5765] <... ioctl resumed>) = 0 [pid 5762] <... mount resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5059] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5767] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5762] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5059] <... openat resumed>) = 3 [pid 5767] <... openat resumed>) = 3 [pid 5762] <... openat resumed>) = 3 [pid 5059] newfstatat(3, "", [pid 5767] chdir("./file2" [pid 5762] chdir("./file2" [pid 5767] <... chdir resumed>) = 0 [pid 5059] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5767] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5762] <... chdir resumed>) = 0 [pid 5059] getdents64(3, [pid 5762] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5767] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5762] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5761] <... futex resumed>) = 0 [pid 5059] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5767] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] close(3 [pid 5764] <... mount resumed>) = 0 [ 97.127589][ T5764] loop4: detected capacity change from 0 to 32768 [ 97.137821][ T5762] loop2: detected capacity change from 0 to 32768 [ 97.146255][ T5767] loop5: detected capacity change from 0 to 32768 [ 97.155567][ T5765] loop0: detected capacity change from 0 to 32768 [pid 5762] rename("./file2", "./file1" [pid 5761] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] close(3 [pid 5767] <... futex resumed>) = 1 [pid 5766] <... futex resumed>) = 0 [pid 5765] <... close resumed>) = 0 [pid 5761] <... futex resumed>) = 0 [pid 5059] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5767] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5761] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5059] unlink("./39/binderfs") = 0 [pid 5059] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5764] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5766] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] close(4 [pid 5057] <... close resumed>) = 0 [pid 5764] chdir("./file2") = 0 [pid 5764] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5764] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5767] <... futex resumed>) = 0 [pid 5766] <... futex resumed>) = 1 [pid 5765] <... close resumed>) = 0 [pid 5764] <... futex resumed>) = 1 [pid 5760] <... futex resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5767] rename("./file2", "./file1" [pid 5766] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5765] mkdir("./file2", 0777 [pid 5764] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5760] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5768 attached [pid 5765] <... mkdir resumed>) = 0 [pid 5764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5762] <... rename resumed>) = -1 EIO (Input/output error) [pid 5760] <... futex resumed>) = 0 [pid 5768] set_robust_list(0x5555565206a0, 24 [pid 5765] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5762] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5760] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5768 [pid 5768] <... set_robust_list resumed>) = 0 [pid 5762] <... futex resumed>) = 1 [pid 5768] chdir("./41" [pid 5762] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5768] <... chdir resumed>) = 0 [pid 5768] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5768] setpgid(0, 0 [pid 5761] <... futex resumed>) = 0 [pid 5768] <... setpgid resumed>) = 0 [pid 5764] rename("./file2", "./file1" [pid 5768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5761] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5768] <... openat resumed>) = 3 [pid 5768] write(3, "1000", 4 [pid 5762] <... futex resumed>) = 0 [pid 5761] <... futex resumed>) = 1 [pid 5768] <... write resumed>) = 4 [pid 5762] mkdir(".", 0777 [pid 5768] close(3 [pid 5762] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5768] <... close resumed>) = 0 [pid 5762] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5768] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5768] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5768] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5768] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [ 97.197318][ T5762] ERROR: (device loop2): diWrite: ixpxd invalid [ 97.197318][ T5762] [ 97.206123][ T5762] ERROR: (device loop2): remounting filesystem as read-only [ 97.218491][ T5767] ERROR: (device loop5): diWrite: ixpxd invalid [ 97.218491][ T5767] [ 97.226980][ T5762] ERROR: (device loop2): txAbort: [ 97.226980][ T5762] [ 97.236576][ T5764] ERROR: (device loop4): diWrite: ixpxd invalid [ 97.236576][ T5764] [pid 5768] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5762] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5761] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5762] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5762] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5761] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5768] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5768] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5769]}, 88) = 5769 ./strace-static-x86_64: Process 5769 attached [pid 5768] rt_sigprocmask(SIG_SETMASK, [], [pid 5766] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5765] <... mount resumed>) = 0 [pid 5761] exit_group(0 [pid 5768] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5766] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5768] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] <... futex resumed>) = 0 [pid 5769] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5768] <... futex resumed>) = 0 [pid 5766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5764] <... rename resumed>) = -1 EIO (Input/output error) [pid 5762] <... futex resumed>) = ? [pid 5761] <... exit_group resumed>) = ? [pid 5769] <... rseq resumed>) = 0 [pid 5767] <... rename resumed>) = -1 EIO (Input/output error) [pid 5766] <... mmap resumed>) = 0x7f91a5066000 [pid 5764] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5762] +++ exited with 0 +++ [pid 5766] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5766] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5766] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5770]}, 88) = 5770 [pid 5766] rt_sigprocmask(SIG_SETMASK, [], [pid 5765] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5770 attached [pid 5768] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5765] <... openat resumed>) = 3 [pid 5761] +++ exited with 0 +++ [pid 5770] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5766] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5770] <... rseq resumed>) = 0 [pid 5766] <... futex resumed>) = 0 [pid 5765] chdir("./file2" [pid 5770] set_robust_list(0x7f91a50869a0, 24 [pid 5766] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5770] <... set_robust_list resumed>) = 0 [pid 5765] <... chdir resumed>) = 0 [pid 5770] rt_sigprocmask(SIG_SETMASK, [], [pid 5765] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5769] set_robust_list(0x7f91a50a79a0, 24 [pid 5765] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5764] <... futex resumed>) = 1 [pid 5760] <... futex resumed>) = 0 [pid 5770] mkdir(".", 0777 [pid 5769] <... set_robust_list resumed>) = 0 [pid 5765] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5760] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5761, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5770] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5769] rt_sigprocmask(SIG_SETMASK, [], [pid 5765] <... futex resumed>) = 1 [pid 5764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5763] <... futex resumed>) = 0 [pid 5760] <... futex resumed>) = 0 [pid 5770] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5769] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5767] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5764] mkdir(".", 0777 [pid 5763] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5760] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5770] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5769] memfd_create("syzkaller", 0 [pid 5765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5763] <... futex resumed>) = 0 [pid 5770] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5769] <... memfd_create resumed>) = 3 [pid 5767] <... futex resumed>) = 0 [pid 5765] rename("./file2", "./file1" [pid 5764] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5763] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5770] <... futex resumed>) = 1 [pid 5769] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5767] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5766] <... futex resumed>) = 0 [pid 5764] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5769] <... mmap resumed>) = 0x7f919cc00000 [pid 5058] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5766] exit_group(0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5767] <... futex resumed>) = ? [pid 5766] <... exit_group resumed>) = ? [pid 5764] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 97.248197][ T5767] ERROR: (device loop5): remounting filesystem as read-only [ 97.255866][ T5764] ERROR: (device loop4): remounting filesystem as read-only [ 97.263424][ T5764] ERROR: (device loop4): txAbort: [ 97.263424][ T5764] [ 97.271933][ T5767] ERROR: (device loop5): txAbort: [ 97.271933][ T5767] [ 97.288671][ T5765] ERROR: (device loop0): diWrite: ixpxd invalid [ 97.288671][ T5765] [pid 5058] unlink("./41/binderfs") = 0 [pid 5058] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5767] +++ exited with 0 +++ [pid 5764] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5770] +++ exited with 0 +++ [pid 5766] +++ exited with 0 +++ [pid 5764] <... futex resumed>) = 1 [pid 5760] <... futex resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5766, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5063] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5765] <... rename resumed>) = -1 EIO (Input/output error) [pid 5764] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5760] exit_group(0 [pid 5765] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] <... futex resumed>) = ? [pid 5760] <... exit_group resumed>) = ? [pid 5764] +++ exited with 0 +++ [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5760] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5760, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5765] <... futex resumed>) = 1 [pid 5763] <... futex resumed>) = 0 [pid 5063] unlink("./40/binderfs" [pid 5060] <... restart_syscall resumed>) = 0 [pid 5765] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5763] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... unlink resumed>) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5765] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5763] <... futex resumed>) = 0 [pid 5063] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5765] mkdir(".", 0777 [pid 5763] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5765] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5765] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./39/binderfs", [pid 5765] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5765] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] unlink("./39/binderfs" [pid 5765] <... futex resumed>) = 1 [pid 5763] <... futex resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5765] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5763] exit_group(0 [pid 5060] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5765] <... futex resumed>) = ? [pid 5763] <... exit_group resumed>) = ? [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5765] +++ exited with 0 +++ [pid 5763] +++ exited with 0 +++ [pid 5058] newfstatat(AT_FDCWD, "./41/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5763, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5060] <... umount2 resumed>) = 0 [pid 5058] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./39/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] openat(AT_FDCWD, "./41/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] umount2("./39/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] newfstatat(4, "", [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] getdents64(4, [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] <... openat resumed>) = 3 [pid 5058] getdents64(4, [pid 5056] newfstatat(3, "", [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] close(4 [pid 5056] getdents64(3, [pid 5058] <... close resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] rmdir("./41/file2" [pid 5056] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5056] unlink("./41/binderfs" [pid 5060] openat(AT_FDCWD, "./39/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] getdents64(3, [pid 5056] <... unlink resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] newfstatat(4, "", [pid 5058] close(3 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, [pid 5058] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] rmdir("./41" [pid 5060] close(4) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5060] rmdir("./39/file2" [pid 5063] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5058] mkdir("./42", 0777 [pid 5060] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] newfstatat(AT_FDCWD, "./40/file2", [pid 5060] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... close resumed>) = 0 [pid 5058] <... mkdir resumed>) = 0 [ 97.297755][ T5765] ERROR: (device loop0): remounting filesystem as read-only [ 97.307942][ T5765] ERROR: (device loop0): txAbort: [ 97.307942][ T5765] [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] rmdir("./39" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... rmdir resumed>) = 0 [pid 5058] <... openat resumed>) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "./40/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] mkdir("./40", 0777 [pid 5063] getdents64(4, [pid 5769] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] <... mkdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5063] close(4) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./40/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./40") = 0 [pid 5063] mkdir("./41", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5769] <... write resumed>) = 16777216 [pid 5769] munmap(0x7f919cc00000, 138412032) = 0 [pid 5769] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5769] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5769] close(3) = 0 [pid 5769] close(4) = 0 [pid 5769] mkdir("./file2", 0777) = 0 [pid 5769] mount("/dev/loop1", "./file2", "jfs", 0, "") = 0 [pid 5769] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5769] chdir("./file2") = 0 [pid 5769] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 97.496220][ T5769] loop1: detected capacity change from 0 to 32768 [pid 5769] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... ioctl resumed>) = 0 [pid 5769] <... futex resumed>) = 1 [pid 5768] <... futex resumed>) = 0 [pid 5060] close(3 [pid 5769] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5768] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... close resumed>) = 0 [pid 5768] <... futex resumed>) = 0 [pid 5769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5768] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5769] rename("./file2", "./file1"./strace-static-x86_64: Process 5771 attached [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5771 [pid 5058] <... ioctl resumed>) = 0 [pid 5771] set_robust_list(0x5555565206a0, 24) = 0 [pid 5771] chdir("./40") = 0 [pid 5771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5771] setpgid(0, 0) = 0 [pid 5771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5058] close(3 [pid 5771] <... openat resumed>) = 3 [pid 5771] write(3, "1000", 4) = 4 [pid 5771] close(3) = 0 [pid 5771] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5771] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5771] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5771] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5058] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5772 [pid 5771] <... clone3 resumed> => {parent_tid=[5773]}, 88) = 5773 [pid 5771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5771] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5773 attached [pid 5773] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053./strace-static-x86_64: Process 5772 attached ) = 0 [pid 5769] <... rename resumed>) = -1 EIO (Input/output error) [pid 5768] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5056] <... umount2 resumed>) = 0 [pid 5768] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5772] set_robust_list(0x5555565206a0, 24 [pid 5768] <... futex resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] newfstatat(AT_FDCWD, "./41/file2", [pid 5772] <... set_robust_list resumed>) = 0 [pid 5768] <... mmap resumed>) = 0x7f91a5066000 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5772] chdir("./42" [pid 5056] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5772] <... chdir resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./41/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5772] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5056] <... openat resumed>) = 4 [pid 5772] <... prctl resumed>) = 0 [pid 5772] setpgid(0, 0) = 0 [pid 5056] newfstatat(4, "", [pid 5772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5769] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5768] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5769] <... futex resumed>) = 0 [pid 5056] getdents64(4, [pid 5769] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5773] set_robust_list(0x7f91a50a79a0, 24 [pid 5772] write(3, "1000", 4 [pid 5768] <... mprotect resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5773] <... set_robust_list resumed>) = 0 [pid 5772] <... write resumed>) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 5772] close(3 [pid 5063] close(3 [pid 5773] rt_sigprocmask(SIG_SETMASK, [], [pid 5772] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5056] getdents64(4, [pid 5768] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5773] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5772] symlink("/dev/binderfs", "./binderfs" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5774 attached [pid 5772] <... symlink resumed>) = 0 [pid 5768] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5774] set_robust_list(0x5555565206a0, 24 [pid 5773] memfd_create("syzkaller", 0 [pid 5768] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5774 [pid 5774] <... set_robust_list resumed>) = 0 [pid 5773] <... memfd_create resumed>) = 3 [pid 5772] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5775 attached [pid 5774] chdir("./41" [pid 5773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5056] close(4 [pid 5775] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5774] <... chdir resumed>) = 0 [pid 5772] <... futex resumed>) = 0 [pid 5768] <... clone3 resumed> => {parent_tid=[5775]}, 88) = 5775 [pid 5775] <... rseq resumed>) = 0 [pid 5774] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5773] <... mmap resumed>) = 0x7f919cc00000 [pid 5772] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5768] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] <... close resumed>) = 0 [pid 5775] set_robust_list(0x7f91a50869a0, 24 [pid 5774] <... prctl resumed>) = 0 [pid 5772] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5768] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] rmdir("./41/file2" [pid 5775] <... set_robust_list resumed>) = 0 [pid 5774] setpgid(0, 0 [pid 5772] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5774] <... setpgid resumed>) = 0 [pid 5772] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5775] rt_sigprocmask(SIG_SETMASK, [], [pid 5774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5768] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... rmdir resumed>) = 0 [pid 5775] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5774] <... openat resumed>) = 3 [pid 5772] <... mmap resumed>) = 0x7f91a5087000 [pid 5775] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5775] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5772] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5774] write(3, "1000", 4 [pid 5772] <... mprotect resumed>) = 0 [pid 5056] getdents64(3, [pid 5775] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5774] <... write resumed>) = 4 [pid 5772] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5768] <... futex resumed>) = 0 [pid 5775] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5774] close(3 [pid 5768] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5775] <... futex resumed>) = 0 [pid 5774] <... close resumed>) = 0 [pid 5768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5056] close(3 [pid 5775] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5774] symlink("/dev/binderfs", "./binderfs" [pid 5772] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5768] exit_group(0 [pid 5774] <... symlink resumed>) = 0 [pid 5772] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5056] <... close resumed>) = 0 [pid 5775] <... futex resumed>) = ? [pid 5769] <... futex resumed>) = ? [pid 5768] <... exit_group resumed>) = ? [pid 5056] rmdir("./41"./strace-static-x86_64: Process 5776 attached [pid 5775] +++ exited with 0 +++ [pid 5774] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5769] +++ exited with 0 +++ [pid 5776] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5774] <... futex resumed>) = 0 [pid 5776] <... rseq resumed>) = 0 [pid 5774] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5776] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5774] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5774] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5776] rt_sigprocmask(SIG_SETMASK, [], [pid 5774] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5776] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5776] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] <... clone3 resumed> => {parent_tid=[5776]}, 88) = 5776 [pid 5772] rt_sigprocmask(SIG_SETMASK, [], [pid 5774] <... mmap resumed>) = 0x7f91a5087000 [pid 5768] +++ exited with 0 +++ [pid 5774] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5768, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=15 /* 0.15 s */} --- [pid 5056] mkdir("./42", 0777 [pid 5774] <... mprotect resumed>) = 0 [ 97.576498][ T5769] ERROR: (device loop1): diWrite: ixpxd invalid [ 97.576498][ T5769] [ 97.592926][ T5769] ERROR: (device loop1): remounting filesystem as read-only [ 97.600649][ T5769] ERROR: (device loop1): txAbort: [ 97.600649][ T5769] [pid 5774] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5772] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... mkdir resumed>) = 0 [pid 5772] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5776] <... futex resumed>) = 0 [pid 5774] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5772] <... futex resumed>) = 1 [pid 5772] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... openat resumed>) = 3 [pid 5057] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5776] memfd_create("syzkaller", 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5777 attached [pid 5057] getdents64(3, [pid 5777] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5777] <... rseq resumed>) = 0 [pid 5057] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5777] set_robust_list(0x7f91a50a79a0, 24 [pid 5776] <... memfd_create resumed>) = 3 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5777] <... set_robust_list resumed>) = 0 [pid 5774] <... clone3 resumed> => {parent_tid=[5777]}, 88) = 5777 [pid 5776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5057] newfstatat(AT_FDCWD, "./41/binderfs", [pid 5777] rt_sigprocmask(SIG_SETMASK, [], [pid 5776] <... mmap resumed>) = 0x7f919cc00000 [pid 5774] rt_sigprocmask(SIG_SETMASK, [], [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5777] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5774] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5057] unlink("./41/binderfs" [pid 5777] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] <... unlink resumed>) = 0 [pid 5057] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5057] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./41/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./41/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./41/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./41") = 0 [pid 5057] mkdir("./42", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5774] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5774] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5777] <... futex resumed>) = 0 [pid 5777] memfd_create("syzkaller", 0) = 3 [pid 5777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5776] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] <... ioctl resumed>) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [pid 5056] close(3 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5778 attached , child_tidptr=0x555556520690) = 5778 [pid 5778] set_robust_list(0x5555565206a0, 24) = 0 [pid 5778] chdir("./42") = 0 [pid 5778] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5778] setpgid(0, 0) = 0 [pid 5778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] <... close resumed>) = 0 [pid 5778] write(3, "1000", 4) = 4 [pid 5778] close(3) = 0 [pid 5778] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5778] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5778] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5778] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5778] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5779 [pid 5778] <... mprotect resumed>) = 0 [pid 5778] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5779 attached [pid 5779] set_robust_list(0x5555565206a0, 24 [pid 5778] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5779] <... set_robust_list resumed>) = 0 [pid 5778] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5779] chdir("./42") = 0 [pid 5778] <... clone3 resumed> => {parent_tid=[5780]}, 88) = 5780 [pid 5779] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5780 attached [pid 5778] rt_sigprocmask(SIG_SETMASK, [], [pid 5780] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5780] <... rseq resumed>) = 0 [pid 5778] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5780] set_robust_list(0x7f91a50a79a0, 24 [pid 5778] <... futex resumed>) = 0 [pid 5780] <... set_robust_list resumed>) = 0 [pid 5778] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5780] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5780] memfd_create("syzkaller", 0 [pid 5779] <... prctl resumed>) = 0 [pid 5780] <... memfd_create resumed>) = 3 [pid 5779] setpgid(0, 0 [pid 5780] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5779] <... setpgid resumed>) = 0 [pid 5780] <... mmap resumed>) = 0x7f919cc00000 [pid 5779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5779] write(3, "1000", 4) = 4 [pid 5779] close(3) = 0 [pid 5779] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5779] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5779] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5779] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5779] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5779] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5779] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5781 attached [pid 5781] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5779] <... clone3 resumed> => {parent_tid=[5781]}, 88) = 5781 [pid 5781] <... rseq resumed>) = 0 [pid 5779] rt_sigprocmask(SIG_SETMASK, [], [pid 5781] set_robust_list(0x7f91a50a79a0, 24 [pid 5779] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5781] <... set_robust_list resumed>) = 0 [pid 5779] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5781] rt_sigprocmask(SIG_SETMASK, [], [pid 5779] <... futex resumed>) = 0 [pid 5781] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5779] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5781] memfd_create("syzkaller", 0) = 3 [pid 5781] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5773] <... write resumed>) = 16777216 [pid 5776] <... write resumed>) = 16777216 [pid 5773] munmap(0x7f919cc00000, 138412032 [pid 5777] <... write resumed>) = 16777216 [pid 5773] <... munmap resumed>) = 0 [pid 5776] munmap(0x7f919cc00000, 138412032) = 0 [pid 5773] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5773] ioctl(4, LOOP_SET_FD, 3 [pid 5777] munmap(0x7f919cc00000, 138412032) = 0 [pid 5780] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5777] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5776] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5773] <... ioctl resumed>) = 0 [pid 5777] <... openat resumed>) = 4 [pid 5777] ioctl(4, LOOP_SET_FD, 3 [pid 5776] <... openat resumed>) = 4 [pid 5776] ioctl(4, LOOP_SET_FD, 3 [pid 5773] close(3 [pid 5777] <... ioctl resumed>) = 0 [pid 5776] <... ioctl resumed>) = 0 [pid 5773] <... close resumed>) = 0 [pid 5781] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5777] close(3 [pid 5776] close(3 [pid 5777] <... close resumed>) = 0 [pid 5776] <... close resumed>) = 0 [pid 5773] close(4 [pid 5777] close(4 [pid 5776] close(4) = 0 [pid 5773] <... close resumed>) = 0 [pid 5773] mkdir("./file2", 0777 [pid 5777] <... close resumed>) = 0 [pid 5776] mkdir("./file2", 0777 [pid 5777] mkdir("./file2", 0777 [pid 5776] <... mkdir resumed>) = 0 [pid 5773] <... mkdir resumed>) = 0 [pid 5773] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5777] <... mkdir resumed>) = 0 [pid 5776] mount("/dev/loop2", "./file2", "jfs", 0, "" [ 98.132678][ T5773] loop4: detected capacity change from 0 to 32768 [ 98.153782][ T5777] loop5: detected capacity change from 0 to 32768 [ 98.161630][ T5776] loop2: detected capacity change from 0 to 32768 [pid 5777] mount("/dev/loop5", "./file2", "jfs", 0, "") = 0 [pid 5776] <... mount resumed>) = 0 [pid 5777] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5776] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5777] <... openat resumed>) = 3 [pid 5776] chdir("./file2" [pid 5777] chdir("./file2" [pid 5776] <... chdir resumed>) = 0 [pid 5777] <... chdir resumed>) = 0 [pid 5776] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5777] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5776] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5777] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5776] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5777] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5776] <... futex resumed>) = 1 [pid 5772] <... futex resumed>) = 0 [pid 5777] <... futex resumed>) = 1 [pid 5776] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5777] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5776] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5772] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5774] <... futex resumed>) = 0 [pid 5772] <... futex resumed>) = 0 [pid 5774] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5777] <... futex resumed>) = 0 [pid 5776] rename("./file2", "./file1" [pid 5774] <... futex resumed>) = 1 [pid 5777] rename("./file2", "./file1" [pid 5774] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5773] <... mount resumed>) = 0 [pid 5773] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5773] chdir("./file2") = 0 [pid 5773] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5773] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5771] <... futex resumed>) = 0 [pid 5773] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5771] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5771] <... futex resumed>) = 0 [pid 5773] rename("./file2", "./file1" [pid 5771] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5774] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5774] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [ 98.237635][ T5776] ERROR: (device loop2): diWrite: ixpxd invalid [ 98.237635][ T5776] [ 98.248024][ T5777] ERROR: (device loop5): diWrite: ixpxd invalid [ 98.248024][ T5777] [ 98.263713][ T5773] ERROR: (device loop4): diWrite: ixpxd invalid [ 98.263713][ T5773] [ 98.277917][ T5773] ERROR: (device loop4): remounting filesystem as read-only [pid 5774] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5774] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5774] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5782]}, 88) = 5782 [pid 5774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5774] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5774] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5782 attached [pid 5782] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5772] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5782] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5782] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5772] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5782] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5772] <... futex resumed>) = 0 [pid 5782] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5772] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5771] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5771] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5772] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5771] <... mmap resumed>) = 0x7f91a5066000 [pid 5771] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5771] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5783]}, 88) = 5783 [pid 5771] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5771] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5783 attached [pid 5783] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [ 98.279581][ T5776] ERROR: (device loop2): remounting filesystem as read-only [ 98.296580][ T5777] ERROR: (device loop5): remounting filesystem as read-only [ 98.311501][ T5773] ERROR: (device loop4): txAbort: [ 98.311501][ T5773] [ 98.312378][ T5777] ERROR: (device loop5): txAbort: [ 98.312378][ T5777] [ 98.331184][ T5776] ERROR: (device loop2): txAbort: [pid 5783] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5783] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5783] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5783] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5783] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5771] <... futex resumed>) = 0 [pid 5776] <... rename resumed>) = -1 EIO (Input/output error) [pid 5772] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5776] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5783] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5784 attached [pid 5776] <... futex resumed>) = 0 [pid 5784] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5776] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] <... clone3 resumed> => {parent_tid=[5784]}, 88) = 5784 [pid 5784] <... rseq resumed>) = 0 [pid 5772] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5784] set_robust_list(0x7f91a50869a0, 24 [pid 5782] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5777] <... rename resumed>) = -1 EIO (Input/output error) [pid 5782] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5774] <... futex resumed>) = 0 [pid 5782] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5784] <... set_robust_list resumed>) = 0 [pid 5777] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] rt_sigprocmask(SIG_SETMASK, [], [pid 5777] <... futex resumed>) = 0 [pid 5772] <... futex resumed>) = 0 [pid 5784] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5777] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5784] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5774] exit_group(0 [pid 5782] <... futex resumed>) = ? [pid 5774] <... exit_group resumed>) = ? [pid 5782] +++ exited with 0 +++ [pid 5777] <... futex resumed>) = ? [pid 5777] +++ exited with 0 +++ [pid 5774] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5774, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=15 /* 0.15 s */} --- [pid 5063] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./41/binderfs" [pid 5784] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5784] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5784] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5772] <... futex resumed>) = 0 [pid 5784] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] exit_group(0 [pid 5063] <... umount2 resumed>) = 0 [pid 5784] <... futex resumed>) = ? [pid 5776] <... futex resumed>) = ? [pid 5772] <... exit_group resumed>) = ? [pid 5776] +++ exited with 0 +++ [pid 5063] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5784] +++ exited with 0 +++ [pid 5773] <... rename resumed>) = -1 EIO (Input/output error) [pid 5772] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5772, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./41/file2", [pid 5058] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./41/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... openat resumed>) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5773] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] exit_group(0 [pid 5783] <... futex resumed>) = ? [pid 5771] <... exit_group resumed>) = ? [pid 5783] +++ exited with 0 +++ [pid 5773] <... futex resumed>) = ? [pid 5063] newfstatat(4, "", [pid 5780] <... write resumed>) = 16777216 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5780] munmap(0x7f919cc00000, 138412032 [pid 5773] +++ exited with 0 +++ [pid 5771] +++ exited with 0 +++ [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5771, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] rmdir("./41/file2" [pid 5060] <... openat resumed>) = 3 [pid 5058] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] newfstatat(AT_FDCWD, "./42/binderfs", [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] getdents64(3, [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] close(3 [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] unlink("./42/binderfs" [pid 5063] <... close resumed>) = 0 [pid 5060] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... unlink resumed>) = 0 [pid 5063] rmdir("./41" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 98.331184][ T5776] [ 98.342334][ T5773] ERROR: (device loop4): remounting filesystem as read-only [pid 5058] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./40/binderfs", [pid 5780] <... munmap resumed>) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5060] unlink("./40/binderfs" [pid 5058] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./42", 0777 [pid 5060] <... unlink resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5060] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] newfstatat(AT_FDCWD, "./42/file2", [pid 5060] <... umount2 resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5780] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5058] openat(AT_FDCWD, "./42/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", [pid 5780] <... openat resumed>) = 4 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5780] ioctl(4, LOOP_SET_FD, 3 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5058] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5058] close(4) = 0 [pid 5058] rmdir("./42/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./40/file2", [pid 5058] rmdir("./42" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5058] mkdir("./43", 0777 [pid 5060] umount2("./40/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... mkdir resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] openat(AT_FDCWD, "./40/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... openat resumed>) = 3 [pid 5060] <... openat resumed>) = 4 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5060] newfstatat(4, "", [pid 5781] <... write resumed>) = 16777216 [pid 5780] <... ioctl resumed>) = 0 [pid 5781] munmap(0x7f919cc00000, 138412032 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5780] close(3) = 0 [pid 5781] <... munmap resumed>) = 0 [pid 5780] close(4 [pid 5060] getdents64(4, [pid 5780] <... close resumed>) = 0 [pid 5780] mkdir("./file2", 0777) = 0 [pid 5780] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5781] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5781] <... openat resumed>) = 4 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5781] ioctl(4, LOOP_SET_FD, 3 [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./40/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./40") = 0 [pid 5060] mkdir("./41", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5781] <... ioctl resumed>) = 0 [pid 5781] close(3) = 0 [pid 5781] close(4) = 0 [pid 5781] mkdir("./file2", 0777) = 0 [ 98.409521][ T5780] loop1: detected capacity change from 0 to 32768 [ 98.449167][ T5781] loop0: detected capacity change from 0 to 32768 [pid 5781] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5780] <... mount resumed>) = 0 [pid 5780] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5780] chdir("./file2") = 0 [pid 5780] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5780] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5778] <... futex resumed>) = 0 [pid 5778] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5778] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5780] rename("./file2", "./file1" [pid 5781] <... mount resumed>) = 0 [pid 5781] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5781] chdir("./file2") = 0 [pid 5781] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5781] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5779] <... futex resumed>) = 0 [pid 5781] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5779] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5781] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5779] <... futex resumed>) = 0 [pid 5781] rename("./file2", "./file1" [ 98.495095][ T5780] ERROR: (device loop1): diWrite: ixpxd invalid [ 98.495095][ T5780] [ 98.508651][ T5781] ERROR: (device loop0): diWrite: ixpxd invalid [ 98.508651][ T5781] [pid 5779] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5778] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5778] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5779] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5778] <... futex resumed>) = 0 [pid 5779] <... futex resumed>) = 0 [pid 5778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5778] <... mmap resumed>) = 0x7f91a5066000 [pid 5779] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5778] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5779] <... mprotect resumed>) = 0 [pid 5778] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5779] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5778] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5779] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5778] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5785 attached [pid 5779] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5786 attached [pid 5785] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5778] <... clone3 resumed> => {parent_tid=[5785]}, 88) = 5785 [pid 5786] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5786] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5786] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5786] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5785] <... rseq resumed>) = 0 [pid 5779] <... clone3 resumed> => {parent_tid=[5786]}, 88) = 5786 [pid 5778] rt_sigprocmask(SIG_SETMASK, [], [pid 5785] set_robust_list(0x7f91a50869a0, 24 [pid 5779] rt_sigprocmask(SIG_SETMASK, [], [pid 5778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5785] <... set_robust_list resumed>) = 0 [pid 5779] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5785] rt_sigprocmask(SIG_SETMASK, [], [pid 5778] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5779] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5778] <... futex resumed>) = 0 [pid 5785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5779] <... futex resumed>) = 1 [pid 5778] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5785] mkdir(".", 0777 [pid 5779] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5785] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5786] <... futex resumed>) = 0 [pid 5785] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5786] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5786] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5785] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5786] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5785] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5786] <... futex resumed>) = 1 [pid 5785] <... futex resumed>) = 1 [pid 5779] <... futex resumed>) = 0 [pid 5778] <... futex resumed>) = 0 [ 98.543592][ T5780] ERROR: (device loop1): remounting filesystem as read-only [ 98.551471][ T5781] ERROR: (device loop0): remounting filesystem as read-only [ 98.571652][ T5781] ERROR: (device loop0): txAbort: [ 98.571652][ T5781] [ 98.579418][ T5780] ERROR: (device loop1): txAbort: [ 98.579418][ T5780] [pid 5786] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5785] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5780] <... rename resumed>) = -1 EIO (Input/output error) [pid 5781] <... rename resumed>) = -1 EIO (Input/output error) [pid 5781] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5780] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5781] <... futex resumed>) = 0 [pid 5780] <... futex resumed>) = 0 [pid 5781] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5780] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5779] exit_group(0 [pid 5778] exit_group(0 [pid 5786] <... futex resumed>) = ? [pid 5785] <... futex resumed>) = ? [pid 5781] <... futex resumed>) = ? [pid 5780] <... futex resumed>) = ? [pid 5779] <... exit_group resumed>) = ? [pid 5778] <... exit_group resumed>) = ? [pid 5786] +++ exited with 0 +++ [pid 5785] +++ exited with 0 +++ [pid 5781] +++ exited with 0 +++ [pid 5780] +++ exited with 0 +++ [pid 5779] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5779, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [pid 5056] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5056] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, [pid 5778] +++ exited with 0 +++ [pid 5056] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5778, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] restart_syscall(<... resuming interrupted clone ...> [pid 5056] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] <... restart_syscall resumed>) = 0 [pid 5056] unlink("./42/binderfs") = 0 [pid 5056] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./42/binderfs") = 0 [pid 5057] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5057] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./42/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./42/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 98.595756][ T5780] ERROR: (device loop1): remounting filesystem as read-only [ 98.603633][ T5781] ERROR: (device loop0): remounting filesystem as read-only [pid 5057] newfstatat(4, "", [pid 5056] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] getdents64(4, [pid 5056] newfstatat(AT_FDCWD, "./42/file2", [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] getdents64(4, [pid 5056] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] close(4 [pid 5056] openat(AT_FDCWD, "./42/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] <... close resumed>) = 0 [pid 5056] <... openat resumed>) = 4 [pid 5057] rmdir("./42/file2" [pid 5056] newfstatat(4, "", [pid 5057] <... rmdir resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, [pid 5056] getdents64(4, [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] close(3 [pid 5056] getdents64(4, [pid 5057] <... close resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] rmdir("./42" [pid 5056] close(4 [pid 5057] <... rmdir resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5057] mkdir("./43", 0777 [pid 5056] rmdir("./42/file2" [pid 5057] <... mkdir resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5056] getdents64(3, [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] <... openat resumed>) = 3 [pid 5056] close(3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./42") = 0 [pid 5056] mkdir("./43", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5058] close(3 [pid 5063] <... close resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5788 ./strace-static-x86_64: Process 5788 attached ./strace-static-x86_64: Process 5787 attached [pid 5060] <... ioctl resumed>) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5787 [pid 5788] set_robust_list(0x5555565206a0, 24 [pid 5787] set_robust_list(0x5555565206a0, 24 [pid 5060] close(3) = 0 [pid 5788] <... set_robust_list resumed>) = 0 [pid 5787] <... set_robust_list resumed>) = 0 [pid 5787] chdir("./43" [pid 5788] chdir("./42" [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5788] <... chdir resumed>) = 0 [pid 5787] <... chdir resumed>) = 0 [pid 5788] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5787] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5788] <... prctl resumed>) = 0 [pid 5787] <... prctl resumed>) = 0 [pid 5788] setpgid(0, 0 [pid 5787] setpgid(0, 0 [pid 5788] <... setpgid resumed>) = 0 [pid 5787] <... setpgid resumed>) = 0 [pid 5788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5788] <... openat resumed>) = 3 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5789 [pid 5787] write(3, "1000", 4 [pid 5788] write(3, "1000", 4 [pid 5787] <... write resumed>) = 4 [pid 5788] <... write resumed>) = 4 [pid 5787] close(3 [pid 5788] close(3 [pid 5787] <... close resumed>) = 0 [pid 5788] <... close resumed>) = 0 [pid 5787] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5789 attached [pid 5788] symlink("/dev/binderfs", "./binderfs" [pid 5787] <... symlink resumed>) = 0 [pid 5788] <... symlink resumed>) = 0 [pid 5787] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5788] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5787] <... futex resumed>) = 0 [pid 5787] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5787] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5788] <... futex resumed>) = 0 [pid 5787] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5788] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5787] <... mprotect resumed>) = 0 [pid 5788] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5787] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5788] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5789] set_robust_list(0x5555565206a0, 24 [pid 5788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5787] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5788] <... mmap resumed>) = 0x7f91a5087000 [pid 5788] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5788] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5787] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5790]}, 88) = 5790 [pid 5787] rt_sigprocmask(SIG_SETMASK, [], [pid 5788] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5787] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5787] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5789] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5790 attached [pid 5789] chdir("./41" [pid 5790] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5788] <... clone3 resumed> => {parent_tid=[5791]}, 88) = 5791 [pid 5790] <... rseq resumed>) = 0 [pid 5788] rt_sigprocmask(SIG_SETMASK, [], [pid 5790] set_robust_list(0x7f91a50a79a0, 24 [pid 5788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5790] <... set_robust_list resumed>) = 0 [pid 5788] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] rt_sigprocmask(SIG_SETMASK, [], [pid 5788] <... futex resumed>) = 0 [pid 5790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5788] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5790] memfd_create("syzkaller", 0) = 3 [pid 5789] <... chdir resumed>) = 0 [pid 5790] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 ./strace-static-x86_64: Process 5791 attached [pid 5789] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5791] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5791] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5789] <... prctl resumed>) = 0 [pid 5791] rt_sigprocmask(SIG_SETMASK, [], [pid 5789] setpgid(0, 0 [pid 5791] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5789] <... setpgid resumed>) = 0 [pid 5791] memfd_create("syzkaller", 0 [pid 5789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5791] <... memfd_create resumed>) = 3 [pid 5791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5789] <... openat resumed>) = 3 [pid 5789] write(3, "1000", 4) = 4 [pid 5789] close(3) = 0 [pid 5789] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5789] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5789] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5789] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5789] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5789] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5789] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5792 attached => {parent_tid=[5792]}, 88) = 5792 [pid 5792] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5789] rt_sigprocmask(SIG_SETMASK, [], [pid 5792] <... rseq resumed>) = 0 [pid 5789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5792] set_robust_list(0x7f91a50a79a0, 24 [pid 5789] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] <... set_robust_list resumed>) = 0 [pid 5789] <... futex resumed>) = 0 [pid 5792] rt_sigprocmask(SIG_SETMASK, [], [pid 5789] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5792] memfd_create("syzkaller", 0) = 3 [pid 5792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5793 ./strace-static-x86_64: Process 5793 attached [pid 5793] set_robust_list(0x5555565206a0, 24) = 0 [pid 5793] chdir("./43") = 0 [pid 5793] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5793] setpgid(0, 0) = 0 [pid 5793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5793] write(3, "1000", 4) = 4 [pid 5793] close(3) = 0 [pid 5793] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5793] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5793] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5793] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5793] <... mmap resumed>) = 0x7f91a5087000 [pid 5793] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5793] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5793] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5794]}, 88) = 5794 ./strace-static-x86_64: Process 5794 attached [pid 5793] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] close(3 [pid 5793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... close resumed>) = 0 [pid 5793] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5793] <... futex resumed>) = 0 [pid 5793] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5794] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5794] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5794] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5795 [pid 5794] memfd_create("syzkaller", 0) = 3 [pid 5794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 ./strace-static-x86_64: Process 5795 attached [pid 5795] set_robust_list(0x5555565206a0, 24 [pid 5791] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5795] <... set_robust_list resumed>) = 0 [pid 5795] chdir("./43") = 0 [pid 5792] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5790] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5795] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5795] setpgid(0, 0) = 0 [pid 5795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5795] write(3, "1000", 4) = 4 [pid 5795] close(3) = 0 [pid 5795] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5795] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5795] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5795] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5795] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5795] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5795] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5796]}, 88) = 5796 [pid 5795] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5795] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5795] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5796 attached [pid 5796] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5796] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5796] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5796] memfd_create("syzkaller", 0) = 3 [pid 5796] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5792] <... write resumed>) = 16777216 [pid 5796] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5792] munmap(0x7f919cc00000, 138412032 [pid 5791] <... write resumed>) = 16777216 [pid 5792] <... munmap resumed>) = 0 [pid 5792] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5791] munmap(0x7f919cc00000, 138412032 [pid 5792] <... openat resumed>) = 4 [pid 5792] ioctl(4, LOOP_SET_FD, 3 [pid 5791] <... munmap resumed>) = 0 [pid 5791] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5790] <... write resumed>) = 16777216 [pid 5791] <... openat resumed>) = 4 [pid 5790] munmap(0x7f919cc00000, 138412032 [pid 5791] ioctl(4, LOOP_SET_FD, 3 [pid 5792] <... ioctl resumed>) = 0 [pid 5792] close(3) = 0 [pid 5792] close(4) = 0 [pid 5791] <... ioctl resumed>) = 0 [pid 5790] <... munmap resumed>) = 0 [pid 5792] mkdir("./file2", 0777 [pid 5791] close(3 [pid 5790] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5792] <... mkdir resumed>) = 0 [pid 5791] <... close resumed>) = 0 [pid 5790] <... openat resumed>) = 4 [pid 5792] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5791] close(4 [pid 5790] ioctl(4, LOOP_SET_FD, 3 [pid 5791] <... close resumed>) = 0 [ 99.300127][ T5792] loop4: detected capacity change from 0 to 32768 [ 99.313041][ T5791] loop5: detected capacity change from 0 to 32768 [pid 5791] mkdir("./file2", 0777) = 0 [pid 5791] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5790] <... ioctl resumed>) = 0 [pid 5790] close(3 [pid 5792] <... mount resumed>) = 0 [pid 5790] <... close resumed>) = 0 [pid 5792] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5790] close(4 [pid 5792] <... openat resumed>) = 3 [pid 5790] <... close resumed>) = 0 [pid 5792] chdir("./file2") = 0 [pid 5791] <... mount resumed>) = 0 [pid 5790] mkdir("./file2", 0777 [pid 5792] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5791] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5792] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5790] <... mkdir resumed>) = 0 [pid 5792] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] <... openat resumed>) = 3 [pid 5790] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5792] <... futex resumed>) = 1 [pid 5789] <... futex resumed>) = 0 [pid 5792] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5789] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5789] <... futex resumed>) = 0 [pid 5792] rename("./file2", "./file1" [pid 5789] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5791] chdir("./file2") = 0 [pid 5791] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5791] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5788] <... futex resumed>) = 0 [pid 5791] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 99.343594][ T5790] loop2: detected capacity change from 0 to 32768 [ 99.381872][ T5792] ERROR: (device loop4): diWrite: ixpxd invalid [ 99.381872][ T5792] [pid 5788] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5788] <... futex resumed>) = 0 [pid 5791] rename("./file2", "./file1" [pid 5788] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5789] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5789] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5789] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5789] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5789] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5797]}, 88) = 5797 [pid 5789] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5797 attached [pid 5790] <... mount resumed>) = 0 [pid 5789] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5790] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5789] <... futex resumed>) = 0 [pid 5797] <... rseq resumed>) = 0 [pid 5789] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5790] <... openat resumed>) = 3 [pid 5797] set_robust_list(0x7f91a50869a0, 24 [pid 5790] chdir("./file2" [pid 5797] <... set_robust_list resumed>) = 0 [pid 5790] <... chdir resumed>) = 0 [pid 5797] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5797] mkdir(".", 0777) = -1 EEXIST (File exists) [ 99.394456][ T5791] ERROR: (device loop5): diWrite: ixpxd invalid [ 99.394456][ T5791] [ 99.405614][ T5792] ERROR: (device loop4): remounting filesystem as read-only [ 99.420048][ T5791] ERROR: (device loop5): remounting filesystem as read-only [pid 5797] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5790] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5794] <... write resumed>) = 16777216 [pid 5791] <... rename resumed>) = -1 EIO (Input/output error) [pid 5790] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5788] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5790] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] munmap(0x7f919cc00000, 138412032 [pid 5791] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5788] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] <... futex resumed>) = 1 [pid 5787] <... futex resumed>) = 0 [pid 5791] <... futex resumed>) = 0 [pid 5790] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] <... futex resumed>) = 0 [pid 5787] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5787] <... futex resumed>) = 0 [pid 5791] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] <... mmap resumed>) = 0x7f91a5066000 [pid 5787] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5788] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5790] rename("./file2", "./file1" [pid 5797] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5796] <... write resumed>) = 16777216 [pid 5792] <... rename resumed>) = -1 EIO (Input/output error) [pid 5788] <... mprotect resumed>) = 0 [pid 5797] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] <... futex resumed>) = 0 [pid 5797] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5796] munmap(0x7f919cc00000, 138412032 [pid 5792] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5792] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5789] exit_group(0 [pid 5788] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5797] <... futex resumed>) = ? [pid 5792] <... futex resumed>) = ? [pid 5789] <... exit_group resumed>) = ? [pid 5788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5798 attached [pid 5797] +++ exited with 0 +++ [pid 5792] +++ exited with 0 +++ [pid 5789] +++ exited with 0 +++ [pid 5798] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5788] <... clone3 resumed> => {parent_tid=[5798]}, 88) = 5798 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5789, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=14 /* 0.14 s */} --- [pid 5788] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5788] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5788] <... futex resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5788] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5060] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./41/binderfs") = 0 [pid 5060] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5798] <... rseq resumed>) = 0 [pid 5798] set_robust_list(0x7f91a50869a0, 24 [pid 5796] <... munmap resumed>) = 0 [pid 5798] <... set_robust_list resumed>) = 0 [pid 5794] <... munmap resumed>) = 0 [pid 5790] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] <... umount2 resumed>) = 0 [pid 5798] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5796] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5794] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5790] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5798] mkdir(".", 0777 [pid 5796] <... openat resumed>) = 4 [pid 5794] <... openat resumed>) = 4 [pid 5790] <... futex resumed>) = 1 [pid 5787] <... futex resumed>) = 0 [pid 5798] <... mkdir resumed>) = -1 EEXIST (File exists) [ 99.440946][ T5791] ERROR: (device loop5): txAbort: [ 99.440946][ T5791] [ 99.448055][ T5792] ERROR: (device loop4): txAbort: [ 99.448055][ T5792] [ 99.458704][ T5790] ERROR: (device loop2): diWrite: ixpxd invalid [ 99.458704][ T5790] [ 99.469174][ T5790] ERROR: (device loop2): remounting filesystem as read-only [ 99.480013][ T5790] ERROR: (device loop2): txAbort: [ 99.480013][ T5790] [pid 5794] ioctl(4, LOOP_SET_FD, 3 [pid 5787] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5798] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5796] ioctl(4, LOOP_SET_FD, 3 [pid 5790] mkdir(".", 0777 [pid 5787] <... futex resumed>) = 0 [pid 5787] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5798] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5794] <... ioctl resumed>) = 0 [pid 5790] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5060] newfstatat(AT_FDCWD, "./41/file2", [pid 5798] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] close(3) = 0 [pid 5790] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5798] <... futex resumed>) = 1 [pid 5794] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5798] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5788] <... futex resumed>) = 0 [pid 5794] <... close resumed>) = 0 [pid 5788] exit_group(0 [pid 5060] umount2("./41/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5798] <... futex resumed>) = ? [pid 5794] mkdir("./file2", 0777 [pid 5791] <... futex resumed>) = ? [pid 5788] <... exit_group resumed>) = ? [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5798] +++ exited with 0 +++ [pid 5796] <... ioctl resumed>) = 0 [pid 5794] <... mkdir resumed>) = 0 [pid 5791] +++ exited with 0 +++ [pid 5790] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5788] +++ exited with 0 +++ [pid 5796] close(3 [pid 5794] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5790] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] openat(AT_FDCWD, "./41/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5796] <... close resumed>) = 0 [pid 5790] <... futex resumed>) = 1 [pid 5787] <... futex resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5788, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=16 /* 0.16 s */} --- [pid 5060] <... openat resumed>) = 4 [pid 5796] close(4 [pid 5794] <... mount resumed>) = 0 [pid 5790] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5787] exit_group(0 [pid 5060] newfstatat(4, "", [pid 5796] <... close resumed>) = 0 [pid 5794] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5790] <... futex resumed>) = ? [pid 5787] <... exit_group resumed>) = ? [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5794] <... openat resumed>) = 3 [pid 5063] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 5794] chdir("./file2" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5794] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(4, [pid 5794] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5794] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] newfstatat(3, "", [pid 5060] close(4 [pid 5796] mkdir("./file2", 0777 [pid 5794] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] +++ exited with 0 +++ [pid 5787] +++ exited with 0 +++ [pid 5794] <... futex resumed>) = 1 [pid 5793] <... futex resumed>) = 0 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5787, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5794] rename("./file2", "./file1" [pid 5793] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5796] <... mkdir resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 5058] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5793] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... close resumed>) = 0 [pid 5060] rmdir("./41/file2" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./41") = 0 [pid 5060] mkdir("./42", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] <... openat resumed>) = 3 [pid 5063] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./42/binderfs") = 0 [ 99.502813][ T5794] loop1: detected capacity change from 0 to 32768 [ 99.504226][ T5796] loop0: detected capacity change from 0 to 32768 [ 99.542414][ T5794] ERROR: (device loop1): diWrite: ixpxd invalid [ 99.542414][ T5794] [pid 5063] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5796] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5058] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./42/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./42/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5796] <... mount resumed>) = 0 [pid 5794] <... rename resumed>) = -1 EIO (Input/output error) [pid 5063] <... close resumed>) = 0 [pid 5058] newfstatat(3, "", [pid 5796] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5063] rmdir("./42/file2" [pid 5796] <... openat resumed>) = 3 [pid 5794] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... rmdir resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5794] <... futex resumed>) = 1 [pid 5793] <... futex resumed>) = 0 [pid 5063] getdents64(3, [pid 5796] chdir("./file2" [pid 5794] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5793] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] getdents64(3, [pid 5796] <... chdir resumed>) = 0 [pid 5794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] <... futex resumed>) = 0 [pid 5063] close(3 [pid 5796] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5794] mkdir(".", 0777 [pid 5793] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... close resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5796] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5794] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5063] rmdir("./42" [pid 5794] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5063] <... rmdir resumed>) = 0 [pid 5058] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5796] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] mkdir("./43", 0777 [pid 5796] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5796] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5795] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5058] newfstatat(AT_FDCWD, "./43/binderfs", [pid 5796] <... futex resumed>) = 0 [pid 5795] <... futex resumed>) = 1 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5796] rename("./file2", "./file1" [pid 5795] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5794] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5794] <... futex resumed>) = 1 [pid 5058] unlink("./43/binderfs" [pid 5794] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] <... unlink resumed>) = 0 [pid 5058] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5793] <... futex resumed>) = 0 [pid 5793] exit_group(0) = ? [pid 5794] <... futex resumed>) = ? [pid 5794] +++ exited with 0 +++ [pid 5793] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5793, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} --- [pid 5057] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./43/binderfs") = 0 [ 99.561656][ T5794] ERROR: (device loop1): remounting filesystem as read-only [ 99.571540][ T5794] ERROR: (device loop1): txAbort: [ 99.571540][ T5794] [ 99.586717][ T5796] ERROR: (device loop0): diWrite: ixpxd invalid [ 99.586717][ T5796] [ 99.597476][ T5796] ERROR: (device loop0): remounting filesystem as read-only [pid 5057] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... umount2 resumed>) = 0 [pid 5795] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5795] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5795] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5795] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5795] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5799]}, 88) = 5799 [pid 5795] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5795] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5795] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5799 attached [pid 5058] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5796] <... rename resumed>) = -1 EIO (Input/output error) [pid 5799] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... umount2 resumed>) = 0 [pid 5799] <... rseq resumed>) = 0 [pid 5058] newfstatat(AT_FDCWD, "./43/file2", [pid 5799] set_robust_list(0x7f91a50869a0, 24 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5799] <... set_robust_list resumed>) = 0 [pid 5058] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5799] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5799] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5796] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] openat(AT_FDCWD, "./43/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5799] mkdir(".", 0777 [pid 5796] <... futex resumed>) = 0 [pid 5799] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5796] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] <... openat resumed>) = 4 [pid 5057] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5799] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./43/file2", [pid 5058] newfstatat(4, "", [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5799] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./43/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5799] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] getdents64(4, [pid 5799] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 0 [pid 5799] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] exit_group(0 [pid 5057] <... openat resumed>) = 4 [pid 5795] <... exit_group resumed>) = ? [pid 5799] <... futex resumed>) = ? [pid 5796] <... futex resumed>) = ? [pid 5057] newfstatat(4, "", [pid 5799] +++ exited with 0 +++ [pid 5796] +++ exited with 0 +++ [pid 5795] +++ exited with 0 +++ [pid 5058] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5795, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=18 /* 0.18 s */} --- [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] close(4 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... close resumed>) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5058] rmdir("./43/file2" [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] <... rmdir resumed>) = 0 [pid 5056] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] getdents64(3, [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./43/binderfs", [pid 5058] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] close(3 [pid 5057] getdents64(4, [pid 5056] unlink("./43/binderfs" [pid 5058] <... close resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] <... unlink resumed>) = 0 [pid 5058] rmdir("./43" [pid 5057] getdents64(4, [pid 5056] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... rmdir resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./43/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./43") = 0 [pid 5057] mkdir("./44", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5058] mkdir("./44", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 99.622970][ T5796] ERROR: (device loop0): txAbort: [ 99.622970][ T5796] [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5800 ./strace-static-x86_64: Process 5800 attached [pid 5800] set_robust_list(0x5555565206a0, 24) = 0 [pid 5800] chdir("./42") = 0 [pid 5800] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5800] setpgid(0, 0) = 0 [pid 5800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5800] write(3, "1000", 4) = 4 [pid 5800] close(3) = 0 [pid 5800] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5800] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5800] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5800] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5800] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5800] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5800] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5801]}, 88) = 5801 [pid 5800] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5800] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5800] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5801 attached [pid 5801] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5801] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5801] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5801] memfd_create("syzkaller", 0) = 3 [pid 5801] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5802 attached [pid 5802] set_robust_list(0x5555565206a0, 24) = 0 [pid 5802] chdir("./43") = 0 [pid 5802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5802] setpgid(0, 0) = 0 [pid 5802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5802] write(3, "1000", 4) = 4 [pid 5802] close(3) = 0 [pid 5802] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5802] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5802] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5802 [pid 5802] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5802] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5802] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5802] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5802] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5803]}, 88) = 5803 [pid 5802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5802] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5803 attached [pid 5802] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5803] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5803] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5803] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5057] <... ioctl resumed>) = 0 [pid 5803] memfd_create("syzkaller", 0 [pid 5057] close(3) = 0 [pid 5803] <... memfd_create resumed>) = 3 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5803] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5804 attached ) = 0x7f919cc00000 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5804 [pid 5804] set_robust_list(0x5555565206a0, 24 [pid 5058] <... ioctl resumed>) = 0 [pid 5804] <... set_robust_list resumed>) = 0 [pid 5804] chdir("./44" [pid 5058] close(3 [pid 5804] <... chdir resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5804] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5804] setpgid(0, 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5805 [pid 5804] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5805 attached [pid 5805] set_robust_list(0x5555565206a0, 24) = 0 [pid 5804] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5805] chdir("./44") = 0 [pid 5804] <... openat resumed>) = 3 [pid 5805] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5804] write(3, "1000", 4 [pid 5805] <... prctl resumed>) = 0 [pid 5804] <... write resumed>) = 4 [pid 5805] setpgid(0, 0) = 0 [pid 5804] close(3 [pid 5805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5804] <... close resumed>) = 0 [pid 5805] <... openat resumed>) = 3 [pid 5804] symlink("/dev/binderfs", "./binderfs" [pid 5805] write(3, "1000", 4 [pid 5804] <... symlink resumed>) = 0 [pid 5805] <... write resumed>) = 4 [pid 5805] close(3 [pid 5804] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... close resumed>) = 0 [pid 5805] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5804] <... futex resumed>) = 0 [pid 5805] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5805] <... futex resumed>) = 0 [pid 5805] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5805] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5805] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5806 attached [pid 5804] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5805] <... clone3 resumed> => {parent_tid=[5806]}, 88) = 5806 [pid 5804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5806] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5801] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5806] <... rseq resumed>) = 0 [pid 5805] rt_sigprocmask(SIG_SETMASK, [], [pid 5804] <... mmap resumed>) = 0x7f91a5087000 [pid 5806] set_robust_list(0x7f91a50a79a0, 24 [pid 5804] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5806] <... set_robust_list resumed>) = 0 [pid 5805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5806] rt_sigprocmask(SIG_SETMASK, [], [pid 5805] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] <... mprotect resumed>) = 0 [pid 5805] <... futex resumed>) = 0 [pid 5806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5805] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5804] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5806] memfd_create("syzkaller", 0 [pid 5804] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5804] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5806] <... memfd_create resumed>) = 3 [pid 5806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5804] <... clone3 resumed> => {parent_tid=[5807]}, 88) = 5807 ./strace-static-x86_64: Process 5807 attached [pid 5804] rt_sigprocmask(SIG_SETMASK, [], [pid 5806] <... mmap resumed>) = 0x7f919cc00000 [pid 5807] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5807] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5807] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5807] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5804] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 0 [pid 5804] <... futex resumed>) = 1 [pid 5804] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5807] memfd_create("syzkaller", 0) = 3 [pid 5807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5056] <... umount2 resumed>) = 0 [pid 5056] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./43/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./43/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./43/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./43") = 0 [pid 5056] mkdir("./44", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5803] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5806] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5801] <... write resumed>) = 16777216 [pid 5801] munmap(0x7f919cc00000, 138412032) = 0 [pid 5801] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5801] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5801] close(3) = 0 [pid 5801] close(4) = 0 [pid 5801] mkdir("./file2", 0777) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5801] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5056] close(3) = 0 [pid 5801] <... mount resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5803] <... write resumed>) = 16777216 [pid 5803] munmap(0x7f919cc00000, 138412032./strace-static-x86_64: Process 5808 attached [pid 5801] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5808 [pid 5808] set_robust_list(0x5555565206a0, 24) = 0 [pid 5801] <... openat resumed>) = 3 [pid 5808] chdir("./44" [pid 5801] chdir("./file2" [pid 5808] <... chdir resumed>) = 0 [pid 5808] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5801] <... chdir resumed>) = 0 [pid 5801] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5801] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5800] <... futex resumed>) = 0 [pid 5808] <... prctl resumed>) = 0 [ 100.235612][ T5801] loop4: detected capacity change from 0 to 32768 [pid 5801] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5808] setpgid(0, 0) = 0 [pid 5800] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5801] <... futex resumed>) = 0 [pid 5800] <... futex resumed>) = 1 [pid 5808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5801] rename("./file2", "./file1" [pid 5803] <... munmap resumed>) = 0 [pid 5800] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... openat resumed>) = 3 [pid 5803] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5803] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5808] write(3, "1000", 4 [pid 5803] close(3) = 0 [pid 5808] <... write resumed>) = 4 [pid 5803] close(4 [pid 5800] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5808] close(3) = 0 [pid 5808] symlink("/dev/binderfs", "./binderfs" [pid 5800] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5808] <... symlink resumed>) = 0 [pid 5800] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5800] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5808] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5808] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5803] <... close resumed>) = 0 [pid 5801] <... rename resumed>) = -1 EIO (Input/output error) [pid 5800] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5808] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5803] mkdir("./file2", 0777 [pid 5801] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5800] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5809 attached [pid 5808] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5803] <... mkdir resumed>) = 0 [pid 5801] <... futex resumed>) = 0 [pid 5809] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5803] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5801] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5800] <... clone3 resumed> => {parent_tid=[5809]}, 88) = 5809 [pid 5809] <... rseq resumed>) = 0 [pid 5808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5807] <... write resumed>) = 16777216 [pid 5800] rt_sigprocmask(SIG_SETMASK, [], [pid 5809] set_robust_list(0x7f91a50869a0, 24 [pid 5808] <... mmap resumed>) = 0x7f91a5087000 [pid 5807] munmap(0x7f919cc00000, 138412032 [pid 5800] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5800] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5800] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5808] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5808] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 100.301842][ T5801] ERROR: (device loop4): diWrite: ixpxd invalid [ 100.301842][ T5801] [ 100.321195][ T5801] ERROR: (device loop4): remounting filesystem as read-only [ 100.322086][ T5803] loop5: detected capacity change from 0 to 32768 [ 100.328480][ T5801] ERROR: (device loop4): txAbort: [ 100.328480][ T5801] [pid 5808] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5809] <... set_robust_list resumed>) = 0 [pid 5808] <... clone3 resumed> => {parent_tid=[5810]}, 88) = 5810 ./strace-static-x86_64: Process 5810 attached [pid 5809] rt_sigprocmask(SIG_SETMASK, [], [pid 5808] rt_sigprocmask(SIG_SETMASK, [], [pid 5806] <... write resumed>) = 16777216 [pid 5803] <... mount resumed>) = 0 [pid 5810] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5810] <... rseq resumed>) = 0 [pid 5809] mkdir(".", 0777 [pid 5808] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] set_robust_list(0x7f91a50a79a0, 24 [pid 5809] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5808] <... futex resumed>) = 0 [pid 5810] <... set_robust_list resumed>) = 0 [pid 5809] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5808] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5810] rt_sigprocmask(SIG_SETMASK, [], [pid 5807] <... munmap resumed>) = 0 [pid 5806] munmap(0x7f919cc00000, 138412032 [pid 5803] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5809] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5810] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5809] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5810] memfd_create("syzkaller", 0 [pid 5809] <... futex resumed>) = 1 [pid 5800] <... futex resumed>) = 0 [pid 5810] <... memfd_create resumed>) = 3 [pid 5809] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5807] <... openat resumed>) = 4 [pid 5800] exit_group(0 [pid 5810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5809] <... futex resumed>) = ? [pid 5807] ioctl(4, LOOP_SET_FD, 3 [pid 5801] <... futex resumed>) = ? [pid 5800] <... exit_group resumed>) = ? [pid 5810] <... mmap resumed>) = 0x7f919cc00000 [pid 5809] +++ exited with 0 +++ [pid 5801] +++ exited with 0 +++ [pid 5800] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5800, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [pid 5803] <... openat resumed>) = 3 [pid 5060] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5803] chdir("./file2" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5803] <... chdir resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5803] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5060] <... openat resumed>) = 3 [pid 5803] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5060] newfstatat(3, "", [pid 5803] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5803] <... futex resumed>) = 1 [pid 5060] getdents64(3, [pid 5803] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./42/binderfs" [pid 5807] <... ioctl resumed>) = 0 [pid 5802] <... futex resumed>) = 0 [pid 5060] <... unlink resumed>) = 0 [pid 5807] close(3 [pid 5802] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] <... close resumed>) = 0 [pid 5803] <... futex resumed>) = 0 [pid 5802] <... futex resumed>) = 1 [pid 5807] close(4 [pid 5803] rename("./file2", "./file1" [pid 5802] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... close resumed>) = 0 [pid 5807] mkdir("./file2", 0777 [pid 5806] <... munmap resumed>) = 0 [pid 5807] <... mkdir resumed>) = 0 [pid 5806] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5806] ioctl(4, LOOP_SET_FD, 3 [pid 5807] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5060] <... umount2 resumed>) = 0 [pid 5060] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5806] <... ioctl resumed>) = 0 [pid 5806] close(3 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5806] <... close resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./42/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 100.405307][ T5807] loop1: detected capacity change from 0 to 32768 [ 100.423296][ T5803] ERROR: (device loop5): diWrite: ixpxd invalid [ 100.423296][ T5803] [ 100.439073][ T5806] loop2: detected capacity change from 0 to 32768 [ 100.445978][ T5803] ERROR: (device loop5): remounting filesystem as read-only [pid 5060] umount2("./42/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5806] close(4 [pid 5803] <... rename resumed>) = -1 EIO (Input/output error) [pid 5806] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5806] mkdir("./file2", 0777 [pid 5060] openat(AT_FDCWD, "./42/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5806] <... mkdir resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5806] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5060] newfstatat(4, "", [pid 5803] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5803] <... futex resumed>) = 1 [pid 5802] <... futex resumed>) = 0 [pid 5060] getdents64(4, [pid 5807] <... mount resumed>) = 0 [pid 5802] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5807] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5802] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] getdents64(4, [pid 5807] <... openat resumed>) = 3 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5807] chdir("./file2" [pid 5060] close(4) = 0 [pid 5807] <... chdir resumed>) = 0 [pid 5060] rmdir("./42/file2" [pid 5807] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5803] mkdir(".", 0777 [pid 5807] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5060] <... rmdir resumed>) = 0 [pid 5807] <... futex resumed>) = 1 [pid 5806] <... mount resumed>) = 0 [pid 5804] <... futex resumed>) = 0 [pid 5803] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] getdents64(3, [pid 5807] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5804] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5806] <... openat resumed>) = 3 [pid 5803] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5806] chdir("./file2" [pid 5807] rename("./file2", "./file1" [pid 5806] <... chdir resumed>) = 0 [pid 5804] <... futex resumed>) = 0 [pid 5060] close(3 [pid 5804] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5060] <... close resumed>) = 0 [pid 5806] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5803] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = 1 [pid 5802] <... futex resumed>) = 0 [pid 5806] <... futex resumed>) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5802] exit_group(0 [pid 5805] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] <... exit_group resumed>) = ? [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] rename("./file2", "./file1" [pid 5803] +++ exited with 0 +++ [pid 5802] +++ exited with 0 +++ [ 100.456288][ T5803] ERROR: (device loop5): txAbort: [ 100.456288][ T5803] [ 100.482905][ T5807] ERROR: (device loop1): diWrite: ixpxd invalid [ 100.482905][ T5807] [ 100.486327][ T5806] ERROR: (device loop2): diWrite: ixpxd invalid [ 100.486327][ T5806] [pid 5060] rmdir("./42" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5802, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=13 /* 0.13 s */} --- [pid 5060] <... rmdir resumed>) = 0 [pid 5063] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] mkdir("./43", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] newfstatat(3, "", [pid 5060] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5807] <... rename resumed>) = -1 EIO (Input/output error) [pid 5063] getdents64(3, [pid 5804] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5807] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] <... futex resumed>) = 0 [pid 5804] <... futex resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5807] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] newfstatat(AT_FDCWD, "./43/binderfs", [pid 5804] <... mmap resumed>) = 0x7f91a5066000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5805] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5805] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5805] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5805] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5811]}, 88) = 5811 [pid 5805] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5805] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5811 attached [pid 5805] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5811] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5811] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5804] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5063] unlink("./43/binderfs" [pid 5811] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5811] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5063] <... unlink resumed>) = 0 [pid 5811] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5811] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] <... futex resumed>) = 0 [pid 5804] <... mprotect resumed>) = 0 [pid 5063] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5804] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5804] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5812]}, 88) = 5812 [pid 5804] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5812 attached [pid 5812] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5812] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5063] <... umount2 resumed>) = 0 [ 100.499757][ T5807] ERROR: (device loop1): remounting filesystem as read-only [ 100.499767][ T5807] ERROR: (device loop1): txAbort: [ 100.499767][ T5807] [ 100.535752][ T5806] ERROR: (device loop2): remounting filesystem as read-only [ 100.543696][ T5806] ERROR: (device loop2): txAbort: [ 100.543696][ T5806] [pid 5804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5812] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5810] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5806] <... rename resumed>) = -1 EIO (Input/output error) [pid 5804] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5804] <... futex resumed>) = 1 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5804] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] newfstatat(AT_FDCWD, "./43/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5812] <... futex resumed>) = 0 [pid 5063] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5812] mkdir(".", 0777 [pid 5063] openat(AT_FDCWD, "./43/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5812] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5806] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5812] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5063] close(4 [pid 5806] <... futex resumed>) = 0 [pid 5805] exit_group(0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./43/file2" [pid 5812] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5811] <... futex resumed>) = ? [pid 5806] +++ exited with 0 +++ [pid 5805] <... exit_group resumed>) = ? [pid 5063] <... rmdir resumed>) = 0 [pid 5812] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] +++ exited with 0 +++ [ 100.559222][ T5806] ERROR: (device loop2): remounting filesystem as read-only [pid 5812] <... futex resumed>) = 1 [pid 5805] +++ exited with 0 +++ [pid 5804] <... futex resumed>) = 0 [pid 5063] getdents64(3, [pid 5812] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5804] exit_group(0 [pid 5812] <... futex resumed>) = ? [pid 5804] <... exit_group resumed>) = ? [pid 5812] +++ exited with 0 +++ [pid 5807] <... futex resumed>) = ? [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5805, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5807] +++ exited with 0 +++ [pid 5804] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5804, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5058] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", [pid 5057] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] getdents64(3, [pid 5057] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] <... openat resumed>) = 3 [pid 5058] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] newfstatat(3, "", [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5058] newfstatat(AT_FDCWD, "./44/binderfs", [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... close resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] getdents64(3, [pid 5063] rmdir("./43" [pid 5058] unlink("./44/binderfs" [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] <... rmdir resumed>) = 0 [pid 5058] <... unlink resumed>) = 0 [pid 5057] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./44", 0777 [pid 5058] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5057] newfstatat(AT_FDCWD, "./44/binderfs", [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5057] unlink("./44/binderfs" [pid 5058] <... umount2 resumed>) = 0 [pid 5057] <... unlink resumed>) = 0 [pid 5057] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./44/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./44/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./44/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./44") = 0 [pid 5058] mkdir("./45", 0777) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./44/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./44/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./44/file2") = 0 [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./44") = 0 [pid 5057] mkdir("./45", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5810] <... write resumed>) = 16777216 [pid 5810] munmap(0x7f919cc00000, 138412032) = 0 [pid 5810] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5810] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5810] close(3) = 0 [pid 5810] close(4) = 0 [pid 5810] mkdir("./file2", 0777) = 0 [pid 5810] mount("/dev/loop0", "./file2", "jfs", 0, "") = 0 [ 100.732651][ T5810] loop0: detected capacity change from 0 to 32768 [pid 5810] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5810] chdir("./file2") = 0 [pid 5810] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5810] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5808] <... futex resumed>) = 0 [pid 5810] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5808] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... futex resumed>) = 0 [pid 5808] <... futex resumed>) = 1 [pid 5810] rename("./file2", "./file1" [pid 5808] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5813 attached , child_tidptr=0x555556520690) = 5813 [pid 5813] set_robust_list(0x5555565206a0, 24) = 0 [pid 5813] chdir("./43") = 0 [pid 5813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5813] setpgid(0, 0) = 0 [pid 5813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5813] write(3, "1000", 4) = 4 [pid 5813] close(3) = 0 [pid 5813] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5813] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5813] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5813] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5813] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5813] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5814]}, 88) = 5814 [pid 5813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5813] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5814 attached ) = 0 [pid 5814] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5813] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5814] <... rseq resumed>) = 0 [pid 5814] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5814] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5808] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5814] memfd_create("syzkaller", 0 [pid 5808] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5808] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5814] <... memfd_create resumed>) = 3 [pid 5808] <... mmap resumed>) = 0x7f91a5066000 [pid 5808] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5808] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5808] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5815 attached [pid 5814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5808] <... clone3 resumed> => {parent_tid=[5815]}, 88) = 5815 [pid 5815] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5814] <... mmap resumed>) = 0x7f919cc00000 [pid 5808] rt_sigprocmask(SIG_SETMASK, [], [pid 5815] <... rseq resumed>) = 0 [pid 5808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5815] set_robust_list(0x7f91a50869a0, 24 [pid 5808] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] <... set_robust_list resumed>) = 0 [pid 5808] <... futex resumed>) = 0 [pid 5815] rt_sigprocmask(SIG_SETMASK, [], [pid 5808] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5815] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5815] mkdir(".", 0777 [pid 5810] <... rename resumed>) = -1 EIO (Input/output error) [pid 5815] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5815] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5810] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5810] <... futex resumed>) = 0 [pid 5815] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] <... futex resumed>) = 1 [pid 5808] <... futex resumed>) = 0 [pid 5808] exit_group(0 [pid 5810] <... futex resumed>) = ? [pid 5808] <... exit_group resumed>) = ? [pid 5815] +++ exited with 0 +++ [pid 5810] +++ exited with 0 +++ [pid 5808] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5808, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5056] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 100.787005][ T5810] ERROR: (device loop0): diWrite: ixpxd invalid [ 100.787005][ T5810] [ 100.821469][ T5810] ERROR: (device loop0): remounting filesystem as read-only [ 100.829751][ T5810] ERROR: (device loop0): txAbort: [ 100.829751][ T5810] [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./44/binderfs") = 0 [pid 5056] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5816 ./strace-static-x86_64: Process 5816 attached [pid 5816] set_robust_list(0x5555565206a0, 24) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5816] chdir("./45") = 0 [pid 5816] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5816] setpgid(0, 0) = 0 [pid 5816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5056] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5816] write(3, "1000", 4) = 4 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5816] close(3) = 0 [pid 5056] newfstatat(AT_FDCWD, "./44/file2", [pid 5816] symlink("/dev/binderfs", "./binderfs" [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5816] <... symlink resumed>) = 0 [pid 5816] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./44/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5816] <... futex resumed>) = 0 [pid 5056] <... openat resumed>) = 4 [pid 5816] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./44/file2" [pid 5816] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5816] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5056] getdents64(3, [pid 5816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5816] <... mmap resumed>) = 0x7f91a5087000 [pid 5816] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5056] close(3 [pid 5816] <... mprotect resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./44" [pid 5816] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5056] <... rmdir resumed>) = 0 [pid 5816] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5056] mkdir("./45", 0777) = 0 ./strace-static-x86_64: Process 5817 attached [pid 5816] <... clone3 resumed> => {parent_tid=[5817]}, 88) = 5817 [pid 5816] rt_sigprocmask(SIG_SETMASK, [], [pid 5817] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5816] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5817] <... rseq resumed>) = 0 [pid 5816] <... futex resumed>) = 0 [pid 5816] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5817] set_robust_list(0x7f91a50a79a0, 24 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5057] <... ioctl resumed>) = 0 [pid 5817] <... set_robust_list resumed>) = 0 [pid 5063] close(3 [pid 5057] close(3 [pid 5817] rt_sigprocmask(SIG_SETMASK, [], [pid 5063] <... close resumed>) = 0 [pid 5057] <... close resumed>) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5818 [pid 5817] memfd_create("syzkaller", 0) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5819 ./strace-static-x86_64: Process 5818 attached [pid 5817] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5818] set_robust_list(0x5555565206a0, 24 [pid 5817] <... mmap resumed>) = 0x7f919cc00000 ./strace-static-x86_64: Process 5819 attached [pid 5819] set_robust_list(0x5555565206a0, 24) = 0 [pid 5819] chdir("./44") = 0 [pid 5819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5819] setpgid(0, 0) = 0 [pid 5819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5819] write(3, "1000", 4) = 4 [pid 5818] <... set_robust_list resumed>) = 0 [pid 5819] close(3) = 0 [pid 5818] chdir("./45" [pid 5819] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5819] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5819] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5818] <... chdir resumed>) = 0 [pid 5818] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5819] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5818] <... prctl resumed>) = 0 [pid 5818] setpgid(0, 0) = 0 [pid 5818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5819] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5818] <... openat resumed>) = 3 [pid 5818] write(3, "1000", 4 [pid 5814] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5818] <... write resumed>) = 4 [pid 5819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5818] close(3 [pid 5819] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5818] <... close resumed>) = 0 [pid 5819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5818] symlink("/dev/binderfs", "./binderfs" [pid 5819] <... clone3 resumed> => {parent_tid=[5820]}, 88) = 5820 [pid 5819] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5819] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5820 attached [pid 5819] <... futex resumed>) = 0 [pid 5818] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5818] <... futex resumed>) = 0 [pid 5820] <... rseq resumed>) = 0 [pid 5819] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5820] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5820] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5820] memfd_create("syzkaller", 0) = 3 [pid 5820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5818] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5818] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5818] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5818] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5818] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5818] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5821]}, 88) = 5821 [pid 5818] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5821 attached NULL, 8) = 0 [pid 5818] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5818] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5821] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5821] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5821] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5821] memfd_create("syzkaller", 0) = 3 [pid 5821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5056] <... ioctl resumed>) = 0 [pid 5817] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5822 ./strace-static-x86_64: Process 5822 attached [pid 5822] set_robust_list(0x5555565206a0, 24) = 0 [pid 5822] chdir("./45") = 0 [pid 5822] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5822] setpgid(0, 0) = 0 [pid 5822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5822] write(3, "1000", 4) = 4 [pid 5822] close(3) = 0 [pid 5822] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5822] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5822] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5822] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5822] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5823]}, 88) = 5823 [pid 5822] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5822] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5822] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5823 attached [pid 5823] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5823] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5823] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5823] memfd_create("syzkaller", 0) = 3 [pid 5823] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5814] <... write resumed>) = 16777216 [pid 5814] munmap(0x7f919cc00000, 138412032 [pid 5821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5814] <... munmap resumed>) = 0 [pid 5814] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5814] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5814] close(3) = 0 [pid 5814] close(4) = 0 [pid 5814] mkdir("./file2", 0777) = 0 [ 101.332811][ T5814] loop4: detected capacity change from 0 to 32768 [pid 5814] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5823] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5814] <... mount resumed>) = 0 [pid 5814] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5814] chdir("./file2") = 0 [pid 5814] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5814] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5814] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5813] <... futex resumed>) = 0 [pid 5813] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = 0 [pid 5813] <... futex resumed>) = 1 [pid 5814] rename("./file2", "./file1" [pid 5813] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5817] <... write resumed>) = 16777216 [pid 5817] munmap(0x7f919cc00000, 138412032) = 0 [pid 5817] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 101.416612][ T5814] ERROR: (device loop4): diWrite: ixpxd invalid [ 101.416612][ T5814] [ 101.454041][ T5814] ERROR: (device loop4): remounting filesystem as read-only [pid 5817] ioctl(4, LOOP_SET_FD, 3 [pid 5813] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5813] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5813] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5813] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5813] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5824]}, 88) = 5824 [pid 5813] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5813] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5824 attached [pid 5817] <... ioctl resumed>) = 0 [pid 5824] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5817] close(3 [pid 5824] <... rseq resumed>) = 0 [pid 5817] <... close resumed>) = 0 [pid 5824] set_robust_list(0x7f91a50869a0, 24 [pid 5817] close(4 [pid 5824] <... set_robust_list resumed>) = 0 [pid 5824] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5817] <... close resumed>) = 0 [pid 5824] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5824] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5824] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5824] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5813] <... futex resumed>) = 0 [pid 5817] mkdir("./file2", 0777) = 0 [pid 5817] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5820] <... write resumed>) = 16777216 [pid 5817] <... mount resumed>) = 0 [pid 5817] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5817] chdir("./file2") = 0 [pid 5820] munmap(0x7f919cc00000, 138412032 [pid 5817] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5820] <... munmap resumed>) = 0 [pid 5817] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5816] <... futex resumed>) = 0 [pid 5817] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5816] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5816] <... futex resumed>) = 0 [pid 5816] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5817] rename("./file2", "./file1" [pid 5814] <... rename resumed>) = -1 EIO (Input/output error) [pid 5814] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 101.463676][ T5817] loop2: detected capacity change from 0 to 32768 [ 101.477731][ T5814] ERROR: (device loop4): txAbort: [ 101.477731][ T5814] [ 101.500742][ T5814] ERROR: (device loop4): remounting filesystem as read-only [pid 5814] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5820] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5813] exit_group(0 [pid 5814] <... futex resumed>) = ? [pid 5813] <... exit_group resumed>) = ? [pid 5814] +++ exited with 0 +++ [pid 5824] <... futex resumed>) = ? [pid 5820] <... openat resumed>) = 4 [pid 5824] +++ exited with 0 +++ [pid 5813] +++ exited with 0 +++ [pid 5820] ioctl(4, LOOP_SET_FD, 3 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5813, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- [pid 5060] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5820] <... ioctl resumed>) = 0 [pid 5820] close(3 [pid 5060] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5820] <... close resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5820] close(4 [pid 5060] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5820] <... close resumed>) = 0 [pid 5816] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5820] mkdir("./file2", 0777 [pid 5816] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... mkdir resumed>) = 0 [pid 5816] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5821] <... write resumed>) = 16777216 [pid 5820] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] newfstatat(3, "", [pid 5817] <... rename resumed>) = -1 EIO (Input/output error) [pid 5816] <... mmap resumed>) = 0x7f91a5066000 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5816] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5817] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] unlink("./43/binderfs") = 0 [ 101.529836][ T5817] ERROR: (device loop2): diWrite: ixpxd invalid [ 101.529836][ T5817] [ 101.544908][ T5820] loop5: detected capacity change from 0 to 32768 [ 101.545222][ T5817] ERROR: (device loop2): remounting filesystem as read-only [ 101.569008][ T5817] ERROR: (device loop2): txAbort: [ 101.569008][ T5817] [pid 5821] munmap(0x7f919cc00000, 138412032 [pid 5820] <... mount resumed>) = 0 [pid 5817] <... futex resumed>) = 0 [pid 5816] <... mprotect resumed>) = 0 [pid 5060] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5820] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5817] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5816] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5820] chdir("./file2" [pid 5816] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5820] <... chdir resumed>) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5820] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5820] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5819] <... futex resumed>) = 0 [pid 5820] rename("./file2", "./file1" [pid 5819] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5825 attached [pid 5823] <... write resumed>) = 16777216 [pid 5821] <... munmap resumed>) = 0 [pid 5816] <... clone3 resumed> => {parent_tid=[5825]}, 88) = 5825 [pid 5825] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5823] munmap(0x7f919cc00000, 138412032 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5816] rt_sigprocmask(SIG_SETMASK, [], [pid 5825] <... rseq resumed>) = 0 [pid 5823] <... munmap resumed>) = 0 [pid 5821] <... openat resumed>) = 4 [pid 5816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5825] set_robust_list(0x7f91a50869a0, 24 [pid 5816] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5825] <... set_robust_list resumed>) = 0 [pid 5816] <... futex resumed>) = 0 [pid 5825] rt_sigprocmask(SIG_SETMASK, [], [pid 5816] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5825] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5825] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5821] ioctl(4, LOOP_SET_FD, 3 [pid 5825] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5820] <... rename resumed>) = -1 EIO (Input/output error) [pid 5060] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5825] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5816] <... futex resumed>) = 0 [pid 5820] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5820] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5819] <... futex resumed>) = 0 [pid 5820] mkdir(".", 0777 [pid 5819] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5820] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5820] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5823] <... openat resumed>) = 4 [pid 5823] ioctl(4, LOOP_SET_FD, 3 [pid 5825] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5821] <... ioctl resumed>) = 0 [pid 5816] exit_group(0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... futex resumed>) = ? [pid 5821] close(3 [pid 5817] <... futex resumed>) = ? [pid 5816] <... exit_group resumed>) = ? [pid 5060] newfstatat(AT_FDCWD, "./43/file2", [pid 5825] +++ exited with 0 +++ [pid 5817] +++ exited with 0 +++ [pid 5816] +++ exited with 0 +++ [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5816, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} --- [pid 5821] <... close resumed>) = 0 [pid 5060] umount2("./43/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5821] close(4 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... ioctl resumed>) = 0 [pid 5821] <... close resumed>) = 0 [pid 5820] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./43/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] close(3 [pid 5821] mkdir("./file2", 0777 [pid 5820] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5821] <... mkdir resumed>) = 0 [pid 5820] <... futex resumed>) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5058] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5820] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] exit_group(0 [pid 5058] <... openat resumed>) = 3 [pid 5823] close(4 [pid 5820] <... futex resumed>) = ? [pid 5819] <... exit_group resumed>) = ? [pid 5058] newfstatat(3, "", [pid 5821] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5060] newfstatat(4, "", [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5060] getdents64(4, [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] getdents64(4, [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5820] +++ exited with 0 +++ [pid 5819] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5821] <... mount resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5819, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5060] close(4 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] <... close resumed>) = 0 [pid 5058] unlink("./45/binderfs" [pid 5821] <... openat resumed>) = 3 [pid 5060] rmdir("./43/file2" [pid 5058] <... unlink resumed>) = 0 [pid 5821] chdir("./file2" [pid 5063] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... rmdir resumed>) = 0 [pid 5058] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5821] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... close resumed>) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 101.615987][ T5820] ERROR: (device loop5): diWrite: ixpxd invalid [ 101.615987][ T5820] [ 101.628020][ T5820] ERROR: (device loop5): remounting filesystem as read-only [ 101.635714][ T5820] ERROR: (device loop5): txAbort: [ 101.635714][ T5820] [ 101.643748][ T5821] loop1: detected capacity change from 0 to 32768 [ 101.645626][ T5823] loop0: detected capacity change from 0 to 32768 [pid 5063] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] mkdir("./file2", 0777 [pid 5821] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... openat resumed>) = 3 [pid 5821] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(3, "", [pid 5060] getdents64(3, [pid 5821] <... futex resumed>) = 1 [pid 5818] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5823] <... mkdir resumed>) = 0 [pid 5821] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5818] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 5060] close(3 [pid 5821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5818] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5821] rename("./file2", "./file1" [pid 5818] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... close resumed>) = 0 [pid 5823] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] rmdir("./43" [pid 5058] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] <... rmdir resumed>) = 0 [pid 5058] newfstatat(AT_FDCWD, "./45/file2", [pid 5063] unlink("./44/binderfs" [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5058] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./45/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... openat resumed>) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] mkdir("./44", 0777 [pid 5058] getdents64(4, [pid 5060] <... mkdir resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./45/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5058] rmdir("./45") = 0 [pid 5060] <... openat resumed>) = 3 [pid 5058] mkdir("./46", 0777 [pid 5823] <... mount resumed>) = 0 [pid 5058] <... mkdir resumed>) = 0 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5823] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5058] <... openat resumed>) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5823] <... openat resumed>) = 3 [pid 5823] chdir("./file2") = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5821] <... rename resumed>) = -1 EIO (Input/output error) [pid 5823] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = 0 [pid 5821] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5818] <... futex resumed>) = 0 [pid 5818] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5818] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5821] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5821] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5823] <... futex resumed>) = 1 [pid 5822] <... futex resumed>) = 0 [pid 5823] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5822] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] <... futex resumed>) = 0 [pid 5822] <... futex resumed>) = 1 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] rename("./file2", "./file1" [pid 5822] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5063] newfstatat(AT_FDCWD, "./44/file2", [pid 5821] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 101.677158][ T5821] ERROR: (device loop1): diWrite: ixpxd invalid [ 101.677158][ T5821] [ 101.698665][ T5821] ERROR: (device loop1): remounting filesystem as read-only [ 101.707710][ T5821] ERROR: (device loop1): txAbort: [ 101.707710][ T5821] [pid 5821] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5821] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5818] <... futex resumed>) = 0 [pid 5818] exit_group(0 [pid 5821] <... futex resumed>) = ? [pid 5818] <... exit_group resumed>) = ? [pid 5821] +++ exited with 0 +++ [pid 5818] +++ exited with 0 +++ [pid 5063] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5818, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] openat(AT_FDCWD, "./44/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 4 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(4, "", [pid 5057] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./45/binderfs") = 0 [pid 5057] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./44/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./44") = 0 [pid 5063] mkdir("./45", 0777) = 0 [pid 5057] <... umount2 resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5057] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5057] newfstatat(AT_FDCWD, "./45/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./45/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5057] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4) = 0 [pid 5057] rmdir("./45/file2") = 0 [ 101.748269][ T5823] ERROR: (device loop0): diWrite: ixpxd invalid [ 101.748269][ T5823] [ 101.769943][ T5823] ERROR: (device loop0): remounting filesystem as read-only [pid 5057] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3 [pid 5822] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5057] <... close resumed>) = 0 [pid 5822] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] rmdir("./45" [pid 5822] <... futex resumed>) = 0 [pid 5057] <... rmdir resumed>) = 0 [pid 5822] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5057] mkdir("./46", 0777 [pid 5822] <... mmap resumed>) = 0x7f91a5066000 [pid 5822] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5822] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5822] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5826 attached => {parent_tid=[5826]}, 88) = 5826 [pid 5826] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5822] rt_sigprocmask(SIG_SETMASK, [], [pid 5826] <... rseq resumed>) = 0 [pid 5822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5826] set_robust_list(0x7f91a50869a0, 24 [pid 5822] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] <... set_robust_list resumed>) = 0 [pid 5822] <... futex resumed>) = 0 [pid 5826] rt_sigprocmask(SIG_SETMASK, [], [pid 5822] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5826] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5826] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5057] <... mkdir resumed>) = 0 [pid 5826] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5822] <... futex resumed>) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] <... openat resumed>) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5823] <... rename resumed>) = -1 EIO (Input/output error) [pid 5823] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5822] exit_group(0 [pid 5826] <... futex resumed>) = ? [pid 5822] <... exit_group resumed>) = ? [pid 5826] +++ exited with 0 +++ [pid 5823] +++ exited with 0 +++ [pid 5822] +++ exited with 0 +++ [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5822, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=15 /* 0.15 s */} --- [pid 5056] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5056] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./45/binderfs") = 0 [pid 5056] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... ioctl resumed>) = 0 [ 101.798508][ T5823] ERROR: (device loop0): txAbort: [ 101.798508][ T5823] [ 101.822197][ T5823] ERROR: (device loop0): remounting filesystem as read-only [pid 5060] close(3 [pid 5056] <... umount2 resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5056] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] newfstatat(AT_FDCWD, "./45/file2", [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5827 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5827 attached [pid 5056] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5827] set_robust_list(0x5555565206a0, 24 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] <... set_robust_list resumed>) = 0 [pid 5056] openat(AT_FDCWD, "./45/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5827] chdir("./44" [pid 5056] newfstatat(4, "", [pid 5827] <... chdir resumed>) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5056] getdents64(4, [pid 5827] setpgid(0, 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5827] <... setpgid resumed>) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5056] close(4) = 0 [pid 5056] rmdir("./45/file2" [pid 5827] <... openat resumed>) = 3 [pid 5056] <... rmdir resumed>) = 0 [pid 5827] write(3, "1000", 4 [pid 5056] getdents64(3, [pid 5827] <... write resumed>) = 4 [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5827] close(3 [pid 5056] close(3) = 0 [pid 5827] <... close resumed>) = 0 [pid 5056] rmdir("./45" [pid 5827] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5058] <... ioctl resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5827] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] mkdir("./46", 0777 [pid 5827] <... futex resumed>) = 0 [pid 5827] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5827] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5056] <... mkdir resumed>) = 0 [pid 5827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5827] <... mmap resumed>) = 0x7f91a5087000 [pid 5827] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... ioctl resumed>) = 0 [pid 5058] close(3 [pid 5056] <... openat resumed>) = 3 [pid 5827] <... mprotect resumed>) = 0 [pid 5063] close(3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5058] <... close resumed>) = 0 [pid 5827] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] <... close resumed>) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5828 attached [pid 5828] set_robust_list(0x5555565206a0, 24./strace-static-x86_64: Process 5829 attached [pid 5827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5828 [pid 5829] set_robust_list(0x5555565206a0, 24 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5829 [pid 5829] <... set_robust_list resumed>) = 0 [pid 5828] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5830 attached [pid 5829] chdir("./46" [pid 5828] chdir("./45" [pid 5829] <... chdir resumed>) = 0 [pid 5828] <... chdir resumed>) = 0 [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] <... prctl resumed>) = 0 [pid 5828] <... prctl resumed>) = 0 [pid 5829] setpgid(0, 0 [pid 5828] setpgid(0, 0 [pid 5829] <... setpgid resumed>) = 0 [pid 5828] <... setpgid resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] <... openat resumed>) = 3 [pid 5828] <... openat resumed>) = 3 [pid 5829] write(3, "1000", 4 [pid 5828] write(3, "1000", 4 [pid 5829] <... write resumed>) = 4 [pid 5828] <... write resumed>) = 4 [pid 5829] close(3 [pid 5828] close(3 [pid 5829] <... close resumed>) = 0 [pid 5828] <... close resumed>) = 0 [pid 5829] symlink("/dev/binderfs", "./binderfs" [pid 5828] symlink("/dev/binderfs", "./binderfs" [pid 5829] <... symlink resumed>) = 0 [pid 5828] <... symlink resumed>) = 0 [pid 5829] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = 0 [pid 5828] <... futex resumed>) = 0 [pid 5829] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5828] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5829] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5828] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5829] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5828] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5828] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5829] <... mmap resumed>) = 0x7f91a5087000 [pid 5828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5829] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5828] <... mmap resumed>) = 0x7f91a5087000 [pid 5829] <... mprotect resumed>) = 0 [pid 5829] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5828] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5830] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5828] <... mprotect resumed>) = 0 [pid 5827] <... clone3 resumed> => {parent_tid=[5830]}, 88) = 5830 [pid 5829] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5828] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5829] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0}./strace-static-x86_64: Process 5831 attached => {parent_tid=[5831]}, 88) = 5831 [pid 5828] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5831] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5829] rt_sigprocmask(SIG_SETMASK, [], [pid 5828] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5831] <... rseq resumed>) = 0 [pid 5829] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5832 attached [pid 5831] set_robust_list(0x7f91a50a79a0, 24 [pid 5829] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5831] <... set_robust_list resumed>) = 0 [pid 5829] <... futex resumed>) = 0 [pid 5832] set_robust_list(0x7f91a50a79a0, 24 [pid 5828] <... clone3 resumed> => {parent_tid=[5832]}, 88) = 5832 [pid 5832] <... set_robust_list resumed>) = 0 [pid 5831] rt_sigprocmask(SIG_SETMASK, [], [pid 5829] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5828] rt_sigprocmask(SIG_SETMASK, [], [pid 5832] rt_sigprocmask(SIG_SETMASK, [], [pid 5831] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5828] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5830] <... rseq resumed>) = 0 [pid 5828] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] rt_sigprocmask(SIG_SETMASK, [], [pid 5832] memfd_create("syzkaller", 0 [pid 5831] memfd_create("syzkaller", 0 [pid 5830] set_robust_list(0x7f91a50a79a0, 24 [pid 5828] <... futex resumed>) = 0 [pid 5827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5830] <... set_robust_list resumed>) = 0 [pid 5827] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] rt_sigprocmask(SIG_SETMASK, [], [pid 5827] <... futex resumed>) = 0 [pid 5830] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5827] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5832] <... memfd_create resumed>) = 3 [pid 5831] <... memfd_create resumed>) = 3 [pid 5830] memfd_create("syzkaller", 0 [pid 5828] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] <... memfd_create resumed>) = 3 [pid 5832] <... mmap resumed>) = 0x7f919cc00000 [pid 5831] <... mmap resumed>) = 0x7f919cc00000 [pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5833 attached , child_tidptr=0x555556520690) = 5833 [pid 5833] set_robust_list(0x5555565206a0, 24) = 0 [pid 5833] chdir("./46") = 0 [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5833] setpgid(0, 0) = 0 [pid 5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1000", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5833] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5833] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5833] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5833] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5834]}, 88) = 5834 [pid 5833] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5834 attached [pid 5833] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5833] <... futex resumed>) = 0 [pid 5834] <... rseq resumed>) = 0 [pid 5833] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5834] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5834] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5834] memfd_create("syzkaller", 0 [pid 5832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5834] <... memfd_create resumed>) = 3 [pid 5834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5831] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5834] <... mmap resumed>) = 0x7f919cc00000 [pid 5830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5056] <... ioctl resumed>) = 0 [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5835 ./strace-static-x86_64: Process 5835 attached [pid 5835] set_robust_list(0x5555565206a0, 24) = 0 [pid 5835] chdir("./46") = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5835] setpgid(0, 0) = 0 [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1000", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5835] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5835] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5835] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5835] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5836]}, 88) = 5836 [pid 5835] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5836 attached [pid 5835] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5835] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5836] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5836] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5836] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5836] memfd_create("syzkaller", 0) = 3 [pid 5836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5831] <... write resumed>) = 16777216 [pid 5832] <... write resumed>) = 16777216 [pid 5831] munmap(0x7f919cc00000, 138412032 [pid 5830] <... write resumed>) = 16777216 [pid 5832] munmap(0x7f919cc00000, 138412032 [pid 5830] munmap(0x7f919cc00000, 138412032 [pid 5834] <... write resumed>) = 16777216 [pid 5831] <... munmap resumed>) = 0 [pid 5834] munmap(0x7f919cc00000, 138412032 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5834] <... munmap resumed>) = 0 [pid 5831] ioctl(4, LOOP_SET_FD, 3 [pid 5830] <... munmap resumed>) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] <... munmap resumed>) = 0 [pid 5831] <... ioctl resumed>) = 0 [pid 5831] close(3) = 0 [pid 5834] <... openat resumed>) = 4 [pid 5831] close(4 [pid 5834] ioctl(4, LOOP_SET_FD, 3 [pid 5832] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5831] <... close resumed>) = 0 [pid 5831] mkdir("./file2", 0777 [pid 5830] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5830] ioctl(4, LOOP_SET_FD, 3 [pid 5831] <... mkdir resumed>) = 0 [pid 5832] <... openat resumed>) = 4 [pid 5830] <... ioctl resumed>) = 0 [pid 5836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5834] <... ioctl resumed>) = 0 [pid 5832] ioctl(4, LOOP_SET_FD, 3 [ 102.519331][ T5831] loop2: detected capacity change from 0 to 32768 [ 102.542176][ T5830] loop4: detected capacity change from 0 to 32768 [ 102.542215][ T5834] loop1: detected capacity change from 0 to 32768 [pid 5831] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5834] close(3 [pid 5830] close(3 [pid 5834] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5834] close(4 [pid 5830] close(4 [pid 5834] <... close resumed>) = 0 [pid 5830] <... close resumed>) = 0 [pid 5830] mkdir("./file2", 0777 [pid 5834] mkdir("./file2", 0777 [pid 5830] <... mkdir resumed>) = 0 [pid 5834] <... mkdir resumed>) = 0 [pid 5834] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5830] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5831] <... mount resumed>) = 0 [pid 5831] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5831] chdir("./file2") = 0 [pid 5831] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5831] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5829] <... futex resumed>) = 0 [pid 5829] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] <... futex resumed>) = 0 [pid 5829] <... futex resumed>) = 1 [pid 5831] rename("./file2", "./file1" [pid 5829] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... mount resumed>) = 0 [pid 5834] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5834] chdir("./file2") = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5834] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] <... futex resumed>) = 0 [pid 5833] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] rename("./file2", "./file1" [pid 5832] <... ioctl resumed>) = 0 [pid 5832] close(3) = 0 [pid 5832] close(4) = 0 [pid 5830] <... mount resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 102.569944][ T5832] loop5: detected capacity change from 0 to 32768 [ 102.591956][ T5831] ERROR: (device loop2): diWrite: ixpxd invalid [ 102.591956][ T5831] [ 102.597514][ T5834] ERROR: (device loop1): diWrite: ixpxd invalid [ 102.597514][ T5834] [pid 5830] chdir("./file2" [pid 5832] mkdir("./file2", 0777 [pid 5830] <... chdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5830] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5830] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] <... mkdir resumed>) = 0 [pid 5829] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5827] <... futex resumed>) = 0 [pid 5827] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5829] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5827] <... futex resumed>) = 1 [pid 5830] <... futex resumed>) = 0 [pid 5829] <... mmap resumed>) = 0x7f91a5066000 [pid 5827] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5830] rename("./file2", "./file1" [pid 5829] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5832] <... mount resumed>) = 0 [pid 5829] <... mprotect resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5829] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5833] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5829] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5832] <... openat resumed>) = 3 [pid 5833] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] chdir("./file2" [pid 5833] <... futex resumed>) = 0 [pid 5832] <... chdir resumed>) = 0 [pid 5829] <... clone3 resumed> => {parent_tid=[5837]}, 88) = 5837 [pid 5833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5829] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] <... mmap resumed>) = 0x7f91a5066000 [pid 5829] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5829] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5829] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5833] <... mprotect resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5833] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5833] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5838 attached ./strace-static-x86_64: Process 5837 attached [pid 5832] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 102.628079][ T5831] ERROR: (device loop2): remounting filesystem as read-only [ 102.629990][ T5834] ERROR: (device loop1): remounting filesystem as read-only [ 102.645696][ T5830] ERROR: (device loop4): diWrite: ixpxd invalid [ 102.645696][ T5830] [ 102.662726][ T5834] ERROR: (device loop1): txAbort: [ 102.662726][ T5834] [ 102.670878][ T5831] ERROR: (device loop2): txAbort: [ 102.670878][ T5831] [pid 5838] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5833] <... clone3 resumed> => {parent_tid=[5838]}, 88) = 5838 [pid 5837] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5832] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... rseq resumed>) = 0 [pid 5837] <... rseq resumed>) = 0 [pid 5833] rt_sigprocmask(SIG_SETMASK, [], [pid 5832] <... futex resumed>) = 1 [pid 5838] set_robust_list(0x7f91a50869a0, 24 [pid 5837] set_robust_list(0x7f91a50869a0, 24 [pid 5833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5832] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] <... set_robust_list resumed>) = 0 [pid 5837] <... set_robust_list resumed>) = 0 [pid 5833] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] rt_sigprocmask(SIG_SETMASK, [], [pid 5837] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] <... futex resumed>) = 0 [pid 5838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5838] mkdir(".", 0777 [pid 5833] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5838] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5837] mkdir(".", 0777 [pid 5838] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5828] <... futex resumed>) = 0 [pid 5837] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5828] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5828] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... rename resumed>) = -1 EIO (Input/output error) [pid 5837] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5832] <... futex resumed>) = 0 [pid 5832] rename("./file2", "./file1" [pid 5837] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5834] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5838] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5837] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = 0 [pid 5837] <... futex resumed>) = 1 [pid 5829] <... futex resumed>) = 0 [pid 5838] <... futex resumed>) = 1 [pid 5837] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] <... futex resumed>) = 0 [pid 5827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5838] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] exit_group(0 [pid 5827] <... mmap resumed>) = 0x7f91a5066000 [pid 5838] <... futex resumed>) = ? [pid 5833] <... exit_group resumed>) = ? [pid 5827] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5838] +++ exited with 0 +++ [pid 5834] <... futex resumed>) = ? [pid 5827] <... mprotect resumed>) = 0 [pid 5827] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5834] +++ exited with 0 +++ [pid 5833] +++ exited with 0 +++ [pid 5827] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5827] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5057] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5839 attached ) = -1 EINVAL (Invalid argument) [pid 5839] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5057] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./46/binderfs") = 0 [pid 5057] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5839] <... rseq resumed>) = 0 [pid 5827] <... clone3 resumed> => {parent_tid=[5839]}, 88) = 5839 [pid 5839] set_robust_list(0x7f91a50869a0, 24 [pid 5827] rt_sigprocmask(SIG_SETMASK, [], [pid 5839] <... set_robust_list resumed>) = 0 [pid 5839] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5839] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5828] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5828] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5828] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5828] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5828] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5828] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5840]}, 88) = 5840 [pid 5828] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5828] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 102.670912][ T5830] ERROR: (device loop4): remounting filesystem as read-only [ 102.687160][ T5832] ERROR: (device loop5): diWrite: ixpxd invalid [ 102.687160][ T5832] [ 102.708005][ T5831] ERROR: (device loop2): remounting filesystem as read-only [ 102.715697][ T5832] ERROR: (device loop5): remounting filesystem as read-only [ 102.718536][ T5830] ERROR: (device loop4): txAbort: [pid 5828] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5840 attached [pid 5827] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5827] <... futex resumed>) = 1 [pid 5840] set_robust_list(0x7f91a50869a0, 24 [pid 5839] <... futex resumed>) = 0 [pid 5840] <... set_robust_list resumed>) = 0 [pid 5839] mkdir(".", 0777 [pid 5840] rt_sigprocmask(SIG_SETMASK, [], [pid 5839] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5827] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5840] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5840] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5839] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5839] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] <... futex resumed>) = 0 [pid 5831] <... rename resumed>) = -1 EIO (Input/output error) [pid 5831] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5831] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] <... umount2 resumed>) = 0 [pid 5829] exit_group(0 [pid 5831] <... futex resumed>) = ? [pid 5829] <... exit_group resumed>) = ? [pid 5831] +++ exited with 0 +++ [pid 5830] <... rename resumed>) = -1 EIO (Input/output error) [pid 5840] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5837] <... futex resumed>) = ? [pid 5832] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5830] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5830] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] +++ exited with 0 +++ [pid 5829] +++ exited with 0 +++ [pid 5840] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5840] <... futex resumed>) = 1 [pid 5832] <... futex resumed>) = 0 [pid 5828] <... futex resumed>) = 0 [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5829, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5057] newfstatat(AT_FDCWD, "./46/file2", [pid 5840] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5832] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5828] exit_group(0 [pid 5058] restart_syscall(<... resuming interrupted clone ...> [pid 5840] <... futex resumed>) = ? [pid 5832] <... futex resumed>) = ? [pid 5828] <... exit_group resumed>) = ? [pid 5058] <... restart_syscall resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5840] +++ exited with 0 +++ [pid 5058] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5827] exit_group(0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5839] <... futex resumed>) = ? [pid 5830] <... futex resumed>) = ? [pid 5827] <... exit_group resumed>) = ? [pid 5058] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5839] +++ exited with 0 +++ [pid 5830] +++ exited with 0 +++ [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./46/binderfs") = 0 [pid 5058] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] openat(AT_FDCWD, "./46/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5827, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5057] <... openat resumed>) = 4 [pid 5832] +++ exited with 0 +++ [pid 5828] +++ exited with 0 +++ [pid 5057] newfstatat(4, "", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5828, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] getdents64(4, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] getdents64(4, [pid 5060] <... openat resumed>) = 3 [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] newfstatat(3, "", [pid 5057] close(4 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(3, [pid 5057] <... close resumed>) = 0 [pid 5057] rmdir("./46/file2" [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] <... umount2 resumed>) = 0 [pid 5057] getdents64(3, [pid 5063] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5060] newfstatat(AT_FDCWD, "./44/binderfs", [pid 5063] newfstatat(3, "", [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, [pid 5058] newfstatat(AT_FDCWD, "./46/file2", [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5060] unlink("./44/binderfs" [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] <... close resumed>) = 0 [pid 5063] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... unlink resumed>) = 0 [pid 5058] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] rmdir("./46" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./45/binderfs", [pid 5058] openat(AT_FDCWD, "./46/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] <... openat resumed>) = 4 [pid 5057] <... rmdir resumed>) = 0 [pid 5063] unlink("./45/binderfs" [pid 5058] newfstatat(4, "", [pid 5063] <... unlink resumed>) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] mkdir("./47", 0777 [pid 5063] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] <... mkdir resumed>) = 0 [pid 5058] close(4 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5058] <... close resumed>) = 0 [pid 5058] rmdir("./46/file2") = 0 [pid 5057] <... openat resumed>) = 3 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5058] close(3) = 0 [pid 5058] rmdir("./46") = 0 [pid 5058] mkdir("./47", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5060] <... umount2 resumed>) = 0 [ 102.718536][ T5830] [ 102.736655][ T5830] ERROR: (device loop4): remounting filesystem as read-only [ 102.741049][ T5832] ERROR: (device loop5): txAbort: [ 102.741049][ T5832] [pid 5060] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5060] newfstatat(AT_FDCWD, "./44/file2", [pid 5063] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./44/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5836] <... write resumed>) = 16777216 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] munmap(0x7f919cc00000, 138412032 [pid 5060] openat(AT_FDCWD, "./44/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./45/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./45/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] <... openat resumed>) = 4 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5060] newfstatat(4, "", [pid 5063] rmdir("./45/file2" [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4 [pid 5063] getdents64(3, [pid 5060] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] rmdir("./44/file2" [pid 5063] close(3 [pid 5060] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] getdents64(3, [pid 5063] rmdir("./45" [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./44") = 0 [pid 5063] mkdir("./46", 0777 [pid 5060] mkdir("./45", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5060] <... openat resumed>) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5836] <... munmap resumed>) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5836] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5836] close(3) = 0 [pid 5836] close(4) = 0 [pid 5836] mkdir("./file2", 0777) = 0 [ 102.844393][ T5836] loop0: detected capacity change from 0 to 32768 [pid 5836] mount("/dev/loop0", "./file2", "jfs", 0, "") = 0 [pid 5836] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5836] chdir("./file2") = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5836] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5835] <... futex resumed>) = 0 [pid 5836] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5835] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] rename("./file2", "./file1" [pid 5835] <... futex resumed>) = 0 [pid 5835] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... ioctl resumed>) = 0 [pid 5835] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5835] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5835] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5835] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5841]}, 88) = 5841 [pid 5835] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5835] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5841 attached ) = 0 [pid 5841] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5835] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] close(3 [pid 5841] <... rseq resumed>) = 0 [pid 5058] <... close resumed>) = 0 [pid 5841] set_robust_list(0x7f91a50869a0, 24 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5841] <... set_robust_list resumed>) = 0 [pid 5841] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5842 [pid 5841] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5841] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5842 attached [pid 5842] set_robust_list(0x5555565206a0, 24) = 0 [pid 5842] chdir("./47" [pid 5841] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] <... chdir resumed>) = 0 [pid 5841] <... futex resumed>) = 1 [pid 5835] <... futex resumed>) = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5841] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5842] <... prctl resumed>) = 0 [pid 5842] setpgid(0, 0) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] write(3, "1000", 4) = 4 [pid 5842] close(3) = 0 [pid 5842] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5842] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5842] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5842] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5842] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5842] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [ 102.929092][ T5836] ERROR: (device loop0): diWrite: ixpxd invalid [ 102.929092][ T5836] [ 102.961397][ T5836] ERROR: (device loop0): remounting filesystem as read-only [ 102.968710][ T5836] ERROR: (device loop0): txAbort: [ 102.968710][ T5836] [pid 5842] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5842] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5843]}, 88) = 5843 [pid 5842] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5842] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5842] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5843 attached [pid 5843] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5063] <... ioctl resumed>) = 0 [pid 5843] <... rseq resumed>) = 0 [pid 5836] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] <... ioctl resumed>) = 0 [pid 5843] set_robust_list(0x7f91a50a79a0, 24 [pid 5836] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] exit_group(0 [pid 5063] close(3 [pid 5057] close(3 [pid 5843] <... set_robust_list resumed>) = 0 [pid 5841] <... futex resumed>) = ? [pid 5836] <... futex resumed>) = ? [pid 5835] <... exit_group resumed>) = ? [pid 5063] <... close resumed>) = 0 [pid 5843] rt_sigprocmask(SIG_SETMASK, [], [pid 5841] +++ exited with 0 +++ [pid 5836] +++ exited with 0 +++ [pid 5835] +++ exited with 0 +++ [pid 5057] <... close resumed>) = 0 [pid 5843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=15 /* 0.15 s */} --- [pid 5056] restart_syscall(<... resuming interrupted clone ...> [pid 5843] memfd_create("syzkaller", 0 [pid 5056] <... restart_syscall resumed>) = 0 [pid 5843] <... memfd_create resumed>) = 3 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5844 attached [pid 5844] set_robust_list(0x5555565206a0, 24 [pid 5843] <... mmap resumed>) = 0x7f919cc00000 [pid 5056] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5844] <... set_robust_list resumed>) = 0 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5844 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5845 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [ 103.010971][ T5836] ERROR: (device loop0): remounting filesystem as read-only [pid 5056] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5844] chdir("./46"./strace-static-x86_64: Process 5845 attached ) = 0 [pid 5845] set_robust_list(0x5555565206a0, 24 [pid 5056] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./46/binderfs") = 0 [pid 5056] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5845] <... set_robust_list resumed>) = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5845] chdir("./47" [pid 5844] <... prctl resumed>) = 0 [pid 5845] <... chdir resumed>) = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5844] setpgid(0, 0 [pid 5845] <... prctl resumed>) = 0 [pid 5844] <... setpgid resumed>) = 0 [pid 5845] setpgid(0, 0) = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5844] write(3, "1000", 4) = 4 [pid 5844] close(3) = 0 [pid 5844] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5844] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5844] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5056] <... umount2 resumed>) = 0 [pid 5844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5845] <... openat resumed>) = 3 [pid 5844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5056] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5845] write(3, "1000", 4 [pid 5844] <... mmap resumed>) = 0x7f91a5087000 [pid 5060] close(3 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5845] <... write resumed>) = 4 [pid 5844] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5845] close(3) = 0 [pid 5845] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5845] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... mprotect resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5056] newfstatat(AT_FDCWD, "./46/file2", [pid 5845] <... futex resumed>) = 0 [pid 5844] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5845] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5844] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5056] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5846 [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5847 attached [pid 5056] openat(AT_FDCWD, "./46/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5847] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5844] <... clone3 resumed> => {parent_tid=[5847]}, 88) = 5847 [pid 5056] <... openat resumed>) = 4 [pid 5847] <... rseq resumed>) = 0 [pid 5844] rt_sigprocmask(SIG_SETMASK, [], [pid 5056] newfstatat(4, "", [pid 5847] set_robust_list(0x7f91a50a79a0, 24 [pid 5844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5846 attached [pid 5847] <... set_robust_list resumed>) = 0 [pid 5845] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5844] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5056] getdents64(4, [pid 5847] rt_sigprocmask(SIG_SETMASK, [], [pid 5846] set_robust_list(0x5555565206a0, 24 [pid 5845] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5844] <... futex resumed>) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5847] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5844] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] getdents64(4, [pid 5847] memfd_create("syzkaller", 0 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5847] <... memfd_create resumed>) = 3 [pid 5056] close(4 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5056] <... close resumed>) = 0 [pid 5847] <... mmap resumed>) = 0x7f919cc00000 [pid 5056] rmdir("./46/file2" [pid 5845] <... mmap resumed>) = 0x7f91a5087000 [pid 5846] chdir("./45" [pid 5845] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5056] <... rmdir resumed>) = 0 [pid 5846] <... chdir resumed>) = 0 [pid 5845] <... mprotect resumed>) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./46") = 0 [pid 5056] mkdir("./47", 0777 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5845] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5056] <... mkdir resumed>) = 0 [pid 5846] <... prctl resumed>) = 0 [pid 5846] setpgid(0, 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5846] <... setpgid resumed>) = 0 [pid 5845] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5056] <... openat resumed>) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5845] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5845] <... clone3 resumed> => {parent_tid=[5848]}, 88) = 5848 [pid 5845] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5848 attached [pid 5848] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5845] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5848] <... rseq resumed>) = 0 [pid 5846] <... openat resumed>) = 3 [pid 5845] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5848] set_robust_list(0x7f91a50a79a0, 24 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5846] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5846] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5846] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5846] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5846] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5849]}, 88) = 5849 [pid 5848] <... set_robust_list resumed>) = 0 [pid 5846] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5846] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5849 attached [pid 5848] rt_sigprocmask(SIG_SETMASK, [], [pid 5849] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5848] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5849] <... rseq resumed>) = 0 [pid 5848] memfd_create("syzkaller", 0 [pid 5849] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5848] <... memfd_create resumed>) = 3 [pid 5849] rt_sigprocmask(SIG_SETMASK, [], [pid 5848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5849] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5848] <... mmap resumed>) = 0x7f919cc00000 [pid 5849] memfd_create("syzkaller", 0) = 3 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5843] <... write resumed>) = 16777216 [pid 5843] munmap(0x7f919cc00000, 138412032) = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5843] <... openat resumed>) = 4 [pid 5843] ioctl(4, LOOP_SET_FD, 3 [pid 5056] <... ioctl resumed>) = 0 [pid 5843] <... ioctl resumed>) = 0 [pid 5843] close(3) = 0 [pid 5843] close(4) = 0 [pid 5056] close(3 [pid 5843] mkdir("./file2", 0777) = 0 [pid 5056] <... close resumed>) = 0 [pid 5843] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5850 attached [pid 5843] <... mount resumed>) = 0 [pid 5850] set_robust_list(0x5555565206a0, 24 [pid 5843] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5056] <... clone resumed>, child_tidptr=0x555556520690) = 5850 [pid 5850] <... set_robust_list resumed>) = 0 [pid 5843] <... openat resumed>) = 3 [pid 5850] chdir("./47" [pid 5843] chdir("./file2" [pid 5850] <... chdir resumed>) = 0 [pid 5843] <... chdir resumed>) = 0 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5843] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5850] <... prctl resumed>) = 0 [pid 5843] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] setpgid(0, 0 [pid 5843] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [ 103.409871][ T5843] loop2: detected capacity change from 0 to 32768 [pid 5850] <... setpgid resumed>) = 0 [pid 5843] <... futex resumed>) = 1 [pid 5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5843] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5842] <... futex resumed>) = 0 [pid 5850] <... openat resumed>) = 3 [pid 5842] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] write(3, "1000", 4 [pid 5843] <... futex resumed>) = 0 [pid 5842] <... futex resumed>) = 1 [pid 5850] <... write resumed>) = 4 [pid 5843] rename("./file2", "./file1" [pid 5842] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] close(3) = 0 [pid 5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5850] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5850] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5850] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5850] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5850] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5850] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5842] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5842] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5850] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5842] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [ 103.473963][ T5843] ERROR: (device loop2): diWrite: ixpxd invalid [ 103.473963][ T5843] [ 103.492936][ T5843] ERROR: (device loop2): remounting filesystem as read-only [pid 5842] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5850] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5842] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5842] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5852]}, 88) = 5852 [pid 5842] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5842] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5842] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5852 attached ./strace-static-x86_64: Process 5851 attached [pid 5850] <... clone3 resumed> => {parent_tid=[5851]}, 88) = 5851 [pid 5851] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5851] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5851] rt_sigprocmask(SIG_SETMASK, [], [pid 5852] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5851] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5852] <... rseq resumed>) = 0 [pid 5851] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5852] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5852] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5852] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5852] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5850] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5847] <... write resumed>) = 16777216 [pid 5852] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5847] munmap(0x7f919cc00000, 138412032 [pid 5852] <... futex resumed>) = 1 [pid 5851] <... futex resumed>) = 0 [pid 5850] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5842] <... futex resumed>) = 0 [pid 5852] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] memfd_create("syzkaller", 0) = 3 [pid 5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5847] <... munmap resumed>) = 0 [pid 5843] <... rename resumed>) = -1 EIO (Input/output error) [pid 5843] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5843] <... futex resumed>) = 0 [pid 5847] <... openat resumed>) = 4 [pid 5843] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5842] exit_group(0 [pid 5852] <... futex resumed>) = ? [ 103.531071][ T5843] ERROR: (device loop2): txAbort: [ 103.531071][ T5843] [ 103.543854][ T5843] ERROR: (device loop2): remounting filesystem as read-only [pid 5847] ioctl(4, LOOP_SET_FD, 3 [pid 5843] <... futex resumed>) = ? [pid 5842] <... exit_group resumed>) = ? [pid 5852] +++ exited with 0 +++ [pid 5843] +++ exited with 0 +++ [pid 5842] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5058] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5847] <... ioctl resumed>) = 0 [pid 5058] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5847] close(3) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./47/binderfs") = 0 [pid 5058] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5847] close(4) = 0 [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./47/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5847] mkdir("./file2", 0777) = 0 [pid 5847] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5058] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./47/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [ 103.583768][ T5847] loop5: detected capacity change from 0 to 32768 [pid 5058] rmdir("./47/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./47" [pid 5847] <... mount resumed>) = 0 [pid 5058] <... rmdir resumed>) = 0 [pid 5058] mkdir("./48", 0777) = 0 [pid 5847] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] chdir("./file2") = 0 [pid 5058] <... openat resumed>) = 3 [pid 5847] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5847] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5847] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5844] <... futex resumed>) = 0 [pid 5847] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] rename("./file2", "./file1" [pid 5844] <... futex resumed>) = 0 [pid 5844] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5848] <... write resumed>) = 16777216 [pid 5849] <... write resumed>) = 16777216 [pid 5848] munmap(0x7f919cc00000, 138412032 [pid 5849] munmap(0x7f919cc00000, 138412032) = 0 [pid 5848] <... munmap resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 103.686086][ T5847] ERROR: (device loop5): diWrite: ixpxd invalid [ 103.686086][ T5847] [ 103.723493][ T5847] ERROR: (device loop5): remounting filesystem as read-only [ 103.730778][ T5847] ERROR: (device loop5): txAbort: [pid 5848] ioctl(4, LOOP_SET_FD, 3 [pid 5849] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5844] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] <... openat resumed>) = 4 [pid 5844] <... futex resumed>) = 0 [pid 5844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] ioctl(4, LOOP_SET_FD, 3 [pid 5848] <... ioctl resumed>) = 0 [pid 5844] <... mmap resumed>) = 0x7f91a5066000 [pid 5847] <... rename resumed>) = -1 EIO (Input/output error) [pid 5849] <... ioctl resumed>) = 0 [pid 5849] close(3 [pid 5848] close(3 [pid 5847] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5847] <... futex resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5847] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5849] close(4 [pid 5848] <... close resumed>) = 0 [pid 5844] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5848] close(4 [pid 5844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5848] <... close resumed>) = 0 [pid 5848] mkdir("./file2", 0777./strace-static-x86_64: Process 5853 attached [pid 5853] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5849] <... close resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5844] <... clone3 resumed> => {parent_tid=[5853]}, 88) = 5853 [pid 5853] <... rseq resumed>) = 0 [pid 5848] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5844] rt_sigprocmask(SIG_SETMASK, [], [pid 5853] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5853] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5853] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] mkdir("./file2", 0777) = 0 [pid 5844] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5844] <... futex resumed>) = 1 [pid 5853] <... futex resumed>) = 0 [ 103.730778][ T5847] [ 103.733368][ T5848] loop1: detected capacity change from 0 to 32768 [ 103.754171][ T5849] loop4: detected capacity change from 0 to 32768 [pid 5844] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5849] <... mount resumed>) = 0 [pid 5849] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5849] chdir("./file2") = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] <... futex resumed>) = 0 [pid 5846] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] <... mount resumed>) = 0 [pid 5846] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 0 [pid 5849] rename("./file2", "./file1" [pid 5853] mkdir(".", 0777 [pid 5848] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5846] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5848] <... openat resumed>) = 3 [pid 5853] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5848] chdir("./file2") = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5853] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5853] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5848] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] <... futex resumed>) = 1 [pid 5848] <... futex resumed>) = 1 [pid 5845] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = 0 [ 103.801886][ T5849] ERROR: (device loop4): diWrite: ixpxd invalid [ 103.801886][ T5849] [ 103.824162][ T5849] ERROR: (device loop4): remounting filesystem as read-only [ 103.844672][ T5849] ERROR: (device loop4): txAbort: [ 103.844672][ T5849] [pid 5853] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] exit_group(0 [pid 5853] <... futex resumed>) = ? [pid 5848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5847] <... futex resumed>) = ? [pid 5845] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... exit_group resumed>) = ? [pid 5848] rename("./file2", "./file1" [pid 5847] +++ exited with 0 +++ [pid 5845] <... futex resumed>) = 0 [pid 5846] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5845] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5849] <... rename resumed>) = -1 EIO (Input/output error) [pid 5853] +++ exited with 0 +++ [pid 5846] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5846] <... futex resumed>) = 0 [pid 5846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5846] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5063] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5846] <... mprotect resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5846] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5063] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5846] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5846] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5854 attached [pid 5849] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(3, "", [pid 5849] <... futex resumed>) = 0 [pid 5849] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] <... clone3 resumed> => {parent_tid=[5854]}, 88) = 5854 [pid 5854] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5854] <... rseq resumed>) = 0 [pid 5846] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5854] set_robust_list(0x7f91a50869a0, 24 [pid 5058] <... ioctl resumed>) = 0 [pid 5854] <... set_robust_list resumed>) = 0 [pid 5851] <... write resumed>) = 16777216 [pid 5848] <... rename resumed>) = -1 EIO (Input/output error) [pid 5846] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] getdents64(3, [pid 5854] rt_sigprocmask(SIG_SETMASK, [], [pid 5851] munmap(0x7f919cc00000, 138412032 [pid 5848] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... futex resumed>) = 0 [pid 5058] close(3 [pid 5854] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5851] <... munmap resumed>) = 0 [pid 5848] <... futex resumed>) = 1 [pid 5846] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5845] <... futex resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5854] mkdir(".", 0777 [pid 5845] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5845] <... futex resumed>) = 0 [pid 5854] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5845] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5854] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] newfstatat(AT_FDCWD, "./46/binderfs", [pid 5058] <... close resumed>) = 0 [pid 5854] <... futex resumed>) = 1 [pid 5848] mkdir(".", 0777 [pid 5846] <... futex resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5854] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5848] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5851] <... openat resumed>) = 4 [pid 5848] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5846] exit_group(0 [pid 5063] unlink("./46/binderfs"./strace-static-x86_64: Process 5855 attached [pid 5854] <... futex resumed>) = ? [pid 5851] ioctl(4, LOOP_SET_FD, 3 [pid 5849] <... futex resumed>) = ? [pid 5846] <... exit_group resumed>) = ? [pid 5063] <... unlink resumed>) = 0 [pid 5855] set_robust_list(0x5555565206a0, 24 [pid 5854] +++ exited with 0 +++ [pid 5849] +++ exited with 0 +++ [pid 5848] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5855] <... set_robust_list resumed>) = 0 [pid 5848] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5855 [ 103.845100][ T5848] ERROR: (device loop1): diWrite: ixpxd invalid [ 103.845100][ T5848] [ 103.871172][ T5848] ERROR: (device loop1): remounting filesystem as read-only [ 103.880819][ T5848] ERROR: (device loop1): txAbort: [ 103.880819][ T5848] [pid 5855] chdir("./48" [pid 5848] <... futex resumed>) = 1 [pid 5855] <... chdir resumed>) = 0 [pid 5848] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] setpgid(0, 0) = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1000", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] symlink("/dev/binderfs", "./binderfs" [pid 5851] <... ioctl resumed>) = 0 [pid 5846] +++ exited with 0 +++ [pid 5845] <... futex resumed>) = 0 [pid 5063] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5855] <... symlink resumed>) = 0 [pid 5851] close(3 [pid 5845] exit_group(0 [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=18 /* 0.18 s */} --- [pid 5855] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5060] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5855] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5855] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5060] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5855] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5060] <... openat resumed>) = 3 [pid 5855] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5060] newfstatat(3, "", [pid 5855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5855] <... mmap resumed>) = 0x7f91a5087000 [pid 5060] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5855] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5060] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5855] <... mprotect resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5855] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5060] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./45/binderfs") = 0 [pid 5855] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5060] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5856]}, 88) = 5856 [pid 5855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5855] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5855] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5851] <... close resumed>) = 0 ./strace-static-x86_64: Process 5856 attached [pid 5848] <... futex resumed>) = ? [pid 5845] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = 0 [pid 5060] <... umount2 resumed>) = 0 [pid 5856] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5851] close(4 [pid 5848] +++ exited with 0 +++ [pid 5063] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5856] <... rseq resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5856] set_robust_list(0x7f91a50a79a0, 24 [pid 5851] <... close resumed>) = 0 [pid 5856] <... set_robust_list resumed>) = 0 [pid 5851] mkdir("./file2", 0777 [pid 5856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5063] newfstatat(AT_FDCWD, "./46/file2", [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5856] memfd_create("syzkaller", 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5856] <... memfd_create resumed>) = 3 [pid 5060] newfstatat(AT_FDCWD, "./45/file2", [pid 5856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5856] <... mmap resumed>) = 0x7f919cc00000 [pid 5851] <... mkdir resumed>) = 0 [pid 5845] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5851] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5060] umount2("./45/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] openat(AT_FDCWD, "./45/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5060] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "./46/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] getdents64(4, [pid 5063] <... openat resumed>) = 4 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] newfstatat(4, "", [pid 5060] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5060] close(4 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5060] <... close resumed>) = 0 [pid 5057] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5060] rmdir("./45/file2" [pid 5057] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] <... rmdir resumed>) = 0 [pid 5057] newfstatat(3, "", [pid 5063] close(4 [pid 5060] getdents64(3, [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... close resumed>) = 0 [pid 5060] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] getdents64(3, [pid 5063] rmdir("./46/file2" [pid 5060] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(3, [pid 5060] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [ 103.927962][ T5851] loop0: detected capacity change from 0 to 32768 [pid 5060] rmdir("./45" [pid 5851] <... mount resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5060] <... rmdir resumed>) = 0 [pid 5057] newfstatat(AT_FDCWD, "./47/binderfs", [pid 5063] rmdir("./46" [pid 5851] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./47/binderfs" [pid 5060] mkdir("./46", 0777 [pid 5851] chdir("./file2" [pid 5060] <... mkdir resumed>) = 0 [pid 5057] <... unlink resumed>) = 0 [pid 5057] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5851] <... chdir resumed>) = 0 [pid 5063] mkdir("./47", 0777 [pid 5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... mkdir resumed>) = 0 [pid 5851] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5850] <... futex resumed>) = 0 [pid 5851] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5850] <... futex resumed>) = 0 [pid 5850] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5851] rename("./file2", "./file1" [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./47/file2", [pid 5851] <... rename resumed>) = -1 EIO (Input/output error) [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5851] <... futex resumed>) = 1 [pid 5850] <... futex resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] openat(AT_FDCWD, "./47/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5850] <... futex resumed>) = 0 [pid 5057] <... openat resumed>) = 4 [pid 5851] mkdir(".", 0777 [pid 5850] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5057] newfstatat(4, "", [pid 5851] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5057] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5851] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5057] close(4 [pid 5851] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5057] <... close resumed>) = 0 [pid 5057] rmdir("./47/file2") = 0 [pid 5851] <... futex resumed>) = 1 [pid 5850] <... futex resumed>) = 0 [pid 5057] getdents64(3, [pid 5851] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] exit_group(0 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3 [pid 5850] <... exit_group resumed>) = ? [pid 5057] <... close resumed>) = 0 [pid 5057] rmdir("./47") = 0 [pid 5851] <... futex resumed>) = ? [pid 5057] mkdir("./48", 0777) = 0 [ 103.996650][ T5851] ERROR: (device loop0): diWrite: ixpxd invalid [ 103.996650][ T5851] [ 104.012638][ T5851] ERROR: (device loop0): remounting filesystem as read-only [ 104.020076][ T5851] ERROR: (device loop0): txAbort: [ 104.020076][ T5851] [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5851] +++ exited with 0 +++ [pid 5850] +++ exited with 0 +++ [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5850, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=13 /* 0.13 s */} --- [pid 5056] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5056] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./47/binderfs") = 0 [pid 5056] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5056] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./47/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./47/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5056] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] close(4) = 0 [pid 5056] rmdir("./47/file2") = 0 [pid 5056] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3) = 0 [pid 5056] rmdir("./47") = 0 [pid 5056] mkdir("./48", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5857 attached [pid 5857] set_robust_list(0x5555565206a0, 24) = 0 [pid 5857] chdir("./47") = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] setpgid(0, 0) = 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5857] write(3, "1000", 4) = 4 [pid 5857] close(3) = 0 [pid 5857] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5857] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5857] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... clone resumed>, child_tidptr=0x555556520690) = 5857 [pid 5857] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5857] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5857] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5857] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5858]}, 88) = 5858 ./strace-static-x86_64: Process 5858 attached [pid 5857] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5857] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5858] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5858] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5858] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5858] memfd_create("syzkaller", 0 [pid 5060] close(3 [pid 5858] <... memfd_create resumed>) = 3 [pid 5060] <... close resumed>) = 0 [pid 5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5858] <... mmap resumed>) = 0x7f919cc00000 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5859 ./strace-static-x86_64: Process 5859 attached [pid 5859] set_robust_list(0x5555565206a0, 24) = 0 [pid 5859] chdir("./46") = 0 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5859] setpgid(0, 0) = 0 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5859] write(3, "1000", 4) = 4 [pid 5859] close(3) = 0 [pid 5859] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5859] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5859] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5859] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5859] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5859] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5859] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5860]}, 88) = 5860 ./strace-static-x86_64: Process 5860 attached [pid 5860] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5860] set_robust_list(0x7f91a50a79a0, 24 [pid 5859] rt_sigprocmask(SIG_SETMASK, [], [pid 5860] <... set_robust_list resumed>) = 0 [pid 5860] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5860] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] <... write resumed>) = 16777216 [pid 5859] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5859] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] <... futex resumed>) = 0 [pid 5859] <... futex resumed>) = 1 [pid 5860] memfd_create("syzkaller", 0 [pid 5859] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5856] munmap(0x7f919cc00000, 138412032 [pid 5860] <... memfd_create resumed>) = 3 [pid 5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5856] <... munmap resumed>) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5856] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5057] <... ioctl resumed>) = 0 [pid 5856] <... openat resumed>) = 4 [pid 5056] close(3) = 0 [pid 5856] ioctl(4, LOOP_SET_FD, 3 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5861 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5861 attached [pid 5856] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5862 attached [pid 5861] set_robust_list(0x5555565206a0, 24 [pid 5856] close(3 [pid 5862] set_robust_list(0x5555565206a0, 24 [pid 5861] <... set_robust_list resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5862] <... set_robust_list resumed>) = 0 [pid 5862] chdir("./48" [pid 5856] close(4 [pid 5057] <... clone resumed>, child_tidptr=0x555556520690) = 5862 [pid 5861] chdir("./48" [pid 5862] <... chdir resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5861] <... chdir resumed>) = 0 [pid 5856] mkdir("./file2", 0777 [pid 5862] <... prctl resumed>) = 0 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5862] setpgid(0, 0 [pid 5861] <... prctl resumed>) = 0 [pid 5856] <... mkdir resumed>) = 0 [pid 5862] <... setpgid resumed>) = 0 [pid 5861] setpgid(0, 0 [pid 5856] mount("/dev/loop2", "./file2", "jfs", 0, "" [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5861] <... setpgid resumed>) = 0 [pid 5856] <... mount resumed>) = 0 [pid 5862] <... openat resumed>) = 3 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5856] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5862] write(3, "1000", 4) = 4 [pid 5861] <... openat resumed>) = 3 [pid 5856] <... openat resumed>) = 3 [pid 5862] close(3 [pid 5861] write(3, "1000", 4 [pid 5856] chdir("./file2" [pid 5862] <... close resumed>) = 0 [pid 5861] <... write resumed>) = 4 [pid 5856] <... chdir resumed>) = 0 [pid 5862] symlink("/dev/binderfs", "./binderfs" [pid 5861] close(3 [pid 5856] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5861] <... close resumed>) = 0 [pid 5862] <... symlink resumed>) = 0 [pid 5861] symlink("/dev/binderfs", "./binderfs" [pid 5856] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5861] <... symlink resumed>) = 0 [pid 5856] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] <... futex resumed>) = 1 [pid 5862] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] <... futex resumed>) = 0 [pid 5856] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5855] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 0 [pid 5861] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5855] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5861] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5856] <... futex resumed>) = 0 [pid 5855] <... futex resumed>) = 1 [pid 5862] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5861] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5856] rename("./file2", "./file1" [pid 5855] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 104.382046][ T5856] loop2: detected capacity change from 0 to 32768 [pid 5862] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5861] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5862] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5861] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5862] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5861] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5862] <... mprotect resumed>) = 0 [pid 5861] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5861] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5863]}, 88) = 5863 [pid 5862] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5861] rt_sigprocmask(SIG_SETMASK, [], [pid 5862] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5861] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5863 attached [pid 5863] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5863] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5863] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5863] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5864 attached [pid 5864] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5862] <... clone3 resumed> => {parent_tid=[5864]}, 88) = 5864 [pid 5861] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] rt_sigprocmask(SIG_SETMASK, [], [pid 5861] <... futex resumed>) = 1 [pid 5864] <... rseq resumed>) = 0 [pid 5862] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5864] set_robust_list(0x7f91a50a79a0, 24 [pid 5862] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5864] <... set_robust_list resumed>) = 0 [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 0 [pid 5864] rt_sigprocmask(SIG_SETMASK, [], [pid 5862] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5864] memfd_create("syzkaller", 0) = 3 [pid 5855] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5855] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5855] <... futex resumed>) = 0 [pid 5855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5864] <... mmap resumed>) = 0x7f919cc00000 [pid 5863] memfd_create("syzkaller", 0 [pid 5855] <... mmap resumed>) = 0x7f91a5066000 [pid 5863] <... memfd_create resumed>) = 3 [pid 5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5855] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5855] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5855] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5865 attached [pid 5856] <... rename resumed>) = -1 EIO (Input/output error) [pid 5865] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5865] set_robust_list(0x7f91a50869a0, 24 [pid 5856] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5865] <... set_robust_list resumed>) = 0 [pid 5856] <... futex resumed>) = 0 [pid 5865] rt_sigprocmask(SIG_SETMASK, [], [pid 5856] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5855] <... clone3 resumed> => {parent_tid=[5865]}, 88) = 5865 [pid 5865] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5865] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5855] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5855] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5865] <... futex resumed>) = 0 [pid 5855] <... futex resumed>) = 1 [pid 5865] mkdir(".", 0777 [pid 5855] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5865] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5865] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [ 104.422749][ T5856] ERROR: (device loop2): diWrite: ixpxd invalid [ 104.422749][ T5856] [ 104.447152][ T5856] ERROR: (device loop2): remounting filesystem as read-only [ 104.458836][ T5856] ERROR: (device loop2): txAbort: [ 104.458836][ T5856] [pid 5865] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5855] <... futex resumed>) = 0 [pid 5865] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5855] exit_group(0 [pid 5865] <... futex resumed>) = ? [pid 5856] <... futex resumed>) = ? [pid 5855] <... exit_group resumed>) = ? [pid 5865] +++ exited with 0 +++ [pid 5856] +++ exited with 0 +++ [pid 5855] +++ exited with 0 +++ [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=15 /* 0.15 s */} --- [pid 5058] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5058] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./48/binderfs") = 0 [pid 5058] umount2("./48/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5058] umount2("./48/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./48/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./48/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./48/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./48/file2" [pid 5860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5058] <... rmdir resumed>) = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./48") = 0 [pid 5058] mkdir("./49", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5863] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5858] <... write resumed>) = 16777216 [pid 5858] munmap(0x7f919cc00000, 138412032) = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5858] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5858] close(3) = 0 [pid 5858] close(4) = 0 [ 104.714616][ T5858] loop5: detected capacity change from 0 to 32768 [pid 5858] mkdir("./file2", 0777 [pid 5860] <... write resumed>) = 16777216 [pid 5858] <... mkdir resumed>) = 0 [pid 5858] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5860] munmap(0x7f919cc00000, 138412032 [pid 5858] <... mount resumed>) = 0 [pid 5858] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5858] chdir("./file2") = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5858] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5857] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] rename("./file2", "./file1" [pid 5857] <... futex resumed>) = 0 [pid 5857] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] <... munmap resumed>) = 0 [ 104.802268][ T5858] ERROR: (device loop5): diWrite: ixpxd invalid [ 104.802268][ T5858] [ 104.833419][ T5858] ERROR: (device loop5): remounting filesystem as read-only [ 104.834052][ T5860] loop4: detected capacity change from 0 to 32768 [ 104.840724][ T5858] ERROR: (device loop5): txAbort: [pid 5860] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5860] ioctl(4, LOOP_SET_FD, 3 [pid 5857] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5058] <... ioctl resumed>) = 0 [pid 5857] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5857] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5858] <... rename resumed>) = -1 EIO (Input/output error) [pid 5857] <... mprotect resumed>) = 0 [pid 5858] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5858] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5857] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} => {parent_tid=[5866]}, 88) = 5866 [pid 5857] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5857] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5866 attached [pid 5866] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5857] <... futex resumed>) = 0 [pid 5866] <... rseq resumed>) = 0 [pid 5857] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5866] set_robust_list(0x7f91a50869a0, 24 [pid 5860] <... ioctl resumed>) = 0 [pid 5866] <... set_robust_list resumed>) = 0 [pid 5860] close(3) = 0 [pid 5866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5860] close(4 [pid 5866] mkdir(".", 0777 [pid 5864] <... write resumed>) = 16777216 [pid 5860] <... close resumed>) = 0 [pid 5058] close(3 [pid 5866] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5864] munmap(0x7f919cc00000, 138412032 [pid 5860] mkdir("./file2", 0777 [pid 5058] <... close resumed>) = 0 [pid 5866] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5860] <... mkdir resumed>) = 0 [pid 5860] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5867 [ 104.840724][ T5858] [pid 5866] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5863] <... write resumed>) = 16777216 [pid 5863] munmap(0x7f919cc00000, 138412032./strace-static-x86_64: Process 5867 attached [pid 5867] set_robust_list(0x5555565206a0, 24) = 0 [pid 5867] chdir("./49") = 0 [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5867] setpgid(0, 0 [pid 5866] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] <... setpgid resumed>) = 0 [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5867] write(3, "1000", 4) = 4 [pid 5867] close(3) = 0 [pid 5867] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5866] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5866] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] exit_group(0 [pid 5866] <... futex resumed>) = ? [pid 5858] <... futex resumed>) = ? [pid 5857] <... exit_group resumed>) = ? [pid 5858] +++ exited with 0 +++ [pid 5867] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] +++ exited with 0 +++ [pid 5864] <... munmap resumed>) = 0 [pid 5860] <... mount resumed>) = 0 [pid 5857] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=22 /* 0.22 s */} --- [pid 5867] <... futex resumed>) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5860] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5867] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, [pid 5864] <... openat resumed>) = 4 [pid 5860] <... openat resumed>) = 3 [pid 5867] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5864] ioctl(4, LOOP_SET_FD, 3 [pid 5860] chdir("./file2" [pid 5063] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5867] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", [pid 5867] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5867] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5063] getdents64(3, [pid 5867] <... mmap resumed>) = 0x7f91a5087000 [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5867] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5063] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5867] <... mprotect resumed>) = 0 [pid 5864] <... ioctl resumed>) = 0 [pid 5863] <... munmap resumed>) = 0 [pid 5860] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5867] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5864] close(3 [pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] newfstatat(AT_FDCWD, "./47/binderfs", [pid 5860] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5867] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5864] <... close resumed>) = 0 [pid 5863] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5867] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5863] ioctl(4, LOOP_SET_FD, 3 [pid 5063] unlink("./47/binderfs"./strace-static-x86_64: Process 5868 attached ) = 0 [pid 5868] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5867] <... clone3 resumed> => {parent_tid=[5868]}, 88) = 5868 [pid 5063] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5868] <... rseq resumed>) = 0 [pid 5867] rt_sigprocmask(SIG_SETMASK, [], [pid 5868] set_robust_list(0x7f91a50a79a0, 24 [pid 5867] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5868] <... set_robust_list resumed>) = 0 [pid 5867] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5868] rt_sigprocmask(SIG_SETMASK, [], [pid 5867] <... futex resumed>) = 0 [pid 5868] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5867] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5868] memfd_create("syzkaller", 0) = 3 [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5860] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5864] close(4) = 0 [pid 5860] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] mkdir("./file2", 0777 [pid 5860] <... futex resumed>) = 1 [pid 5859] <... futex resumed>) = 0 [pid 5859] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] rename("./file2", "./file1" [pid 5859] <... futex resumed>) = 0 [pid 5859] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... mkdir resumed>) = 0 [pid 5864] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5863] <... ioctl resumed>) = 0 [pid 5863] close(3) = 0 [pid 5863] close(4) = 0 [pid 5863] mkdir("./file2", 0777) = 0 [ 104.917060][ T5864] loop1: detected capacity change from 0 to 32768 [ 104.928446][ T5863] loop0: detected capacity change from 0 to 32768 [ 104.937563][ T5860] ERROR: (device loop4): diWrite: ixpxd invalid [ 104.937563][ T5860] [pid 5863] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5864] <... mount resumed>) = 0 [pid 5863] <... mount resumed>) = 0 [pid 5863] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5864] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5863] <... openat resumed>) = 3 [pid 5864] chdir("./file2" [pid 5863] chdir("./file2" [pid 5864] <... chdir resumed>) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5863] <... chdir resumed>) = 0 [pid 5864] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5864] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5864] <... futex resumed>) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5864] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5862] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5862] <... futex resumed>) = 0 [pid 5859] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] rename("./file2", "./file1" [pid 5862] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... futex resumed>) = 0 [pid 5859] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5066000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./47/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./47/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./47/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./47/file2") = 0 [pid 5063] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./47" [pid 5860] <... rename resumed>) = -1 EIO (Input/output error) [pid 5063] <... rmdir resumed>) = 0 [pid 5860] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [ 104.963367][ T5860] ERROR: (device loop4): remounting filesystem as read-only [ 104.970652][ T5860] ERROR: (device loop4): txAbort: [ 104.970652][ T5860] [ 105.002641][ T5864] ERROR: (device loop1): diWrite: ixpxd invalid [ 105.002641][ T5864] [pid 5063] mkdir("./48", 0777 [pid 5863] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] <... futex resumed>) = 0 [pid 5859] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5860] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... mprotect resumed>) = 0 [pid 5863] <... futex resumed>) = 1 [pid 5861] <... futex resumed>) = 0 [pid 5861] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5863] rename("./file2", "./file1" [pid 5861] <... futex resumed>) = 0 [pid 5861] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5859] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0}./strace-static-x86_64: Process 5869 attached [pid 5869] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053) = 0 [pid 5869] set_robust_list(0x7f91a50869a0, 24) = 0 [pid 5869] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5869] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... clone3 resumed> => {parent_tid=[5869]}, 88) = 5869 [pid 5859] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5859] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... futex resumed>) = 0 [pid 5859] <... futex resumed>) = 1 [pid 5869] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5859] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5869] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5864] <... rename resumed>) = -1 EIO (Input/output error) [pid 5869] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... futex resumed>) = 0 [pid 5864] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... rename resumed>) = -1 EIO (Input/output error) [pid 5859] exit_group(0 [pid 5869] <... futex resumed>) = ? [pid 5864] <... futex resumed>) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = ? [pid 5859] <... exit_group resumed>) = ? [pid 5869] +++ exited with 0 +++ [pid 5864] mkdir(".", 0777 [pid 5862] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] +++ exited with 0 +++ [pid 5864] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5862] <... futex resumed>) = 0 [pid 5859] +++ exited with 0 +++ [pid 5060] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5859, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5864] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5862] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5060] restart_syscall(<... resuming interrupted clone ...> [pid 5863] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5861] <... futex resumed>) = 0 [pid 5861] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5861] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5863] mkdir(".", 0777 [pid 5060] <... restart_syscall resumed>) = 0 [pid 5863] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5060] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5864] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5863] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5864] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5060] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5864] <... futex resumed>) = 1 [pid 5863] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5862] <... futex resumed>) = 0 [pid 5060] newfstatat(3, "", [pid 5862] exit_group(0 [pid 5863] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] <... exit_group resumed>) = ? [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5863] <... futex resumed>) = 1 [pid 5861] <... futex resumed>) = 0 [pid 5861] exit_group(0) = ? [pid 5864] +++ exited with 0 +++ [pid 5862] +++ exited with 0 +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=15 /* 0.15 s */} --- [pid 5057] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5057] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./48/binderfs", [pid 5060] getdents64(3, [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5057] unlink("./48/binderfs") = 0 [ 105.013743][ T5864] ERROR: (device loop1): remounting filesystem as read-only [ 105.023376][ T5863] ERROR: (device loop0): diWrite: ixpxd invalid [ 105.023376][ T5863] [ 105.032847][ T5864] ERROR: (device loop1): txAbort: [ 105.032847][ T5864] [ 105.042808][ T5863] ERROR: (device loop0): remounting filesystem as read-only [ 105.050195][ T5863] ERROR: (device loop0): txAbort: [ 105.050195][ T5863] [pid 5057] umount2("./48/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5863] +++ exited with 0 +++ [pid 5861] +++ exited with 0 +++ [pid 5060] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5861, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=19 /* 0.19 s */} --- [pid 5056] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5056] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5056] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] unlink("./48/binderfs" [pid 5060] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... unlink resumed>) = 0 [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./46/binderfs", [pid 5056] umount2("./48/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] unlink("./46/binderfs") = 0 [pid 5060] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... umount2 resumed>) = 0 [pid 5057] umount2("./48/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = 0 [pid 5056] <... umount2 resumed>) = 0 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5057] newfstatat(AT_FDCWD, "./48/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] umount2("./48/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] newfstatat(AT_FDCWD, "./46/file2", [pid 5056] newfstatat(AT_FDCWD, "./48/file2", [pid 5057] umount2("./48/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5056] umount2("./48/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5060] umount2("./46/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5060] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] openat(AT_FDCWD, "./48/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] openat(AT_FDCWD, "./46/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5057] openat(AT_FDCWD, "./48/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5060] <... openat resumed>) = 4 [pid 5057] <... openat resumed>) = 4 [pid 5056] <... openat resumed>) = 4 [pid 5060] newfstatat(4, "", [pid 5056] newfstatat(4, "", [pid 5057] newfstatat(4, "", [pid 5060] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] getdents64(4, [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5056] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5060] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, [pid 5056] getdents64(4, [pid 5057] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5056] <... getdents64 resumed>0x555556529770 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(4, [pid 5056] getdents64(4, [pid 5057] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5056] <... getdents64 resumed>0x555556529770 /* 0 entries */, 32768) = 0 [pid 5057] close(4 [pid 5056] close(4 [pid 5057] <... close resumed>) = 0 [pid 5056] <... close resumed>) = 0 [pid 5057] rmdir("./48/file2" [pid 5056] rmdir("./48/file2" [pid 5057] <... rmdir resumed>) = 0 [pid 5056] <... rmdir resumed>) = 0 [pid 5056] getdents64(3, [pid 5057] getdents64(3, [pid 5056] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5056] close(3 [pid 5057] <... getdents64 resumed>0x555556521730 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5057] rmdir("./48") = 0 [pid 5057] mkdir("./49", 0777) = 0 [pid 5057] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5057] ioctl(3, LOOP_CLR_FD [pid 5060] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5060] close(4) = 0 [pid 5060] rmdir("./46/file2") = 0 [pid 5060] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5060] close(3) = 0 [pid 5060] rmdir("./46") = 0 [pid 5060] mkdir("./47", 0777) = 0 [pid 5060] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5060] ioctl(3, LOOP_CLR_FD [pid 5056] <... close resumed>) = 0 [pid 5056] rmdir("./48") = 0 [pid 5056] mkdir("./49", 0777) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5056] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5870 ./strace-static-x86_64: Process 5870 attached [pid 5870] set_robust_list(0x5555565206a0, 24) = 0 [pid 5870] chdir("./48") = 0 [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5870] setpgid(0, 0) = 0 [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5870] write(3, "1000", 4) = 4 [pid 5870] close(3) = 0 [pid 5870] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5870] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5870] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5870] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5870] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5870] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5871]}, 88) = 5871 [pid 5870] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5870] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5870] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5871 attached [pid 5871] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5871] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5871] memfd_create("syzkaller", 0) = 3 [pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5868] <... write resumed>) = 16777216 [pid 5868] munmap(0x7f919cc00000, 138412032) = 0 [pid 5868] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5868] ioctl(4, LOOP_SET_FD, 3 [pid 5057] <... ioctl resumed>) = 0 [pid 5057] close(3) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5872 ./strace-static-x86_64: Process 5872 attached [pid 5872] set_robust_list(0x5555565206a0, 24) = 0 [pid 5872] chdir("./49") = 0 [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5872] setpgid(0, 0) = 0 [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5872] write(3, "1000", 4) = 4 [pid 5872] close(3) = 0 [pid 5872] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5872] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5872] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5872] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5872] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5872] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5872] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5873]}, 88) = 5873 [pid 5872] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5872] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5872] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5868] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5873 attached [pid 5873] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5873] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5873] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5873] memfd_create("syzkaller", 0) = 3 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5868] close(3) = 0 [pid 5868] close(4) = 0 [pid 5868] mkdir("./file2", 0777) = 0 [ 105.351552][ T5868] loop2: detected capacity change from 0 to 32768 [pid 5868] mount("/dev/loop2", "./file2", "jfs", 0, "") = 0 [pid 5868] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5868] chdir("./file2") = 0 [pid 5868] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5868] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5867] <... futex resumed>) = 0 [pid 5868] rename("./file2", "./file1" [pid 5867] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5056] <... ioctl resumed>) = 0 [pid 5867] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] close(3) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556520690) = 5874 ./strace-static-x86_64: Process 5874 attached [pid 5874] set_robust_list(0x5555565206a0, 24 [pid 5060] <... ioctl resumed>) = 0 [pid 5874] <... set_robust_list resumed>) = 0 [pid 5060] close(3) = 0 [pid 5874] chdir("./49" [pid 5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5874] <... chdir resumed>) = 0 [ 105.434106][ T5868] ERROR: (device loop2): diWrite: ixpxd invalid [ 105.434106][ T5868] [ 105.462885][ T5868] ERROR: (device loop2): remounting filesystem as read-only ./strace-static-x86_64: Process 5875 attached [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5875] set_robust_list(0x5555565206a0, 24 [pid 5874] <... prctl resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555556520690) = 5875 [pid 5875] <... set_robust_list resumed>) = 0 [pid 5874] setpgid(0, 0 [pid 5867] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5874] <... setpgid resumed>) = 0 [pid 5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5868] <... rename resumed>) = -1 EIO (Input/output error) [pid 5867] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5867] <... futex resumed>) = 0 [pid 5867] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5874] <... openat resumed>) = 3 [pid 5867] <... mmap resumed>) = 0x7f91a5066000 [pid 5874] write(3, "1000", 4 [pid 5867] mprotect(0x7f91a5067000, 131072, PROT_READ|PROT_WRITE [pid 5874] <... write resumed>) = 4 [pid 5874] close(3 [pid 5867] <... mprotect resumed>) = 0 [pid 5874] <... close resumed>) = 0 [pid 5874] symlink("/dev/binderfs", "./binderfs" [pid 5867] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5874] <... symlink resumed>) = 0 [pid 5867] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5874] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5867] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a5086990, parent_tid=0x7f91a5086990, exit_signal=0, stack=0x7f91a5066000, stack_size=0x20300, tls=0x7f91a50866c0} [pid 5874] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5874] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5867] <... clone3 resumed> => {parent_tid=[5876]}, 88) = 5876 [pid 5874] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5874] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5867] rt_sigprocmask(SIG_SETMASK, [], [pid 5874] <... mmap resumed>) = 0x7f91a5087000 [pid 5867] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5874] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE [pid 5867] futex(0x7f91a51786b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] <... mprotect resumed>) = 0 [pid 5867] futex(0x7f91a51786bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5876 attached [pid 5874] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5876] rseq(0x7f91a5086fe0, 0x20, 0, 0x53053053 [pid 5874] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5868] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... rseq resumed>) = 0 [pid 5875] chdir("./47" [pid 5874] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} [pid 5868] <... futex resumed>) = 0 [pid 5876] set_robust_list(0x7f91a50869a0, 24 [pid 5875] <... chdir resumed>) = 0 [pid 5868] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5876] <... set_robust_list resumed>) = 0 [pid 5876] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5877 attached [pid 5876] mkdir(".", 0777 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5877] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5875] <... prctl resumed>) = 0 [pid 5874] <... clone3 resumed> => {parent_tid=[5877]}, 88) = 5877 [pid 5877] <... rseq resumed>) = 0 [pid 5876] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5875] setpgid(0, 0 [pid 5874] rt_sigprocmask(SIG_SETMASK, [], [pid 5877] set_robust_list(0x7f91a50a79a0, 24 [pid 5876] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5875] <... setpgid resumed>) = 0 [pid 5874] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5877] <... set_robust_list resumed>) = 0 [pid 5874] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] rt_sigprocmask(SIG_SETMASK, [], [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5874] <... futex resumed>) = 0 [pid 5877] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5876] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5874] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5877] memfd_create("syzkaller", 0 [pid 5876] futex(0x7f91a51786bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] <... memfd_create resumed>) = 3 [pid 5876] <... futex resumed>) = 1 [pid 5867] <... futex resumed>) = 0 [pid 5876] futex(0x7f91a51786b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5867] exit_group(0 [pid 5877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5876] <... futex resumed>) = ? [pid 5868] <... futex resumed>) = ? [pid 5867] <... exit_group resumed>) = ? [pid 5877] <... mmap resumed>) = 0x7f919cc00000 [pid 5876] +++ exited with 0 +++ [pid 5875] <... openat resumed>) = 3 [ 105.491631][ T5868] ERROR: (device loop2): txAbort: [ 105.491631][ T5868] [pid 5875] write(3, "1000", 4) = 4 [pid 5875] close(3) = 0 [pid 5875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5875] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5875] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5875] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5875] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5868] +++ exited with 0 +++ [pid 5867] +++ exited with 0 +++ [pid 5875] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5875] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5058] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5867, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5875] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5875] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5878]}, 88) = 5878 [pid 5875] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5875] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5875] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5058] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5878 attached [pid 5058] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5878] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053 [pid 5058] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(3, [pid 5878] <... rseq resumed>) = 0 [pid 5058] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5878] set_robust_list(0x7f91a50a79a0, 24 [pid 5058] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... set_robust_list resumed>) = 0 [pid 5058] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] rt_sigprocmask(SIG_SETMASK, [], [pid 5058] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5878] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5058] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] unlink("./49/binderfs") = 0 [pid 5058] umount2("./49/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] memfd_create("syzkaller", 0) = 3 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f919cc00000 [pid 5058] <... umount2 resumed>) = 0 [pid 5058] umount2("./49/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] newfstatat(AT_FDCWD, "./49/file2", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5058] umount2("./49/file2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5058] openat(AT_FDCWD, "./49/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5058] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5058] getdents64(4, 0x555556529770 /* 2 entries */, 32768) = 48 [pid 5058] getdents64(4, 0x555556529770 /* 0 entries */, 32768) = 0 [pid 5058] close(4) = 0 [pid 5058] rmdir("./49/file2") = 0 [pid 5058] getdents64(3, 0x555556521730 /* 0 entries */, 32768) = 0 [pid 5058] close(3) = 0 [pid 5058] rmdir("./49") = 0 [pid 5058] mkdir("./50", 0777) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5058] ioctl(3, LOOP_CLR_FD [pid 5877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5871] <... write resumed>) = 16777216 [pid 5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5873] <... write resumed>) = 16777216 [pid 5873] munmap(0x7f919cc00000, 138412032 [pid 5871] munmap(0x7f919cc00000, 138412032 [pid 5058] <... ioctl resumed>) = 0 [pid 5871] <... munmap resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5879 attached [pid 5873] <... munmap resumed>) = 0 [pid 5058] <... clone resumed>, child_tidptr=0x555556520690) = 5879 [pid 5879] set_robust_list(0x5555565206a0, 24) = 0 [pid 5879] chdir("./50") = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5871] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5879] <... prctl resumed>) = 0 [pid 5873] <... openat resumed>) = 4 [pid 5871] <... openat resumed>) = 4 [pid 5871] ioctl(4, LOOP_SET_FD, 3 [pid 5873] ioctl(4, LOOP_SET_FD, 3 [pid 5879] setpgid(0, 0) = 0 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5879] write(3, "1000", 4) = 4 [pid 5879] close(3) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5879] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5879] rt_sigaction(SIGRT_1, {sa_handler=0x7f91a51110a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f91a5102250}, NULL, 8) = 0 [pid 5879] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f91a5087000 [pid 5879] mprotect(0x7f91a5088000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5879] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5879] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f91a50a7990, parent_tid=0x7f91a50a7990, exit_signal=0, stack=0x7f91a5087000, stack_size=0x20300, tls=0x7f91a50a76c0} => {parent_tid=[5880]}, 88) = 5880 [pid 5879] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5879] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5879] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5880 attached [pid 5880] rseq(0x7f91a50a7fe0, 0x20, 0, 0x53053053) = 0 [pid 5880] set_robust_list(0x7f91a50a79a0, 24) = 0 [pid 5880] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5880] memfd_create("syzkaller", 0) = 3 [pid 5873] <... ioctl resumed>) = 0 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5873] close(3) = 0 [pid 5873] close(4 [pid 5871] <... ioctl resumed>) = 0 [pid 5871] close(3 [pid 5880] <... mmap resumed>) = 0x7f919cc00000 [pid 5873] <... close resumed>) = 0 [pid 5871] <... close resumed>) = 0 [pid 5873] mkdir("./file2", 0777) = 0 [pid 5873] mount("/dev/loop1", "./file2", "jfs", 0, "" [pid 5877] <... write resumed>) = 16777216 [pid 5873] <... mount resumed>) = 0 [pid 5871] close(4 [pid 5873] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5871] <... close resumed>) = 0 [ 105.864907][ T5873] loop1: detected capacity change from 0 to 32768 [ 105.872303][ T5871] loop5: detected capacity change from 0 to 32768 [pid 5873] <... openat resumed>) = 3 [pid 5871] mkdir("./file2", 0777 [pid 5877] munmap(0x7f919cc00000, 138412032 [pid 5873] chdir("./file2" [pid 5871] <... mkdir resumed>) = 0 [pid 5873] <... chdir resumed>) = 0 [pid 5871] mount("/dev/loop5", "./file2", "jfs", 0, "" [pid 5873] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5873] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5872] <... futex resumed>) = 0 [pid 5873] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5872] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5872] <... futex resumed>) = 0 [pid 5873] rename("./file2", "./file1" [pid 5872] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5877] <... munmap resumed>) = 0 [pid 5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5871] <... mount resumed>) = 0 [pid 5871] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 105.935334][ T5873] ERROR: (device loop1): diWrite: ixpxd invalid [ 105.935334][ T5873] [ 105.968276][ T5873] ERROR: (device loop1): remounting filesystem as read-only [pid 5877] <... openat resumed>) = 4 [pid 5871] chdir("./file2" [pid 5877] ioctl(4, LOOP_SET_FD, 3 [pid 5871] <... chdir resumed>) = 0 [pid 5871] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5873] <... rename resumed>) = -1 EIO (Input/output error) [pid 5871] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5873] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] <... futex resumed>) = 1 [pid 5871] <... futex resumed>) = 1 [pid 5873] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5871] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5870] <... futex resumed>) = 0 [pid 5872] <... futex resumed>) = 0 [pid 5870] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] <... futex resumed>) = 0 [pid 5870] <... futex resumed>) = 1 [pid 5872] <... futex resumed>) = 1 [pid 5871] rename("./file2", "./file1" [pid 5870] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5872] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5878] <... write resumed>) = 16777216 [pid 5878] munmap(0x7f919cc00000, 138412032) = 0 [pid 5877] <... ioctl resumed>) = 0 [pid 5873] <... futex resumed>) = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5877] close(3 [pid 5873] mkdir(".", 0777 [pid 5878] <... openat resumed>) = 4 [pid 5877] <... close resumed>) = 0 [ 105.981073][ T5873] ERROR: (device loop1): txAbort: [ 105.981073][ T5873] [ 105.984300][ T5877] loop0: detected capacity change from 0 to 32768 [ 106.000303][ T5871] ERROR: (device loop5): diWrite: ixpxd invalid [ 106.000303][ T5871] [ 106.012475][ T5871] ERROR: (device loop5): remounting filesystem as read-only [ 106.019766][ T5871] ERROR: (device loop5): txAbort: [ 106.019766][ T5871] [pid 5878] ioctl(4, LOOP_SET_FD, 3 [pid 5877] close(4 [pid 5873] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5878] <... ioctl resumed>) = 0 [pid 5877] <... close resumed>) = 0 [pid 5873] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5871] <... rename resumed>) = -1 EIO (Input/output error) [pid 5870] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5871] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5870] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5870] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5877] mkdir("./file2", 0777) = 0 [pid 5871] mkdir(".", 0777) = -1 EEXIST (File exists) [pid 5871] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5873] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5873] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5872] <... futex resumed>) = 0 [pid 5872] exit_group(0) = ? [pid 5877] mount("/dev/loop0", "./file2", "jfs", 0, "" [pid 5871] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5871] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5871] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5870] <... futex resumed>) = 0 [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5878] close(3 [pid 5877] <... mount resumed>) = 0 [ 106.032561][ T5878] loop4: detected capacity change from 0 to 32768 [pid 5873] +++ exited with 0 +++ [pid 5872] +++ exited with 0 +++ [pid 5870] exit_group(0 [pid 5878] <... close resumed>) = 0 [pid 5877] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5870] <... exit_group resumed>) = ? [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5878] close(4 [pid 5877] <... openat resumed>) = 3 [pid 5878] <... close resumed>) = 0 [pid 5877] chdir("./file2" [pid 5878] mkdir("./file2", 0777) = 0 [pid 5877] <... chdir resumed>) = 0 [pid 5878] mount("/dev/loop4", "./file2", "jfs", 0, "" [pid 5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5871] <... futex resumed>) = ? [pid 5057] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5877] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5877] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5877] <... futex resumed>) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5874] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... openat resumed>) = 3 [pid 5874] <... futex resumed>) = 0 [pid 5057] newfstatat(3, "", [pid 5877] rename("./file2", "./file1" [pid 5874] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5871] +++ exited with 0 +++ [pid 5870] +++ exited with 0 +++ [pid 5057] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5878] <... mount resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=16 /* 0.16 s */} --- [pid 5057] getdents64(3, 0x555556521730 /* 4 entries */, 32768) = 112 [pid 5878] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY [pid 5057] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... openat resumed>) = 3 [pid 5057] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] chdir("./file2" [pid 5057] newfstatat(AT_FDCWD, "./49/binderfs", [pid 5878] <... chdir resumed>) = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5057] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5877] <... rename resumed>) = -1 EIO (Input/output error) [pid 5063] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5878] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5877] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5878] futex(0x7f91a51786ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] unlink("./49/binderfs" [pid 5878] <... futex resumed>) = 1 [pid 5877] <... futex resumed>) = 1 [pid 5875] <... futex resumed>) = 0 [pid 5874] <... futex resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5878] rename("./file2", "./file1" [pid 5877] futex(0x7f91a51786a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] futex(0x7f91a51786a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] <... openat resumed>) = 3 [pid 5057] <... unlink resumed>) = 0 [pid 5877] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5875] <... futex resumed>) = 0 [pid 5874] <... futex resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5875] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] futex(0x7f91a51786ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5877] mkdir(".", 0777 [pid 5057] umount2("./49/file2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5877] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5063] getdents64(3, [pid 5877] mount(NULL, ".", 0x20000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "" [pid 5063] <... getdents64 resumed>0x555556521730 /* 4 entries */, 32768) = 112 [pid 5877] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... umount2 resumed>) = 0 [ 106.086417][ T5877] ERROR: (device loop0): diWrite: ixpxd invalid [ 106.086417][ T5877] [ 106.095196][ T5877] ERROR: (device loop0): remounting filesystem as read-only [ 106.103863][ T5877] ERROR: (device loop0): txAbort: [ 106.103863][ T5877] [ 106.114986][ T5878] ERROR: (device loop4): diWrite: ixpxd invalid [ 106.114986][ T5878]