./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1724158057 <...> Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. execve("./syz-executor1724158057", ["./syz-executor1724158057"], 0x7ffed9ed62f0 /* 10 vars */) = 0 brk(NULL) = 0x555571ec3000 brk(0x555571ec3d40) = 0x555571ec3d40 arch_prctl(ARCH_SET_FS, 0x555571ec33c0) = 0 set_tid_address(0x555571ec3690) = 5080 set_robust_list(0x555571ec36a0, 24) = 0 rseq(0x555571ec3ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1724158057", 4096) = 28 getrandom("\x02\x27\x12\x9c\x01\xcf\x17\x67", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555571ec3d40 brk(0x555571ee4d40) = 0x555571ee4d40 brk(0x555571ee5000) = 0x555571ee5000 mprotect(0x7f8282b94000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5081 ./strace-static-x86_64: Process 5081 attached [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] set_robust_list(0x555571ec36a0, 24) = 0 ./strace-static-x86_64: Process 5082 attached [pid 5080] <... clone resumed>, child_tidptr=0x555571ec3690) = 5082 [pid 5082] set_robust_list(0x555571ec36a0, 24 [pid 5081] mkdir("./syzkaller.kcvyyY", 0700 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] <... set_robust_list resumed>) = 0 [pid 5082] mkdir("./syzkaller.weHaqq", 0700./strace-static-x86_64: Process 5083 attached [pid 5081] <... mkdir resumed>) = 0 [pid 5083] set_robust_list(0x555571ec36a0, 24 [pid 5080] <... clone resumed>, child_tidptr=0x555571ec3690) = 5083 [pid 5082] <... mkdir resumed>) = 0 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5082] chmod("./syzkaller.weHaqq", 0777 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] mkdir("./syzkaller.yeJ47B", 0700 [pid 5082] <... chmod resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5084 attached [pid 5080] <... clone resumed>, child_tidptr=0x555571ec3690) = 5084 [pid 5083] chmod("./syzkaller.yeJ47B", 0777 [pid 5082] chdir("./syzkaller.weHaqq" [pid 5081] chmod("./syzkaller.kcvyyY", 0777 [pid 5083] <... chmod resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] set_robust_list(0x555571ec36a0, 24 [pid 5082] <... chdir resumed>) = 0 [pid 5084] <... set_robust_list resumed>) = 0 [pid 5081] <... chmod resumed>) = 0 [pid 5082] mkdir("./0", 0777 [pid 5083] chdir("./syzkaller.yeJ47B") = 0 [pid 5084] mkdir("./syzkaller.ujKu2y", 0700 [pid 5083] mkdir("./0", 0777./strace-static-x86_64: Process 5085 attached ) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5081] chdir("./syzkaller.kcvyyY" [pid 5085] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5080] <... clone resumed>, child_tidptr=0x555571ec3690) = 5085 [pid 5085] mkdir("./syzkaller.7gAIZh", 0700 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... chdir resumed>) = 0 [pid 5081] mkdir("./0", 0777 [pid 5085] <... mkdir resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5084] chmod("./syzkaller.ujKu2y", 0777 [pid 5083] <... openat resumed>) = 3 [pid 5085] chmod("./syzkaller.7gAIZh", 0777 [pid 5082] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5082] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] <... chmod resumed>) = 0 [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] close(3 [pid 5081] <... openat resumed>) = 3 [pid 5085] <... chmod resumed>) = 0 [pid 5084] chdir("./syzkaller.ujKu2y" [pid 5083] <... close resumed>) = 0 [pid 5082] close(3 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] chdir("./syzkaller.7gAIZh" [pid 5084] <... chdir resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5085] <... chdir resumed>) = 0 [pid 5084] mkdir("./0", 0777 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5087 attached [pid 5085] mkdir("./0", 0777 [pid 5084] <... mkdir resumed>) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5089 attached ./strace-static-x86_64: Process 5088 attached [pid 5087] set_robust_list(0x555571ec36a0, 24 [pid 5085] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5087 [pid 5088] set_robust_list(0x555571ec36a0, 24 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5088] <... set_robust_list resumed>) = 0 [pid 5089] set_robust_list(0x555571ec36a0, 24 [pid 5088] chdir("./0" [pid 5087] chdir("./0" [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5088 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5088] <... chdir resumed>) = 0 [pid 5087] <... chdir resumed>) = 0 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] <... clone resumed>, child_tidptr=0x555571ec3690) = 5089 [pid 5089] chdir("./0" [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5089] <... chdir resumed>) = 0 [pid 5088] <... prctl resumed>) = 0 [pid 5087] <... prctl resumed>) = 0 [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5088] setpgid(0, 0 [pid 5085] close(3 [pid 5084] close(3 [pid 5089] <... prctl resumed>) = 0 [pid 5088] <... setpgid resumed>) = 0 [pid 5087] setpgid(0, 0 [pid 5085] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5087] <... setpgid resumed>) = 0 [pid 5089] setpgid(0, 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5089] <... setpgid resumed>) = 0 [pid 5088] <... openat resumed>) = 3 [pid 5087] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5091 attached [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5091] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5091] chdir("./0"./strace-static-x86_64: Process 5090 attached ) = 0 [pid 5089] <... openat resumed>) = 3 [pid 5088] write(3, "1000", 4 [pid 5087] write(3, "1000", 4 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5091 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5090] set_robust_list(0x555571ec36a0, 24 [pid 5088] <... write resumed>) = 4 [pid 5087] <... write resumed>) = 4 [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5090 [pid 5091] <... prctl resumed>) = 0 [pid 5090] <... set_robust_list resumed>) = 0 [pid 5089] write(3, "1000", 4 [pid 5088] close(3 [pid 5087] close(3 [pid 5091] setpgid(0, 0 [pid 5090] chdir("./0" [pid 5089] <... write resumed>) = 4 [pid 5088] <... close resumed>) = 0 [pid 5087] <... close resumed>) = 0 [pid 5091] <... setpgid resumed>) = 0 [pid 5090] <... chdir resumed>) = 0 [pid 5089] close(3 [pid 5088] symlink("/dev/binderfs", "./binderfs" [pid 5087] symlink("/dev/binderfs", "./binderfs" [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] <... close resumed>) = 0 [pid 5089] symlink("/dev/binderfs", "./binderfs"executing program [pid 5087] <... symlink resumed>) = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5088] <... symlink resumed>) = 0 [pid 5087] write(1, "executing program\n", 18 [pid 5091] <... openat resumed>) = 3 [pid 5090] <... prctl resumed>) = 0 [pid 5089] <... symlink resumed>) = 0 [pid 5087] <... write resumed>) = 18 [pid 5088] write(1, "executing program\n", 18 [pid 5091] write(3, "1000", 4) = 4 [pid 5091] close(3) = 0 executing program executing program [pid 5091] symlink("/dev/binderfs", "./binderfs" [pid 5089] write(1, "executing program\n", 18 [pid 5091] <... symlink resumed>) = 0 [pid 5090] setpgid(0, 0 [pid 5089] <... write resumed>) = 18 [pid 5088] <... write resumed>) = 18 [pid 5087] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... setpgid resumed>) = 0 [pid 5088] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 0 [pid 5087] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5091] write(1, "executing program\n", 18 [pid 5089] <... futex resumed>) = 0 executing program [pid 5088] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5087] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5091] <... write resumed>) = 18 [pid 5089] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5091] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5088] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5087] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5091] <... futex resumed>) = 0 [pid 5090] <... openat resumed>) = 3 [pid 5089] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5088] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5090] write(3, "1000", 4 [pid 5088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5091] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5088] <... mmap resumed>) = 0x7f8282aa3000 [pid 5087] <... mmap resumed>) = 0x7f8282aa3000 [pid 5091] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5088] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5087] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5091] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5090] <... write resumed>) = 4 [pid 5089] <... mmap resumed>) = 0x7f8282aa3000 [pid 5088] <... mprotect resumed>) = 0 [pid 5087] <... mprotect resumed>) = 0 [pid 5091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5089] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5088] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5087] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5090] close(3 [pid 5089] <... mprotect resumed>) = 0 [pid 5088] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5087] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5090] <... close resumed>) = 0 [pid 5088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5090] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5093 attached [pid 5091] <... mmap resumed>) = 0x7f8282aa3000 [pid 5089] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5092 attached [pid 5093] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5091] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5090] <... symlink resumed>) = 0 [pid 5089] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5087] <... clone3 resumed> => {parent_tid=[5093]}, 88) = 5093 [pid 5093] <... rseq resumed>) = 0 [pid 5092] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5091] <... mprotect resumed>) = 0 [pid 5089] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5087] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5094 attached [pid 5093] set_robust_list(0x7f8282ac39a0, 24executing program [pid 5092] <... rseq resumed>) = 0 [pid 5091] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5090] write(1, "executing program\n", 18 [pid 5088] <... clone3 resumed> => {parent_tid=[5092]}, 88) = 5092 [pid 5087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5094] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5093] <... set_robust_list resumed>) = 0 [pid 5092] set_robust_list(0x7f8282ac39a0, 24 [pid 5090] <... write resumed>) = 18 [pid 5088] rt_sigprocmask(SIG_SETMASK, [], [pid 5087] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... rseq resumed>) = 0 [pid 5093] rt_sigprocmask(SIG_SETMASK, [], [pid 5092] <... set_robust_list resumed>) = 0 [pid 5091] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5090] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... clone3 resumed> => {parent_tid=[5094]}, 88) = 5094 [pid 5088] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5094] set_robust_list(0x7f8282ac39a0, 24 [pid 5093] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5092] rt_sigprocmask(SIG_SETMASK, [], [pid 5091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5090] <... futex resumed>) = 0 [pid 5089] rt_sigprocmask(SIG_SETMASK, [], [pid 5088] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5095 attached [pid 5094] <... set_robust_list resumed>) = 0 [pid 5093] memfd_create("syzkaller", 0 [pid 5092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5090] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5088] <... futex resumed>) = 0 [pid 5095] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5094] rt_sigprocmask(SIG_SETMASK, [], [pid 5092] memfd_create("syzkaller", 0 [pid 5090] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5089] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5095] <... rseq resumed>) = 0 [pid 5094] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5093] <... memfd_create resumed>) = 3 [pid 5092] <... memfd_create resumed>) = 3 [pid 5091] <... clone3 resumed> => {parent_tid=[5095]}, 88) = 5095 [pid 5090] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5089] <... futex resumed>) = 0 [pid 5095] set_robust_list(0x7f8282ac39a0, 24 [pid 5094] memfd_create("syzkaller", 0 [pid 5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5091] rt_sigprocmask(SIG_SETMASK, [], [pid 5090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5089] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5095] <... set_robust_list resumed>) = 0 [pid 5092] <... mmap resumed>) = 0x7f827a600000 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5095] rt_sigprocmask(SIG_SETMASK, [], [pid 5094] <... memfd_create resumed>) = 3 [pid 5093] <... mmap resumed>) = 0x7f827a600000 [pid 5091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5091] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5094] <... mmap resumed>) = 0x7f827a600000 [pid 5090] <... mmap resumed>) = 0x7f8282aa3000 [pid 5095] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5090] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5095] memfd_create("syzkaller", 0 [pid 5090] <... mprotect resumed>) = 0 [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5095] <... memfd_create resumed>) = 3 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5090] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5095] <... mmap resumed>) = 0x7f827a600000 [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5096]}, 88) = 5096 ./strace-static-x86_64: Process 5096 attached [pid 5096] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], [pid 5096] <... rseq resumed>) = 0 [pid 5090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] set_robust_list(0x7f8282ac39a0, 24 [pid 5090] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5096] rt_sigprocmask(SIG_SETMASK, [], [pid 5090] <... futex resumed>) = 0 [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5090] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5096] memfd_create("syzkaller", 0) = 3 [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5092] <... write resumed>) = 16777216 [pid 5092] munmap(0x7f827a600000, 138412032) = 0 [pid 5095] <... write resumed>) = 16777216 [pid 5095] munmap(0x7f827a600000, 138412032 [pid 5093] <... write resumed>) = 16777216 [pid 5092] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5092] ioctl(4, LOOP_SET_FD, 3 [pid 5096] <... write resumed>) = 16777216 [pid 5094] <... write resumed>) = 16777216 [pid 5093] munmap(0x7f827a600000, 138412032 [pid 5096] munmap(0x7f827a600000, 138412032 [pid 5094] munmap(0x7f827a600000, 138412032 [pid 5092] <... ioctl resumed>) = 0 [pid 5095] <... munmap resumed>) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5092] close(3 [pid 5095] <... openat resumed>) = 4 [pid 5095] ioctl(4, LOOP_SET_FD, 3 [pid 5092] <... close resumed>) = 0 [pid 5096] <... munmap resumed>) = 0 [pid 5095] <... ioctl resumed>) = 0 [pid 5092] close(4 [pid 5093] <... munmap resumed>) = 0 [pid 5092] <... close resumed>) = 0 [pid 5092] mkdir("./bus", 0777 [pid 5094] <... munmap resumed>) = 0 [pid 5092] <... mkdir resumed>) = 0 [ 57.584144][ T5092] loop1: detected capacity change from 0 to 32768 [ 57.609826][ T5095] loop4: detected capacity change from 0 to 32768 [ 57.626983][ T5092] ======================================================= [pid 5093] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5092] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5096] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5094] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5093] <... openat resumed>) = 4 [pid 5096] <... openat resumed>) = 4 [pid 5093] ioctl(4, LOOP_SET_FD, 3 [pid 5096] ioctl(4, LOOP_SET_FD, 3 [pid 5095] close(3 [pid 5094] <... openat resumed>) = 4 [pid 5096] <... ioctl resumed>) = 0 [pid 5095] <... close resumed>) = 0 [pid 5094] ioctl(4, LOOP_SET_FD, 3 [pid 5093] <... ioctl resumed>) = 0 [pid 5092] <... mount resumed>) = 0 [pid 5096] close(3 [pid 5095] close(4 [ 57.626983][ T5092] WARNING: The mand mount option has been deprecated and [ 57.626983][ T5092] and is ignored by this kernel. Remove the mand [ 57.626983][ T5092] option from the mount to silence this warning. [ 57.626983][ T5092] ======================================================= [ 57.664076][ T5093] loop2: detected capacity change from 0 to 32768 [ 57.673543][ T5096] loop3: detected capacity change from 0 to 32768 [pid 5092] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5096] <... close resumed>) = 0 [pid 5096] close(4) = 0 [pid 5095] <... close resumed>) = 0 [pid 5093] close(3 [pid 5092] <... openat resumed>) = 3 [pid 5096] mkdir("./bus", 0777) = 0 [pid 5095] mkdir("./bus", 0777 [pid 5094] <... ioctl resumed>) = 0 [pid 5093] <... close resumed>) = 0 [pid 5092] chdir("./bus" [pid 5096] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5095] <... mkdir resumed>) = 0 [pid 5094] close(3 [pid 5093] close(4 [pid 5092] <... chdir resumed>) = 0 [pid 5093] <... close resumed>) = 0 [pid 5092] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5094] <... close resumed>) = 0 [pid 5093] mkdir("./bus", 0777 [pid 5092] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5094] close(4 [pid 5092] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... mkdir resumed>) = 0 [pid 5092] <... futex resumed>) = 1 [pid 5094] <... close resumed>) = 0 [pid 5092] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] mkdir("./bus", 0777 [pid 5088] <... futex resumed>) = 0 [pid 5088] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... mkdir resumed>) = 0 [pid 5088] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5092] unlink("./file1" [pid 5088] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5095] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5093] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5096] <... mount resumed>) = 0 [pid 5096] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5096] chdir("./bus") = 0 [pid 5096] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5096] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5090] <... futex resumed>) = 0 [ 57.686994][ T5094] loop0: detected capacity change from 0 to 32768 [ 57.717022][ T5092] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 57.717022][ T5092] [pid 5093] <... mount resumed>) = 0 [pid 5090] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] unlink("./file1" [pid 5090] <... futex resumed>) = 0 [pid 5093] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5090] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5088] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] <... openat resumed>) = 3 [pid 5088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5093] chdir("./bus") = 0 [pid 5088] <... mmap resumed>) = 0x7f8282a82000 [pid 5093] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5088] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5093] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5088] <... mprotect resumed>) = 0 [pid 5093] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5093] <... futex resumed>) = 1 [pid 5088] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5093] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5092] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5095] <... mount resumed>) = 0 [pid 5094] <... mount resumed>) = 0 [pid 5095] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5094] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5092] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... clone3 resumed> => {parent_tid=[5098]}, 88) = 5098 [pid 5095] <... openat resumed>) = 3 [pid 5094] <... openat resumed>) = 3 [pid 5092] <... futex resumed>) = 0 [pid 5088] rt_sigprocmask(SIG_SETMASK, [], [pid 5095] chdir("./bus" [pid 5094] chdir("./bus" [pid 5092] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5098 attached [pid 5095] <... chdir resumed>) = 0 [pid 5094] <... chdir resumed>) = 0 [pid 5088] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... futex resumed>) = 0 [pid 5098] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5095] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5094] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5088] <... futex resumed>) = 0 [pid 5087] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... rseq resumed>) = 0 [pid 5095] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5093] <... futex resumed>) = 0 [pid 5088] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] <... futex resumed>) = 1 [pid 5098] set_robust_list(0x7f8282aa29a0, 24 [pid 5095] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5093] unlink("./file1" [pid 5095] <... futex resumed>) = 1 [pid 5094] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = 0 [ 57.752512][ T5092] ERROR: (device loop1): remounting filesystem as read-only [ 57.759348][ T5096] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 57.759348][ T5096] [ 57.769346][ T5092] ERROR: (device loop1): jfs_unlink: [ 57.769346][ T5092] [pid 5095] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5098] <... set_robust_list resumed>) = 0 [pid 5091] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5098] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5095] <... futex resumed>) = 0 [pid 5094] <... futex resumed>) = 1 [pid 5091] <... futex resumed>) = 1 [pid 5089] <... futex resumed>) = 0 [pid 5095] unlink("./file1" [pid 5094] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5090] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5090] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5100]}, 88) = 5100 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5090] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5100 attached [pid 5100] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5100] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5100] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5100] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5098] <... mount resumed>) = -1 EINVAL (Invalid argument) [ 57.800222][ T5093] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 57.800222][ T5093] [ 57.802028][ T5098] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 57.802028][ T5098] [ 57.823211][ T5093] ERROR: (device loop2): remounting filesystem as read-only [ 57.831253][ T5095] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 57.831253][ T5095] [ 57.842566][ T5096] ERROR: (device loop3): remounting filesystem as read-only [pid 5094] unlink("./file1" [pid 5089] <... futex resumed>) = 0 [pid 5088] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5089] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 0 [pid 5088] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5098] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] <... mmap resumed>) = 0x7f8282a82000 [pid 5087] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5092] <... futex resumed>) = 0 [pid 5087] <... mprotect resumed>) = 0 [pid 5096] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5093] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5096] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5093] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5092] <... open resumed>) = -1 EFAULT (Bad address) [pid 5096] <... futex resumed>) = 0 [ 57.848670][ T5094] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 57.848670][ T5094] [ 57.850972][ T5093] ERROR: (device loop2): jfs_unlink: [ 57.850972][ T5093] [ 57.869146][ T5096] ERROR: (device loop3): jfs_unlink: [ 57.869146][ T5096] [ 57.879746][ T5095] ERROR: (device loop4): remounting filesystem as read-only [ 57.883992][ T5094] ERROR: (device loop0): remounting filesystem as read-only [ 57.887172][ T5095] ERROR: (device loop4): jfs_unlink: [ 57.887172][ T5095] [pid 5093] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5096] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5090] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5087] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5092] <... futex resumed>) = 1 [pid 5091] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5092] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5091] <... mmap resumed>) = 0x7f8282a82000 [pid 5090] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5088] <... futex resumed>) = 0 [pid 5090] <... futex resumed>) = 1 [pid 5088] exit_group(0 [pid 5098] <... futex resumed>) = ? [pid 5090] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5088] <... exit_group resumed>) = ? [pid 5098] +++ exited with 0 +++ [pid 5100] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5100] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5101 attached [pid 5100] <... futex resumed>) = 0 [pid 5096] <... futex resumed>) = 0 [pid 5095] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5092] <... futex resumed>) = ? [pid 5091] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5101] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5100] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5096] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5095] <... futex resumed>) = 0 [pid 5092] +++ exited with 0 +++ [pid 5089] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5088] +++ exited with 0 +++ [pid 5101] <... rseq resumed>) = 0 [pid 5096] <... open resumed>) = -1 EFAULT (Bad address) [pid 5095] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] <... mprotect resumed>) = 0 [pid 5089] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] <... clone3 resumed> => {parent_tid=[5101]}, 88) = 5101 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5101] set_robust_list(0x7f8282aa29a0, 24 [pid 5096] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5094] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = 0 [pid 5087] rt_sigprocmask(SIG_SETMASK, [], [pid 5101] <... set_robust_list resumed>) = 0 [pid 5096] <... futex resumed>) = 1 [pid 5091] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5090] <... futex resumed>) = 0 [pid 5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5101] rt_sigprocmask(SIG_SETMASK, [], [pid 5096] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] <... futex resumed>) = 0 [pid 5091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5090] exit_group(0 [pid 5089] <... mmap resumed>) = 0x7f8282a82000 [pid 5087] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5102 attached [pid 5101] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5100] <... futex resumed>) = ? [pid 5096] <... futex resumed>) = ? [pid 5094] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] <... exit_group resumed>) = ? [pid 5089] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5087] <... futex resumed>) = 0 [pid 5082] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5102] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5101] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5100] +++ exited with 0 +++ [pid 5096] +++ exited with 0 +++ [pid 5091] <... clone3 resumed> => {parent_tid=[5102]}, 88) = 5102 [pid 5090] +++ exited with 0 +++ [pid 5089] <... mprotect resumed>) = 0 [pid 5087] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5102] <... rseq resumed>) = 0 [pid 5089] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5102] set_robust_list(0x7f8282aa29a0, 24 [pid 5089] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5102] <... set_robust_list resumed>) = 0 [pid 5089] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5103 attached [pid 5102] rt_sigprocmask(SIG_SETMASK, [], [pid 5103] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5089] <... clone3 resumed> => {parent_tid=[5103]}, 88) = 5103 [pid 5103] <... rseq resumed>) = 0 [pid 5102] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] rt_sigprocmask(SIG_SETMASK, [], [pid 5103] set_robust_list(0x7f8282aa29a0, 24 [pid 5089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5103] <... set_robust_list resumed>) = 0 [pid 5089] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] rt_sigprocmask(SIG_SETMASK, [], [pid 5089] <... futex resumed>) = 0 [pid 5103] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5089] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5101] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5091] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5101] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5082] <... openat resumed>) = 3 [pid 5101] <... futex resumed>) = 1 [pid 5091] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] newfstatat(3, "", [pid 5101] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] <... futex resumed>) = 1 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5091] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] getdents64(3, [pid 5102] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5103] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5102] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5087] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] newfstatat(3, "", [pid 5082] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5093] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 1 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5093] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5084] getdents64(3, [pid 5093] <... open resumed>) = -1 EFAULT (Bad address) [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [ 57.904037][ T5094] ERROR: (device loop0): jfs_unlink: [ 57.904037][ T5094] [ 57.928684][ T5101] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 57.928684][ T5101] [ 57.934690][ T5103] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 57.934690][ T5103] [pid 5093] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5093] <... futex resumed>) = 0 [pid 5093] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5102] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5089] <... futex resumed>) = 0 [pid 5087] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 1 [pid 5087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5094] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5089] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] exit_group(0 [pid 5101] <... futex resumed>) = ? [pid 5094] <... open resumed>) = -1 EFAULT (Bad address) [pid 5093] <... futex resumed>) = ? [pid 5087] <... exit_group resumed>) = ? [pid 5101] +++ exited with 0 +++ [pid 5094] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] +++ exited with 0 +++ [pid 5087] +++ exited with 0 +++ [pid 5094] <... futex resumed>) = 1 [pid 5089] <... futex resumed>) = 0 [pid 5094] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] exit_group(0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=27 /* 0.27 s */} --- [pid 5103] <... futex resumed>) = ? [pid 5094] <... futex resumed>) = ? [pid 5089] <... exit_group resumed>) = ? [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5103] +++ exited with 0 +++ [pid 5094] +++ exited with 0 +++ [pid 5083] <... restart_syscall resumed>) = 0 [pid 5102] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] +++ exited with 0 +++ [pid 5083] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5083] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5102] <... futex resumed>) = 1 [pid 5091] <... futex resumed>) = 0 [pid 5081] newfstatat(3, "", [pid 5102] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = 0 [pid 5091] <... futex resumed>) = 1 [pid 5095] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5091] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... open resumed>) = -1 EFAULT (Bad address) [pid 5095] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5091] <... futex resumed>) = 0 [pid 5095] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5091] exit_group(0 [pid 5102] <... futex resumed>) = ? [pid 5095] <... futex resumed>) = ? [pid 5091] <... exit_group resumed>) = ? [pid 5081] getdents64(3, [pid 5102] +++ exited with 0 +++ [pid 5095] +++ exited with 0 +++ [pid 5091] +++ exited with 0 +++ [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5081] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5083] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = 0 [pid 5084] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./0/bus", [pid 5081] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] newfstatat(AT_FDCWD, "./0/bus", [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./0/bus", [pid 5083] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... openat resumed>) = 4 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5083] newfstatat(4, "", [pid 5081] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(4, [pid 5083] getdents64(4, [pid 5081] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] <... openat resumed>) = 4 [pid 5084] getdents64(4, [pid 5083] getdents64(4, [pid 5081] newfstatat(4, "", [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] close(4 [pid 5084] close(4 [pid 5083] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] rmdir("./0/bus" [pid 5084] rmdir("./0/bus" [pid 5081] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./0/bus") = 0 [pid 5081] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [ 57.952864][ T5102] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 57.952864][ T5102] [ 57.964993][ T5084] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 57.964993][ T5084] [ 57.977289][ T5084] ERROR: (device loop3): remounting filesystem as read-only [pid 5084] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./0/binderfs" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5081] <... unlink resumed>) = 0 [pid 5081] getdents64(3, [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] unlink("./0/binderfs" [pid 5083] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5081] close(3) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5081] rmdir("./0" [pid 5084] getdents64(3, [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] unlink("./0/binderfs" [pid 5084] close(3) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5084] rmdir("./0" [pid 5083] getdents64(3, [pid 5081] <... rmdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] close(3 [pid 5081] mkdir("./1", 0777 [pid 5083] <... close resumed>) = 0 [pid 5084] mkdir("./1", 0777) = 0 [pid 5083] rmdir("./0" [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5083] mkdir("./1", 0777 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5085] <... umount2 resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5085] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./0/bus", [pid 5082] newfstatat(AT_FDCWD, "./0/bus", [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... openat resumed>) = 4 [pid 5082] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5085] getdents64(4, [pid 5084] close(3 [pid 5082] newfstatat(4, "", [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] <... close resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] getdents64(4, [pid 5083] close(3 [pid 5082] getdents64(4, [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./0/bus") = 0 [pid 5085] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] <... close resumed>) = 0 [pid 5082] getdents64(4, [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5082] close(4 [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5104 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./0/binderfs") = 0 [pid 5082] <... close resumed>) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./0"./strace-static-x86_64: Process 5104 attached ) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5105 [pid 5082] rmdir("./0/bus" [pid 5085] mkdir("./1", 0777) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5082] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./0/binderfs"./strace-static-x86_64: Process 5105 attached [pid 5104] set_robust_list(0x555571ec36a0, 24 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] <... unlink resumed>) = 0 [pid 5081] <... ioctl resumed>) = 0 [pid 5104] <... set_robust_list resumed>) = 0 [pid 5082] getdents64(3, [pid 5105] set_robust_list(0x555571ec36a0, 24 [pid 5104] chdir("./1" [pid 5085] <... openat resumed>) = 3 [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5105] <... set_robust_list resumed>) = 0 [pid 5085] ioctl(3, LOOP_CLR_FDexecuting program [pid 5082] close(3 [pid 5081] close(3 [pid 5105] chdir("./1" [pid 5082] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5104] <... chdir resumed>) = 0 [pid 5082] rmdir("./0" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5105] <... chdir resumed>) = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5106 attached [pid 5105] close(3 [pid 5082] mkdir("./1", 0777 [pid 5106] set_robust_list(0x555571ec36a0, 24 [pid 5105] <... close resumed>) = 0 [pid 5106] <... set_robust_list resumed>) = 0 [pid 5106] chdir("./1" [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5105] write(1, "executing program\n", 18) = 18 [pid 5105] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] <... chdir resumed>) = 0 [pid 5105] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5082] <... mkdir resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555571ec3690) = 5106 [pid 5105] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5105] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5106] <... prctl resumed>) = 0 [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5106] setpgid(0, 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5105] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5104] <... prctl resumed>) = 0 [pid 5106] <... setpgid resumed>) = 0 [pid 5105] <... mprotect resumed>) = 0 [pid 5104] setpgid(0, 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5105] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5106] <... openat resumed>) = 3 [pid 5105] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5104] <... setpgid resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5106] write(3, "1000", 4 [pid 5105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5082] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5107 attached [pid 5106] <... write resumed>) = 4 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5107] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5106] close(3 [pid 5105] <... clone3 resumed> => {parent_tid=[5107]}, 88) = 5107 [pid 5107] set_robust_list(0x7f8282ac39a0, 24 [pid 5106] <... close resumed>) = 0 [pid 5105] rt_sigprocmask(SIG_SETMASK, [], [pid 5107] <... set_robust_list resumed>) = 0 [pid 5106] symlink("/dev/binderfs", "./binderfs" [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5107] rt_sigprocmask(SIG_SETMASK, [], [pid 5106] <... symlink resumed>) = 0 [pid 5105] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... openat resumed>) = 3 [pid 5107] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5105] <... futex resumed>) = 0 [pid 5107] memfd_create("syzkaller", 0 [pid 5105] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5104] write(3, "1000", 4 [pid 5106] write(1, "executing program\n", 18executing program [pid 5104] <... write resumed>) = 4 [pid 5104] close(3 [pid 5106] <... write resumed>) = 18 [pid 5104] <... close resumed>) = 0 [pid 5107] <... memfd_create resumed>) = 3 [pid 5106] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5106] <... futex resumed>) = 0 [pid 5106] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5107] <... mmap resumed>) = 0x7f827a600000 [pid 5106] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5106] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5104] symlink("/dev/binderfs", "./binderfs" [pid 5106] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5104] <... symlink resumed>) = 0 [pid 5106] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5104] write(1, "executing program\n", 18executing program ) = 18 [pid 5106] <... clone3 resumed> => {parent_tid=[5108]}, 88) = 5108 [pid 5104] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5108 attached ) = 0 [pid 5108] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5104] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5108] <... rseq resumed>) = 0 [pid 5104] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5108] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5106] rt_sigprocmask(SIG_SETMASK, [], [pid 5104] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5108] rt_sigprocmask(SIG_SETMASK, [], [pid 5106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5106] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5108] memfd_create("syzkaller", 0 [pid 5104] <... mmap resumed>) = 0x7f8282aa3000 [pid 5104] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5108] <... memfd_create resumed>) = 3 [pid 5104] <... mprotect resumed>) = 0 [pid 5104] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5104] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5104] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5109 attached [pid 5109] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5109] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5109] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5109] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5104] <... clone3 resumed> => {parent_tid=[5109]}, 88) = 5109 [pid 5104] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5104] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5104] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5109] <... futex resumed>) = 0 [pid 5109] memfd_create("syzkaller", 0) = 3 [pid 5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5110 ./strace-static-x86_64: Process 5110 attached [pid 5110] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5110] chdir("./1") = 0 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5110] setpgid(0, 0) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5110] write(3, "1000", 4 [pid 5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5110] <... write resumed>) = 4 [pid 5110] close(3 [pid 5108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5110] <... close resumed>) = 0 [pid 5110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5110] write(1, "executing program\n", 18executing program ) = 18 [pid 5110] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5110] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5110] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] close(3 [pid 5110] <... mmap resumed>) = 0x7f8282aa3000 [pid 5082] <... close resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5110] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5111 [pid 5110] <... mprotect resumed>) = 0 [pid 5110] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 ./strace-static-x86_64: Process 5111 attached [pid 5110] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5111] set_robust_list(0x555571ec36a0, 24) = 0 ./strace-static-x86_64: Process 5112 attached [pid 5112] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5110] <... clone3 resumed> => {parent_tid=[5112]}, 88) = 5112 [pid 5112] <... rseq resumed>) = 0 [pid 5110] rt_sigprocmask(SIG_SETMASK, [], [pid 5112] set_robust_list(0x7f8282ac39a0, 24 [pid 5110] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5112] <... set_robust_list resumed>) = 0 [pid 5110] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] rt_sigprocmask(SIG_SETMASK, [], [pid 5110] <... futex resumed>) = 0 [pid 5112] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5111] chdir("./1" [pid 5110] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5111] <... chdir resumed>) = 0 [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5112] memfd_create("syzkaller", 0 [pid 5111] <... prctl resumed>) = 0 [pid 5112] <... memfd_create resumed>) = 3 [pid 5111] setpgid(0, 0) = 0 executing program [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5112] <... mmap resumed>) = 0x7f827a600000 [pid 5111] <... openat resumed>) = 3 [pid 5111] write(3, "1000", 4) = 4 [pid 5111] close(3) = 0 [pid 5111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5111] write(1, "executing program\n", 18) = 18 [pid 5111] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5111] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5111] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5111] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5111] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5111] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5113]}, 88) = 5113 [pid 5111] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5113 attached [pid 5111] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5111] <... futex resumed>) = 0 [pid 5113] <... rseq resumed>) = 0 [pid 5111] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5113] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5113] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5113] memfd_create("syzkaller", 0) = 3 [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5107] <... write resumed>) = 16777216 [pid 5107] munmap(0x7f827a600000, 138412032 [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5107] <... munmap resumed>) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5107] close(3) = 0 [pid 5107] close(4) = 0 [pid 5107] mkdir("./bus", 0777) = 0 [pid 5107] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5107] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5107] <... openat resumed>) = 3 [ 59.053323][ T5107] loop2: detected capacity change from 0 to 32768 [pid 5107] chdir("./bus") = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5107] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5107] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] <... futex resumed>) = 0 [pid 5105] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = 0 [pid 5105] <... futex resumed>) = 1 [pid 5107] unlink("./file1" [pid 5105] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... write resumed>) = 16777216 [pid 5109] munmap(0x7f827a600000, 138412032 [pid 5108] <... write resumed>) = 16777216 [pid 5107] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5108] munmap(0x7f827a600000, 138412032 [pid 5107] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5105] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 59.151568][ T5107] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 59.151568][ T5107] [ 59.180788][ T5107] ERROR: (device loop2): remounting filesystem as read-only [ 59.188133][ T5107] ERROR: (device loop2): jfs_unlink: [ 59.188133][ T5107] [pid 5105] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5107] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5105] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=48000000} [pid 5109] <... munmap resumed>) = 0 [pid 5107] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5107] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5107] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5107] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5109] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5107] <... open resumed>) = -1 EFAULT (Bad address) [pid 5107] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... openat resumed>) = 4 [pid 5107] <... futex resumed>) = 0 [pid 5107] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] ioctl(4, LOOP_SET_FD, 3 [pid 5108] <... munmap resumed>) = 0 [pid 5105] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] exit_group(0 [pid 5107] <... futex resumed>) = ? [pid 5105] <... exit_group resumed>) = ? [pid 5107] +++ exited with 0 +++ [pid 5109] <... ioctl resumed>) = 0 [pid 5109] close(3) = 0 [pid 5109] close(4) = 0 [pid 5105] +++ exited with 0 +++ [pid 5109] mkdir("./bus", 0777 [pid 5108] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=25 /* 0.25 s */} --- [pid 5109] <... mkdir resumed>) = 0 [pid 5108] <... openat resumed>) = 4 [ 59.222892][ T5107] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 59.222892][ T5107] [ 59.262525][ T5109] loop3: detected capacity change from 0 to 32768 [pid 5109] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5108] ioctl(4, LOOP_SET_FD, 3 [pid 5083] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5108] <... ioctl resumed>) = 0 [pid 5109] <... mount resumed>) = 0 [pid 5109] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5108] close(3 [pid 5109] <... openat resumed>) = 3 [pid 5108] <... close resumed>) = 0 [pid 5109] chdir("./bus") = 0 [pid 5109] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5108] close(4 [pid 5109] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5109] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5104] <... futex resumed>) = 0 [pid 5109] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5104] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5104] <... futex resumed>) = 0 [ 59.305075][ T5108] loop0: detected capacity change from 0 to 32768 [pid 5109] unlink("./file1" [pid 5108] <... close resumed>) = 0 [pid 5104] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] mkdir("./bus", 0777) = 0 [pid 5108] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5112] <... write resumed>) = 16777216 [pid 5112] munmap(0x7f827a600000, 138412032 [pid 5108] <... mount resumed>) = 0 [pid 5108] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5112] <... munmap resumed>) = 0 [pid 5108] <... openat resumed>) = 3 [pid 5112] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5108] chdir("./bus" [pid 5104] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5108] <... chdir resumed>) = 0 [pid 5104] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5104] <... futex resumed>) = 0 [pid 5108] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5104] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5108] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... mmap resumed>) = 0x7f8282a82000 [pid 5112] <... openat resumed>) = 4 [pid 5109] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5108] <... futex resumed>) = 1 [pid 5104] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5106] <... futex resumed>) = 0 [pid 5112] ioctl(4, LOOP_SET_FD, 3 [pid 5109] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... mprotect resumed>) = 0 [ 59.361273][ T5109] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 59.361273][ T5109] [ 59.382754][ T5109] ERROR: (device loop3): remounting filesystem as read-only [ 59.402836][ T5109] ERROR: (device loop3): jfs_unlink: [ 59.402836][ T5109] [pid 5108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5104] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5108] unlink("./file1" [pid 5104] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5112] <... ioctl resumed>) = 0 [pid 5109] <... futex resumed>) = 0 [pid 5106] <... futex resumed>) = 0 [pid 5109] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] close(3) = 0 [pid 5112] close(4) = 0 [pid 5112] mkdir("./bus", 0777 [pid 5104] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5112] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5114 attached [pid 5112] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5114] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5104] <... clone3 resumed> => {parent_tid=[5114]}, 88) = 5114 [pid 5104] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5104] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5114] <... rseq resumed>) = 0 [pid 5112] <... mount resumed>) = 0 [pid 5104] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5114] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5112] <... openat resumed>) = 3 [pid 5108] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5114] rt_sigprocmask(SIG_SETMASK, [], [pid 5112] chdir("./bus" [pid 5114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5112] <... chdir resumed>) = 0 [pid 5108] <... futex resumed>) = 1 [pid 5106] <... futex resumed>) = 0 [ 59.423085][ T5112] loop4: detected capacity change from 0 to 32768 [ 59.425593][ T5108] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 59.425593][ T5108] [ 59.451713][ T5108] ERROR: (device loop0): remounting filesystem as read-only [ 59.459581][ T5108] ERROR: (device loop0): jfs_unlink: [ 59.459581][ T5108] [pid 5106] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5114] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5112] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5114] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5114] <... futex resumed>) = 1 [pid 5112] <... futex resumed>) = 1 [pid 5110] <... futex resumed>) = 0 [pid 5108] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = 0 [pid 5114] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 1 [pid 5106] <... futex resumed>) = 0 [pid 5104] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5110] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = 0 [pid 5108] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = 1 [pid 5112] unlink("./file1" [pid 5110] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5106] <... futex resumed>) = 0 [pid 5104] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... open resumed>) = -1 EFAULT (Bad address) [pid 5106] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5109] <... futex resumed>) = 1 [pid 5104] <... futex resumed>) = 0 [pid 5104] exit_group(0) = ? [pid 5114] <... futex resumed>) = ? [pid 5108] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] +++ exited with 0 +++ [pid 5108] <... futex resumed>) = 1 [pid 5106] <... futex resumed>) = 0 [pid 5109] +++ exited with 0 +++ [pid 5104] +++ exited with 0 +++ [pid 5108] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] exit_group(0 [pid 5108] <... futex resumed>) = ? [pid 5106] <... exit_group resumed>) = ? [pid 5108] +++ exited with 0 +++ [pid 5106] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5106, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=35 /* 0.35 s */} --- [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5104, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5081] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(3, "", [pid 5084] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5081] getdents64(3, [ 59.470963][ T5114] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 59.470963][ T5114] [ 59.482500][ T5108] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 59.482500][ T5108] [ 59.504995][ T5112] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 59.504995][ T5112] [pid 5113] <... write resumed>) = 16777216 [pid 5084] newfstatat(3, "", [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5113] munmap(0x7f827a600000, 138412032 [pid 5112] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5112] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5112] <... futex resumed>) = 0 [pid 5110] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5110] <... futex resumed>) = 0 [pid 5110] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... munmap resumed>) = 0 [pid 5112] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5113] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5112] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... openat resumed>) = 4 [pid 5112] <... futex resumed>) = 1 [pid 5110] <... futex resumed>) = 0 [pid 5113] ioctl(4, LOOP_SET_FD, 3 [pid 5112] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5110] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] <... open resumed>) = -1 EFAULT (Bad address) [pid 5110] <... futex resumed>) = 0 [pid 5112] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... ioctl resumed>) = 0 [pid 5110] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] <... futex resumed>) = 0 [pid 5113] close(3 [pid 5110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] <... close resumed>) = 0 [pid 5112] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] exit_group(0 [pid 5113] close(4 [pid 5112] <... futex resumed>) = ? [pid 5110] <... exit_group resumed>) = ? [pid 5112] +++ exited with 0 +++ [pid 5113] <... close resumed>) = 0 [pid 5113] mkdir("./bus", 0777 [pid 5110] +++ exited with 0 +++ [pid 5113] <... mkdir resumed>) = 0 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=31 /* 0.31 s */} --- [pid 5085] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5113] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5085] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, [pid 5113] <... mount resumed>) = 0 [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5113] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5113] chdir("./bus") = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5113] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... futex resumed>) = 0 [pid 5111] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 59.535683][ T5112] ERROR: (device loop4): remounting filesystem as read-only [ 59.543798][ T5112] ERROR: (device loop4): jfs_unlink: [ 59.543798][ T5112] [ 59.555658][ T5112] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 59.555658][ T5112] [ 59.569402][ T5113] loop1: detected capacity change from 0 to 32768 [pid 5111] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... futex resumed>) = 1 [pid 5113] unlink("./file1") = -1 EIO (Input/output error) [pid 5113] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5111] <... futex resumed>) = 0 [pid 5111] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5111] <... futex resumed>) = 0 [ 59.627778][ T5113] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 59.627778][ T5113] [ 59.639440][ T5113] ERROR: (device loop1): remounting filesystem as read-only [ 59.646750][ T5113] ERROR: (device loop1): jfs_unlink: [ 59.646750][ T5113] [pid 5111] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5113] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5111] <... futex resumed>) = 0 [pid 5113] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5111] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... open resumed>) = -1 EFAULT (Bad address) [pid 5111] <... futex resumed>) = 0 [pid 5113] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... futex resumed>) = 0 [pid 5111] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] exit_group(0 [pid 5113] <... futex resumed>) = ? [pid 5111] <... exit_group resumed>) = ? [pid 5113] +++ exited with 0 +++ [pid 5111] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=22 /* 0.22 s */} --- [pid 5082] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5082] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 59.674583][ T5113] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 59.674583][ T5113] [pid 5082] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./1/bus") = 0 [pid 5082] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./1/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./1") = 0 [pid 5082] mkdir("./2", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5084] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] close(3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", [pid 5085] <... umount2 resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, [pid 5083] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./1/bus"./strace-static-x86_64: Process 5115 attached [pid 5085] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(AT_FDCWD, "./1/bus", [pid 5115] set_robust_list(0x555571ec36a0, 24 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5115 [pid 5115] <... set_robust_list resumed>) = 0 [pid 5083] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5115] chdir("./2" [pid 5085] newfstatat(AT_FDCWD, "./1/bus", [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5115] <... chdir resumed>) = 0 [pid 5084] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... openat resumed>) = 4 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(4, "", [pid 5115] <... prctl resumed>) = 0 [pid 5085] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5115] setpgid(0, 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] getdents64(4, [pid 5115] <... setpgid resumed>) = 0 [pid 5084] unlink("./1/binderfs" [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... unlink resumed>) = 0 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5115] <... openat resumed>) = 3 [pid 5085] <... openat resumed>) = 4 [pid 5083] getdents64(4, [pid 5085] newfstatat(4, "", [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5115] write(3, "1000", 4 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, [pid 5115] <... write resumed>) = 4 [pid 5085] getdents64(4, [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5115] close(3 [pid 5084] close(3 [pid 5083] close(4 [pid 5115] <... close resumed>) = 0 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] <... close resumed>) = 0 [pid 5115] symlink("/dev/binderfs", "./binderfs" [pid 5084] rmdir("./1" [pid 5083] <... close resumed>) = 0 [pid 5115] <... symlink resumed>) = 0 [pid 5085] getdents64(4, [pid 5084] <... rmdir resumed>) = 0 [pid 5083] rmdir("./1/bus" [pid 5115] write(1, "executing program\n", 18executing program ) = 18 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] mkdir("./2", 0777 [pid 5083] <... rmdir resumed>) = 0 [pid 5085] close(4 [pid 5083] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... close resumed>) = 0 [pid 5115] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] rmdir("./1/bus" [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5115] <... futex resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5115] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5115] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5115] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5115] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5115] <... mmap resumed>) = 0x7f8282aa3000 [pid 5085] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] unlink("./1/binderfs" [pid 5115] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... unlink resumed>) = 0 [pid 5115] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5085] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5115] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] getdents64(3, ./strace-static-x86_64: Process 5116 attached [pid 5085] unlink("./1/binderfs" [pid 5116] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5115] <... clone3 resumed> => {parent_tid=[5116]}, 88) = 5116 [pid 5116] <... rseq resumed>) = 0 [pid 5115] rt_sigprocmask(SIG_SETMASK, [], [pid 5116] set_robust_list(0x7f8282ac39a0, 24 [pid 5115] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5116] <... set_robust_list resumed>) = 0 [pid 5115] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] rt_sigprocmask(SIG_SETMASK, [], [pid 5115] <... futex resumed>) = 0 [pid 5116] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5116] memfd_create("syzkaller", 0 [pid 5115] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] <... unlink resumed>) = 0 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5116] <... memfd_create resumed>) = 3 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5083] close(3 [pid 5085] getdents64(3, [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./1" [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5083] <... rmdir resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5085] rmdir("./1") = 0 [pid 5083] mkdir("./2", 0777) = 0 [pid 5085] mkdir("./2", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./1/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./1/bus") = 0 [pid 5081] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./1/binderfs") = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./1") = 0 [pid 5081] mkdir("./2", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5117 attached [pid 5117] set_robust_list(0x555571ec36a0, 24 [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5117 [pid 5117] <... set_robust_list resumed>) = 0 [pid 5117] chdir("./2" [pid 5083] <... ioctl resumed>) = 0 [pid 5117] <... chdir resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5117] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] close(3 [pid 5117] <... prctl resumed>) = 0 [pid 5117] setpgid(0, 0 [pid 5083] <... close resumed>) = 0 [pid 5117] <... setpgid resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5118 attached [pid 5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5118 [pid 5117] <... openat resumed>) = 3 [pid 5085] close(3 [pid 5118] set_robust_list(0x555571ec36a0, 24 [pid 5117] write(3, "1000", 4 [pid 5118] <... set_robust_list resumed>) = 0 [pid 5117] <... write resumed>) = 4 [pid 5085] <... close resumed>) = 0 [pid 5117] close(3 [pid 5118] chdir("./2" [pid 5117] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5118] <... chdir resumed>) = 0 [pid 5117] symlink("/dev/binderfs", "./binderfs" [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5117] <... symlink resumed>) = 0 executing program [pid 5118] setpgid(0, 0 [pid 5117] write(1, "executing program\n", 18 [pid 5118] <... setpgid resumed>) = 0 [pid 5117] <... write resumed>) = 18 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5117] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... openat resumed>) = 3 [pid 5117] <... futex resumed>) = 0 [pid 5117] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, ./strace-static-x86_64: Process 5119 attached [pid 5118] write(3, "1000", 4 [pid 5117] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5119] set_robust_list(0x555571ec36a0, 24 [pid 5118] <... write resumed>) = 4 [pid 5117] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5119] <... set_robust_list resumed>) = 0 [pid 5118] close(3 [pid 5117] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5118] <... close resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5119 [pid 5119] chdir("./2" [pid 5118] symlink("/dev/binderfs", "./binderfs" [pid 5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5119] <... chdir resumed>) = 0 [pid 5118] <... symlink resumed>) = 0 [pid 5117] <... mmap resumed>) = 0x7f8282aa3000 [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5118] write(1, "executing program\n", 18 [pid 5117] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITEexecuting program [pid 5119] setpgid(0, 0 [pid 5118] <... write resumed>) = 18 [pid 5117] <... mprotect resumed>) = 0 [pid 5119] <... setpgid resumed>) = 0 [pid 5118] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5118] <... futex resumed>) = 0 [pid 5117] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5118] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5117] <... clone3 resumed> => {parent_tid=[5120]}, 88) = 5120 [pid 5119] <... openat resumed>) = 3 [pid 5118] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5117] rt_sigprocmask(SIG_SETMASK, [], [pid 5118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5117] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5117] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5120 attached [pid 5118] <... mmap resumed>) = 0x7f8282aa3000 [pid 5117] <... futex resumed>) = 0 [pid 5120] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5119] write(3, "1000", 4 [pid 5120] <... rseq resumed>) = 0 [pid 5119] <... write resumed>) = 4 [pid 5117] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5120] set_robust_list(0x7f8282ac39a0, 24 [pid 5119] close(3 [pid 5118] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5120] <... set_robust_list resumed>) = 0 [pid 5119] <... close resumed>) = 0 [pid 5118] <... mprotect resumed>) = 0 [pid 5119] symlink("/dev/binderfs", "./binderfs" [pid 5120] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 executing program [pid 5118] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5120] memfd_create("syzkaller", 0) = 3 [pid 5120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5119] <... symlink resumed>) = 0 [pid 5118] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5120] <... mmap resumed>) = 0x7f827a600000 [pid 5119] write(1, "executing program\n", 18 [pid 5118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5119] <... write resumed>) = 18 [pid 5119] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5121 attached ) = 0 [pid 5119] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5118] <... clone3 resumed> => {parent_tid=[5121]}, 88) = 5121 [pid 5121] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5119] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5118] rt_sigprocmask(SIG_SETMASK, [], [pid 5121] <... rseq resumed>) = 0 [pid 5119] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5121] set_robust_list(0x7f8282ac39a0, 24 [pid 5119] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5118] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... set_robust_list resumed>) = 0 [pid 5119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5118] <... futex resumed>) = 0 [pid 5121] rt_sigprocmask(SIG_SETMASK, [], [pid 5119] <... mmap resumed>) = 0x7f8282aa3000 [pid 5121] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5118] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5121] memfd_create("syzkaller", 0 [pid 5119] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5121] <... memfd_create resumed>) = 3 [pid 5119] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5119] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5122 attached ) = 0x7f827a600000 [pid 5116] <... write resumed>) = 16777216 [pid 5081] <... ioctl resumed>) = 0 [pid 5081] close(3 [pid 5122] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5119] <... clone3 resumed> => {parent_tid=[5122]}, 88) = 5122 [pid 5116] munmap(0x7f827a600000, 138412032 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5119] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5122] <... rseq resumed>) = 0 [pid 5119] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] set_robust_list(0x7f8282ac39a0, 24./strace-static-x86_64: Process 5123 attached ) = 0 [pid 5119] <... futex resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555571ec3690) = 5123 [pid 5123] set_robust_list(0x555571ec36a0, 24 [pid 5122] rt_sigprocmask(SIG_SETMASK, [], [pid 5119] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5123] <... set_robust_list resumed>) = 0 [pid 5123] chdir("./2") = 0 [pid 5122] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5122] memfd_create("syzkaller", 0 [pid 5123] <... prctl resumed>) = 0 [pid 5123] setpgid(0, 0 [pid 5122] <... memfd_create resumed>) = 3 [pid 5123] <... setpgid resumed>) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5123] <... openat resumed>) = 3 [pid 5123] write(3, "1000", 4) = 4 [pid 5123] close(3 [pid 5116] <... munmap resumed>) = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5116] ioctl(4, LOOP_SET_FD, 3 [pid 5123] <... close resumed>) = 0 [pid 5123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5116] <... ioctl resumed>) = 0 [pid 5116] close(3) = 0 [pid 5116] close(4 [pid 5123] write(1, "executing program\n", 18 [pid 5116] <... close resumed>) = 0 executing program [pid 5123] <... write resumed>) = 18 [pid 5123] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5123] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5116] mkdir("./bus", 0777) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5116] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5123] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5123] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5124 attached [pid 5124] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5124] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5124] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5123] <... clone3 resumed> => {parent_tid=[5124]}, 88) = 5124 [pid 5123] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5123] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 60.472309][ T5116] loop1: detected capacity change from 0 to 32768 [pid 5124] memfd_create("syzkaller", 0) = 3 [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5123] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5116] <... mount resumed>) = 0 [pid 5116] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5116] chdir("./bus") = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5116] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] <... futex resumed>) = 0 [pid 5115] <... futex resumed>) = 1 [pid 5116] unlink("./file1" [pid 5115] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 60.572197][ T5116] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 60.572197][ T5116] [ 60.605608][ T5116] ERROR: (device loop1): remounting filesystem as read-only [pid 5120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5115] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5115] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5115] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5115] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5115] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5125 attached [pid 5125] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5115] <... clone3 resumed> => {parent_tid=[5125]}, 88) = 5125 [pid 5125] <... rseq resumed>) = 0 [pid 5115] rt_sigprocmask(SIG_SETMASK, [], [pid 5125] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5116] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5115] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5116] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5125] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5125] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5125] <... futex resumed>) = 1 [pid 5125] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5116] <... futex resumed>) = 0 [pid 5116] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [ 60.623887][ T5116] ERROR: (device loop1): jfs_unlink: [ 60.623887][ T5116] [ 60.661552][ T5125] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 60.661552][ T5125] [pid 5116] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5115] exit_group(0 [pid 5125] <... futex resumed>) = ? [pid 5115] <... exit_group resumed>) = ? [pid 5125] +++ exited with 0 +++ [pid 5116] +++ exited with 0 +++ [pid 5115] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=21 /* 0.21 s */} --- [pid 5082] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5082] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./2/bus") = 0 [pid 5082] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./2/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./2") = 0 [pid 5121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5082] mkdir("./3", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5120] <... write resumed>) = 16777216 [pid 5120] munmap(0x7f827a600000, 138412032) = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5120] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... ioctl resumed>) = 0 [pid 5120] <... ioctl resumed>) = 0 [pid 5082] close(3) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5126 attached [pid 5126] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5126] chdir("./3") = 0 [pid 5126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5126] setpgid(0, 0) = 0 [pid 5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5126 [pid 5126] write(3, "1000", 4) = 4 [pid 5126] close(3) = 0 [pid 5126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5126] write(1, "executing program\n", 18) = 18 [pid 5126] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5126] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5126] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5126] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5127]}, 88) = 5127 ./strace-static-x86_64: Process 5127 attached [pid 5126] rt_sigprocmask(SIG_SETMASK, [], [pid 5120] close(3) = 0 [ 61.108774][ T5120] loop3: detected capacity change from 0 to 32768 [pid 5120] close(4 [pid 5127] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5126] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5127] <... rseq resumed>) = 0 [pid 5126] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] set_robust_list(0x7f8282ac39a0, 24 [pid 5126] <... futex resumed>) = 0 [pid 5127] <... set_robust_list resumed>) = 0 [pid 5126] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5127] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5127] memfd_create("syzkaller", 0) = 3 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5120] <... close resumed>) = 0 [pid 5121] <... write resumed>) = 16777216 [pid 5120] mkdir("./bus", 0777) = 0 [pid 5120] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5122] <... write resumed>) = 16777216 [pid 5121] munmap(0x7f827a600000, 138412032 [pid 5122] munmap(0x7f827a600000, 138412032 [pid 5120] <... mount resumed>) = 0 [pid 5120] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5120] chdir("./bus") = 0 [pid 5120] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5120] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5120] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] <... munmap resumed>) = 0 [pid 5121] <... munmap resumed>) = 0 [pid 5117] <... futex resumed>) = 0 [pid 5117] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] <... futex resumed>) = 0 [pid 5120] unlink("./file1" [pid 5121] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5122] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5121] <... openat resumed>) = 4 [pid 5122] ioctl(4, LOOP_SET_FD, 3 [pid 5121] ioctl(4, LOOP_SET_FD, 3 [pid 5117] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5117] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5117] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5117] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5117] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5128]}, 88) = 5128 [pid 5117] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5122] <... ioctl resumed>) = 0 [ 61.228955][ T5120] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 61.228955][ T5120] [ 61.248039][ T5120] ERROR: (device loop3): remounting filesystem as read-only [ 61.249158][ T5121] loop2: detected capacity change from 0 to 32768 [ 61.256060][ T5122] loop4: detected capacity change from 0 to 32768 [pid 5117] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5117] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5128 attached [pid 5128] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5128] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5128] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5128] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5117] <... futex resumed>) = 0 [pid 5128] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] close(3 [pid 5117] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5117] <... futex resumed>) = 0 [pid 5128] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5122] <... close resumed>) = 0 [pid 5117] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... open resumed>) = -1 EFAULT (Bad address) [pid 5122] close(4 [pid 5128] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... close resumed>) = 0 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5128] <... futex resumed>) = 0 [pid 5122] mkdir("./bus", 0777 [pid 5128] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] <... mkdir resumed>) = 0 [pid 5122] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5121] <... ioctl resumed>) = 0 [pid 5121] close(3 [pid 5122] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5121] <... close resumed>) = 0 [pid 5122] <... openat resumed>) = 3 [pid 5121] close(4 [pid 5122] chdir("./bus" [pid 5121] <... close resumed>) = 0 [pid 5121] mkdir("./bus", 0777 [pid 5122] <... chdir resumed>) = 0 [pid 5121] <... mkdir resumed>) = 0 [pid 5122] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5121] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5122] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5122] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5122] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5120] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5119] <... futex resumed>) = 0 [pid 5122] unlink("./file1" [pid 5121] <... mount resumed>) = 0 [pid 5119] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5121] chdir("./bus") = 0 [pid 5121] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5121] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [ 61.279253][ T5120] ERROR: (device loop3): jfs_unlink: [ 61.279253][ T5120] [ 61.287816][ T5120] ERROR: (device loop3): remounting filesystem as read-only [pid 5120] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... futex resumed>) = 1 [pid 5118] <... futex resumed>) = 0 [pid 5117] exit_group(0 [pid 5128] <... futex resumed>) = ? [pid 5121] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... exit_group resumed>) = ? [pid 5120] <... futex resumed>) = ? [pid 5128] +++ exited with 0 +++ [pid 5120] +++ exited with 0 +++ [pid 5117] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5117, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5121] unlink("./file1" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5118] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5118] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 61.334490][ T5122] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 61.334490][ T5122] [ 61.354598][ T5121] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 61.354598][ T5121] [ 61.375632][ T5122] ERROR: (device loop4): remounting filesystem as read-only [pid 5084] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5119] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5119] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5119] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5119] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5119] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5129 attached => {parent_tid=[5129]}, 88) = 5129 [pid 5129] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5129] set_robust_list(0x7f8282aa29a0, 24 [pid 5119] rt_sigprocmask(SIG_SETMASK, [], [pid 5129] <... set_robust_list resumed>) = 0 [pid 5119] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5129] rt_sigprocmask(SIG_SETMASK, [], [pid 5119] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5119] <... futex resumed>) = 0 [pid 5119] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5118] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5118] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5129] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5118] <... mprotect resumed>) = 0 [pid 5118] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5129] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5118] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5129] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5130 attached [pid 5129] <... futex resumed>) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5130] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5129] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5119] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... clone3 resumed> => {parent_tid=[5130]}, 88) = 5130 [pid 5130] <... rseq resumed>) = 0 [pid 5129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5119] <... futex resumed>) = 0 [pid 5118] rt_sigprocmask(SIG_SETMASK, [], [pid 5130] set_robust_list(0x7f8282aa29a0, 24 [pid 5129] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5119] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5130] <... set_robust_list resumed>) = 0 [ 61.377290][ T5084] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 61.377290][ T5084] [ 61.412892][ T5121] ERROR: (device loop2): remounting filesystem as read-only [ 61.420773][ T5122] ERROR: (device loop4): jfs_unlink: [ 61.420773][ T5122] [pid 5129] <... open resumed>) = -1 EFAULT (Bad address) [pid 5118] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] rt_sigprocmask(SIG_SETMASK, [], [pid 5129] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 5130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5129] <... futex resumed>) = 1 [pid 5119] <... futex resumed>) = 0 [pid 5118] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5130] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] <... futex resumed>) = 1 [pid 5124] <... write resumed>) = 16777216 [pid 5122] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5118] <... futex resumed>) = 0 [pid 5130] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5118] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... open resumed>) = -1 EFAULT (Bad address) [pid 5118] <... futex resumed>) = 0 [pid 5130] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5130] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] munmap(0x7f827a600000, 138412032 [pid 5122] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] exit_group(0 [pid 5129] <... futex resumed>) = ? [pid 5119] <... exit_group resumed>) = ? [pid 5129] +++ exited with 0 +++ [pid 5122] <... futex resumed>) = ? [pid 5122] +++ exited with 0 +++ [pid 5119] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5085] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5121] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5121] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5121] <... futex resumed>) = 0 [pid 5121] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... openat resumed>) = 3 [pid 5118] exit_group(0 [pid 5085] newfstatat(3, "", [pid 5130] <... futex resumed>) = ? [pid 5121] <... futex resumed>) = ? [pid 5118] <... exit_group resumed>) = ? [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5130] +++ exited with 0 +++ [pid 5124] <... munmap resumed>) = 0 [pid 5121] +++ exited with 0 +++ [pid 5118] +++ exited with 0 +++ [ 61.436491][ T5121] ERROR: (device loop2): jfs_unlink: [ 61.436491][ T5121] [ 61.445333][ T5122] ERROR: (device loop4): remounting filesystem as read-only [ 61.454962][ T5121] ERROR: (device loop2): remounting filesystem as read-only [pid 5085] getdents64(3, [pid 5124] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5124] <... openat resumed>) = 4 [pid 5085] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=35 /* 0.35 s */} --- [pid 5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5124] ioctl(4, LOOP_SET_FD, 3 [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, [pid 5124] <... ioctl resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5124] close(3) = 0 [pid 5084] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5124] close(4 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5124] <... close resumed>) = 0 [pid 5085] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5124] mkdir("./bus", 0777 [pid 5084] newfstatat(AT_FDCWD, "./2/bus", [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./2/bus", [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 61.490381][ T5085] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 61.490381][ T5085] [ 61.501439][ T5124] loop0: detected capacity change from 0 to 32768 [pid 5085] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5124] <... mkdir resumed>) = 0 [pid 5084] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5124] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5085] newfstatat(4, "", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5124] <... mount resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5124] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5124] chdir("./bus" [pid 5085] getdents64(4, [pid 5084] newfstatat(4, "", [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5124] <... chdir resumed>) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5084] getdents64(4, [pid 5085] getdents64(4, [pid 5124] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5124] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(4, [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5124] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(4 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5123] <... futex resumed>) = 0 [pid 5124] unlink("./file1" [pid 5123] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./2/bus") = 0 [pid 5085] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./2/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./2") = 0 [pid 5085] mkdir("./3", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5084] rmdir("./2/bus") = 0 [pid 5084] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5083] <... umount2 resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 61.552467][ T5083] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 61.552467][ T5083] [ 61.567427][ T5124] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 61.567427][ T5124] [ 61.591398][ T5124] ERROR: (device loop0): remounting filesystem as read-only [pid 5084] unlink("./2/binderfs" [pid 5083] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... unlink resumed>) = 0 [pid 5084] getdents64(3, [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] newfstatat(AT_FDCWD, "./2/bus", [pid 5084] close(3) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] rmdir("./2" [pid 5083] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5084] mkdir("./3", 0777 [pid 5124] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5083] getdents64(4, [pid 5084] <... mkdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] close(4 [pid 5084] <... openat resumed>) = 3 [pid 5083] <... close resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] rmdir("./2/bus") = 0 [pid 5083] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5124] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 61.598834][ T5124] ERROR: (device loop0): jfs_unlink: [ 61.598834][ T5124] [pid 5124] <... futex resumed>) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5124] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5123] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5123] <... futex resumed>) = 0 [pid 5083] unlink("./2/binderfs" [pid 5123] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... unlink resumed>) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./2") = 0 [pid 5083] mkdir("./3", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5124] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5124] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5124] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5123] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... open resumed>) = -1 EFAULT (Bad address) [pid 5123] <... futex resumed>) = 0 [pid 5124] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 0 [pid 5123] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5124] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] exit_group(0 [pid 5124] <... futex resumed>) = ? [pid 5123] <... exit_group resumed>) = ? [pid 5124] +++ exited with 0 +++ [pid 5123] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5081] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 61.629917][ T5124] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 61.629917][ T5124] [pid 5081] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5131 attached [pid 5131] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5131] chdir("./3") = 0 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5131 [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5131] setpgid(0, 0) = 0 [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5131] write(3, "1000", 4) = 4 [pid 5131] close(3) = 0 [pid 5131] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5131] write(1, "executing program\n", 18) = 18 [pid 5131] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5131] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5131] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5131] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5131] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5132 attached [pid 5132] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5132] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5132] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] <... clone3 resumed> => {parent_tid=[5132]}, 88) = 5132 [pid 5127] <... write resumed>) = 16777216 [pid 5131] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5127] munmap(0x7f827a600000, 138412032 [pid 5131] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] <... futex resumed>) = 0 [pid 5131] <... futex resumed>) = 1 [pid 5132] memfd_create("syzkaller", 0 [pid 5131] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5132] <... memfd_create resumed>) = 3 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5127] <... munmap resumed>) = 0 [pid 5127] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5127] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5127] close(3) = 0 [pid 5127] close(4) = 0 [pid 5127] mkdir("./bus", 0777) = 0 [pid 5127] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5127] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5127] chdir("./bus" [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3 [pid 5127] <... chdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5127] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5133 ./strace-static-x86_64: Process 5133 attached [pid 5127] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = 0 [pid 5133] set_robust_list(0x555571ec36a0, 24 [pid 5127] <... futex resumed>) = 1 [pid 5081] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5133] <... set_robust_list resumed>) = 0 [pid 5127] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5133] chdir("./3" [pid 5126] <... futex resumed>) = 0 [pid 5081] newfstatat(AT_FDCWD, "./2/bus", [pid 5126] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5126] <... futex resumed>) = 1 [pid 5081] umount2("./2/bus", MNT_FORCE|UMOUNT_NOFOLLOW [ 61.904416][ T5127] loop1: detected capacity change from 0 to 32768 [pid 5126] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5127] unlink("./file1" [pid 5081] openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(4, "", [pid 5133] <... chdir resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] getdents64(4, [pid 5133] <... prctl resumed>) = 0 [pid 5133] setpgid(0, 0) = 0 [pid 5081] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] <... ioctl resumed>) = 0 [pid 5081] getdents64(4, [pid 5133] write(3, "1000", 4 [pid 5081] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5133] <... write resumed>) = 4 [ 61.962270][ T5127] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 61.962270][ T5127] [ 61.999372][ T5127] ERROR: (device loop1): remounting filesystem as read-only [ 62.006717][ T5127] ERROR: (device loop1): jfs_unlink: [pid 5081] close(4 [pid 5133] close(3 [pid 5083] close(3 [pid 5081] <... close resumed>) = 0 [pid 5133] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5134 [pid 5126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5126] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5126] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5126] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5126] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5081] rmdir("./2/bus" [pid 5126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5135 attached [pid 5081] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5134 attached [pid 5135] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5126] <... clone3 resumed> => {parent_tid=[5135]}, 88) = 5135 [pid 5126] rt_sigprocmask(SIG_SETMASK, [], [pid 5134] set_robust_list(0x555571ec36a0, 24 [pid 5133] symlink("/dev/binderfs", "./binderfs" [pid 5127] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5126] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5134] <... set_robust_list resumed>) = 0 [pid 5135] <... rseq resumed>) = 0 [pid 5126] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] set_robust_list(0x7f8282aa29a0, 24 [pid 5133] <... symlink resumed>) = 0 [pid 5126] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5135] <... set_robust_list resumed>) = 0 [pid 5134] chdir("./3" [pid 5126] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5135] rt_sigprocmask(SIG_SETMASK, [], [pid 5134] <... chdir resumed>) = 0 [pid 5135] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program [pid 5133] write(1, "executing program\n", 18 [pid 5127] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 62.006717][ T5127] [pid 5135] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5134] <... prctl resumed>) = 0 [pid 5133] <... write resumed>) = 18 [pid 5127] <... futex resumed>) = 0 [pid 5081] unlink("./2/binderfs" [pid 5134] setpgid(0, 0 [pid 5127] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... unlink resumed>) = 0 [pid 5134] <... setpgid resumed>) = 0 [pid 5133] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5133] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5134] <... openat resumed>) = 3 [pid 5133] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5081] close(3 [pid 5133] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5081] <... close resumed>) = 0 [pid 5133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] rmdir("./2" [pid 5133] <... mmap resumed>) = 0x7f8282aa3000 [pid 5135] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5134] write(3, "1000", 4 [pid 5133] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... rmdir resumed>) = 0 [pid 5135] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... write resumed>) = 4 [pid 5133] <... mprotect resumed>) = 0 [pid 5081] mkdir("./3", 0777 [pid 5135] <... futex resumed>) = 1 [pid 5134] close(3 [pid 5126] <... futex resumed>) = 0 [pid 5135] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] <... close resumed>) = 0 [pid 5133] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5126] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mkdir resumed>) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs" [pid 5133] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5127] <... futex resumed>) = 0 [pid 5126] <... futex resumed>) = 1 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5127] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5126] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... open resumed>) = -1 EFAULT (Bad address) [pid 5081] <... openat resumed>) = 3 [pid 5127] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5136 attached [pid 5133] <... clone3 resumed> => {parent_tid=[5136]}, 88) = 5136 [pid 5127] <... futex resumed>) = 1 [pid 5126] <... futex resumed>) = 0 [pid 5136] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5134] <... symlink resumed>) = 0 [pid 5133] rt_sigprocmask(SIG_SETMASK, [], [pid 5127] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5126] exit_group(0executing program [pid 5136] <... rseq resumed>) = 0 [pid 5134] write(1, "executing program\n", 18 [pid 5136] set_robust_list(0x7f8282ac39a0, 24 [pid 5134] <... write resumed>) = 18 [pid 5136] <... set_robust_list resumed>) = 0 [pid 5136] rt_sigprocmask(SIG_SETMASK, [], [pid 5135] <... futex resumed>) = ? [pid 5134] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = ? [pid 5126] <... exit_group resumed>) = ? [pid 5135] +++ exited with 0 +++ [pid 5134] <... futex resumed>) = 0 [pid 5133] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5127] +++ exited with 0 +++ [pid 5136] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5134] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5133] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5126] +++ exited with 0 +++ [pid 5134] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5133] <... futex resumed>) = 0 [pid 5134] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5133] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5126, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=33 /* 0.33 s */} --- [pid 5136] memfd_create("syzkaller", 0 [pid 5134] <... mmap resumed>) = 0x7f8282aa3000 [pid 5136] <... memfd_create resumed>) = 3 [pid 5082] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] <... mmap resumed>) = 0x7f827a600000 [pid 5134] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5082] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5134] <... mprotect resumed>) = 0 [ 62.033150][ T5135] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 62.033150][ T5135] [pid 5134] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5134] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5082] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5134] <... clone3 resumed> => {parent_tid=[5137]}, 88) = 5137 ./strace-static-x86_64: Process 5137 attached [pid 5137] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5137] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5137] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5137] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5134] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = 0 [pid 5134] <... futex resumed>) = 1 [pid 5137] memfd_create("syzkaller", 0 [pid 5134] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5137] <... memfd_create resumed>) = 3 [pid 5137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./3/bus") = 0 [pid 5082] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./3/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./3") = 0 [pid 5082] mkdir("./4", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... ioctl resumed>) = 0 [pid 5081] close(3 [pid 5137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5138 ./strace-static-x86_64: Process 5138 attached [pid 5138] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5138] chdir("./3") = 0 [pid 5138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5138] setpgid(0, 0) = 0 [pid 5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5138] write(3, "1000", 4) = 4 [pid 5138] close(3 [pid 5132] <... write resumed>) = 16777216 [pid 5138] <... close resumed>) = 0 [pid 5138] symlink("/dev/binderfs", "./binderfs" [pid 5132] munmap(0x7f827a600000, 138412032 executing program [pid 5138] <... symlink resumed>) = 0 [pid 5138] write(1, "executing program\n", 18) = 18 [pid 5138] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5138] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5132] <... munmap resumed>) = 0 [pid 5138] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5138] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5132] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5139 attached [pid 5138] <... clone3 resumed> => {parent_tid=[5139]}, 88) = 5139 [pid 5132] <... openat resumed>) = 4 [pid 5139] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5138] rt_sigprocmask(SIG_SETMASK, [], [pid 5132] ioctl(4, LOOP_SET_FD, 3 [pid 5139] <... rseq resumed>) = 0 [pid 5138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5139] set_robust_list(0x7f8282ac39a0, 24 [pid 5138] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... set_robust_list resumed>) = 0 [pid 5138] <... futex resumed>) = 0 [pid 5139] rt_sigprocmask(SIG_SETMASK, [], [pid 5138] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5139] memfd_create("syzkaller", 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5139] <... memfd_create resumed>) = 3 [pid 5132] <... ioctl resumed>) = 0 [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5132] close(3 [pid 5082] close(3 [pid 5139] <... mmap resumed>) = 0x7f827a600000 [pid 5082] <... close resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5140 attached [pid 5132] <... close resumed>) = 0 [pid 5140] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5140] chdir("./4") = 0 [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5140] setpgid(0, 0 [pid 5132] close(4 [pid 5140] <... setpgid resumed>) = 0 [ 62.544214][ T5132] loop4: detected capacity change from 0 to 32768 [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5132] <... close resumed>) = 0 [pid 5140] <... openat resumed>) = 3 [pid 5140] write(3, "1000", 4) = 4 [pid 5132] mkdir("./bus", 0777 [pid 5140] close(3) = 0 [pid 5132] <... mkdir resumed>) = 0 [pid 5140] symlink("/dev/binderfs", "./binderfs" [pid 5132] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5140] <... symlink resumed>) = 0 [pid 5140] write(1, "executing program\n", 18 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5140 [pid 5132] <... mount resumed>) = 0 [pid 5132] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORYexecuting program [pid 5140] <... write resumed>) = 18 [pid 5132] <... openat resumed>) = 3 [pid 5132] chdir("./bus" [pid 5140] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] <... chdir resumed>) = 0 [pid 5132] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5140] <... futex resumed>) = 0 [pid 5132] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5132] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5131] <... futex resumed>) = 0 [pid 5132] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5131] <... futex resumed>) = 0 [pid 5132] unlink("./file1" [pid 5131] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5140] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5140] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5140] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5140] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5141]}, 88) = 5141 [pid 5140] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5141 attached NULL, 8) = 0 [pid 5141] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5140] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... rseq resumed>) = 0 [pid 5140] <... futex resumed>) = 0 [pid 5141] set_robust_list(0x7f8282ac39a0, 24 [pid 5140] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5141] <... set_robust_list resumed>) = 0 [pid 5141] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5141] memfd_create("syzkaller", 0) = 3 [ 62.634241][ T5132] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 62.634241][ T5132] [pid 5141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5131] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5131] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5131] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5131] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5131] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5142 attached [pid 5142] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5131] <... clone3 resumed> => {parent_tid=[5142]}, 88) = 5142 [pid 5142] <... rseq resumed>) = 0 [pid 5131] rt_sigprocmask(SIG_SETMASK, [], [pid 5142] set_robust_list(0x7f8282aa29a0, 24 [pid 5131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5142] <... set_robust_list resumed>) = 0 [pid 5131] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5142] rt_sigprocmask(SIG_SETMASK, [], [pid 5132] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5131] <... futex resumed>) = 0 [pid 5142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5132] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 62.677238][ T5132] ERROR: (device loop4): remounting filesystem as read-only [ 62.709163][ T5132] ERROR: (device loop4): jfs_unlink: [ 62.709163][ T5132] [pid 5142] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5132] <... futex resumed>) = 0 [pid 5132] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] <... write resumed>) = 16777216 [pid 5136] munmap(0x7f827a600000, 138412032 [pid 5142] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5142] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5131] <... futex resumed>) = 0 [ 62.722163][ T5142] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 62.722163][ T5142] [pid 5142] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5131] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] <... munmap resumed>) = 0 [pid 5132] <... futex resumed>) = 0 [pid 5132] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5132] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5131] <... futex resumed>) = 0 [pid 5132] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] exit_group(0 [pid 5142] <... futex resumed>) = ? [pid 5132] <... futex resumed>) = ? [pid 5131] <... exit_group resumed>) = ? [pid 5142] +++ exited with 0 +++ [pid 5132] +++ exited with 0 +++ [pid 5131] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5131, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=22 /* 0.22 s */} --- [pid 5085] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5136] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5085] newfstatat(3, "", [pid 5136] <... openat resumed>) = 4 [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5136] <... ioctl resumed>) = 0 [pid 5136] close(3) = 0 [pid 5136] close(4) = 0 [pid 5136] mkdir("./bus", 0777) = 0 [pid 5137] <... write resumed>) = 16777216 [pid 5137] munmap(0x7f827a600000, 138412032 [pid 5136] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5085] <... umount2 resumed>) = 0 [pid 5136] <... mount resumed>) = 0 [pid 5136] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5136] chdir("./bus") = 0 [ 62.819539][ T5136] loop3: detected capacity change from 0 to 32768 [pid 5136] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5136] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5136] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5085] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5136] unlink("./file1" [pid 5133] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, [pid 5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./3/bus") = 0 [pid 5085] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./3/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5137] <... munmap resumed>) = 0 [pid 5085] rmdir("./3") = 0 [pid 5085] mkdir("./4", 0777 [pid 5137] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5085] <... mkdir resumed>) = 0 [pid 5137] <... openat resumed>) = 4 [ 62.888666][ T5136] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 62.888666][ T5136] [pid 5137] ioctl(4, LOOP_SET_FD, 3 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5136] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5133] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] <... openat resumed>) = 3 [pid 5136] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5136] <... futex resumed>) = 0 [pid 5133] <... futex resumed>) = 0 [pid 5133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5136] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] <... mmap resumed>) = 0x7f8282a82000 [pid 5133] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5143 attached [pid 5143] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5133] <... clone3 resumed> => {parent_tid=[5143]}, 88) = 5143 [pid 5133] rt_sigprocmask(SIG_SETMASK, [], [pid 5143] <... rseq resumed>) = 0 [pid 5133] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] set_robust_list(0x7f8282aa29a0, 24 [pid 5133] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... set_robust_list resumed>) = 0 [pid 5133] <... futex resumed>) = 0 [pid 5143] rt_sigprocmask(SIG_SETMASK, [], [pid 5133] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5137] <... ioctl resumed>) = 0 [pid 5137] close(3) = 0 [pid 5137] close(4) = 0 [pid 5137] mkdir("./bus", 0777) = 0 [pid 5137] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5143] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5143] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5143] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5136] <... futex resumed>) = 0 [pid 5133] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5136] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5136] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] exit_group(0 [pid 5143] <... futex resumed>) = ? [pid 5136] <... futex resumed>) = ? [pid 5133] <... exit_group resumed>) = ? [pid 5143] +++ exited with 0 +++ [pid 5136] +++ exited with 0 +++ [pid 5133] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5133, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=23 /* 0.23 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 62.929186][ T5136] ERROR: (device loop3): remounting filesystem as read-only [ 62.930612][ T5137] loop2: detected capacity change from 0 to 32768 [ 62.936510][ T5136] ERROR: (device loop3): jfs_unlink: [ 62.936510][ T5136] [ 62.957400][ T5143] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 62.957400][ T5143] [pid 5084] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5137] <... mount resumed>) = 0 [pid 5137] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5137] chdir("./bus") = 0 [pid 5137] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5137] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5137] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5134] <... futex resumed>) = 0 [pid 5137] unlink("./file1" [pid 5134] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5137] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 63.037009][ T5137] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 63.037009][ T5137] [ 63.069235][ T5137] ERROR: (device loop2): remounting filesystem as read-only [ 63.077627][ T5137] ERROR: (device loop2): jfs_unlink: [ 63.077627][ T5137] [pid 5134] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5137] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5134] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5134] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5137] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] <... futex resumed>) = 0 [pid 5134] exit_group(0) = ? [pid 5137] +++ exited with 0 +++ [pid 5134] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [ 63.115897][ T5137] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 63.115897][ T5137] [pid 5083] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5139] <... write resumed>) = 16777216 [pid 5085] <... ioctl resumed>) = 0 [pid 5139] munmap(0x7f827a600000, 138412032 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5139] <... munmap resumed>) = 0 [pid 5139] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ./strace-static-x86_64: Process 5144 attached [pid 5139] ioctl(4, LOOP_SET_FD, 3 [pid 5144] set_robust_list(0x555571ec36a0, 24 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5144 [pid 5144] <... set_robust_list resumed>) = 0 [pid 5144] chdir("./4") = 0 [pid 5144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5144] setpgid(0, 0) = 0 [pid 5141] <... write resumed>) = 16777216 [pid 5139] <... ioctl resumed>) = 0 [pid 5139] close(3 [pid 5144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5139] <... close resumed>) = 0 [pid 5141] munmap(0x7f827a600000, 138412032 [pid 5139] close(4) = 0 [pid 5139] mkdir("./bus", 0777) = 0 [pid 5139] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5144] <... openat resumed>) = 3 [pid 5141] <... munmap resumed>) = 0 [ 63.253402][ T5139] loop0: detected capacity change from 0 to 32768 [pid 5141] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5144] write(3, "1000", 4 [pid 5141] <... openat resumed>) = 4 [pid 5139] <... mount resumed>) = 0 [pid 5141] ioctl(4, LOOP_SET_FD, 3 [pid 5139] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5139] chdir("./bus") = 0 [pid 5139] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5144] <... write resumed>) = 4 [pid 5139] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5144] close(3 [pid 5139] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... close resumed>) = 0 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5139] unlink("./file1" [pid 5138] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5141] <... ioctl resumed>) = 0 [pid 5141] close(3) = 0 [pid 5144] symlink("/dev/binderfs", "./binderfs" [pid 5141] close(4 [pid 5144] <... symlink resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [ 63.294349][ T5141] loop1: detected capacity change from 0 to 32768 [ 63.302965][ T5139] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 63.302965][ T5139] executing program [pid 5144] write(1, "executing program\n", 18 [pid 5141] <... close resumed>) = 0 [pid 5084] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5141] mkdir("./bus", 0777) = 0 [pid 5141] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5144] <... write resumed>) = 18 [pid 5084] newfstatat(AT_FDCWD, "./3/bus", [pid 5144] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... mount resumed>) = 0 [pid 5141] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5141] chdir("./bus" [pid 5138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5138] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5138] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5141] <... chdir resumed>) = 0 [pid 5138] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5141] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5138] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5141] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5145 attached [pid 5144] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5141] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5084] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5145] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5144] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5141] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5138] <... clone3 resumed> => {parent_tid=[5145]}, 88) = 5145 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5145] <... rseq resumed>) = 0 [pid 5144] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5141] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5145] set_robust_list(0x7f8282aa29a0, 24 [pid 5144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5141] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5139] <... futex resumed>) = 0 [pid 5138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5145] <... set_robust_list resumed>) = 0 [pid 5144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5141] unlink("./file1" [pid 5140] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] newfstatat(4, "", [pid 5145] rt_sigprocmask(SIG_SETMASK, [], [pid 5144] <... mmap resumed>) = 0x7f8282aa3000 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5144] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5084] getdents64(4, [pid 5144] <... mprotect resumed>) = 0 [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5144] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] getdents64(4, [pid 5144] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5144] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5084] close(4) = 0 [pid 5144] <... clone3 resumed> => {parent_tid=[5146]}, 88) = 5146 [pid 5084] rmdir("./3/bus" [pid 5144] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... rmdir resumed>) = 0 [pid 5144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5144] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5144] <... futex resumed>) = 0 [pid 5084] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5144] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5146 attached [pid 5145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5138] <... futex resumed>) = 0 [pid 5084] unlink("./3/binderfs" [pid 5146] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5145] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5138] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... unlink resumed>) = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [ 63.339151][ T5139] ERROR: (device loop0): remounting filesystem as read-only [ 63.346941][ T5139] ERROR: (device loop0): jfs_unlink: [ 63.346941][ T5139] [ 63.367825][ T5141] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 63.367825][ T5141] [ 63.380296][ T5141] ERROR: (device loop1): remounting filesystem as read-only [pid 5084] close(3) = 0 [pid 5146] <... rseq resumed>) = 0 [pid 5084] rmdir("./3") = 0 [pid 5146] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5084] mkdir("./4", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5145] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5146] rt_sigprocmask(SIG_SETMASK, [], [pid 5141] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5146] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5145] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] memfd_create("syzkaller", 0 [pid 5145] <... futex resumed>) = 1 [pid 5141] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 0 [pid 5140] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5140] <... futex resumed>) = 0 [pid 5139] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5146] <... memfd_create resumed>) = 3 [pid 5140] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5138] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5139] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5139] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5138] exit_group(0 [pid 5145] <... futex resumed>) = ? [pid 5138] <... exit_group resumed>) = ? [pid 5145] +++ exited with 0 +++ [pid 5139] +++ exited with 0 +++ [pid 5138] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5138, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5141] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5141] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5081] newfstatat(3, "", [pid 5141] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] <... futex resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5140] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5141] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = 1 [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5141] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5140] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5141] <... open resumed>) = -1 EFAULT (Bad address) [pid 5141] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 63.387931][ T5145] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 63.387931][ T5145] [ 63.398739][ T5141] ERROR: (device loop1): jfs_unlink: [ 63.398739][ T5141] [ 63.418579][ T5141] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 63.418579][ T5141] [pid 5141] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5140] exit_group(0) = ? [pid 5141] <... futex resumed>) = ? [pid 5081] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... umount2 resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5081] newfstatat(4, "", [pid 5141] +++ exited with 0 +++ [pid 5140] +++ exited with 0 +++ [pid 5083] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5083] newfstatat(AT_FDCWD, "./3/bus", [pid 5082] restart_syscall(<... resuming interrupted clone ...> [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... restart_syscall resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] umount2("./3/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] getdents64(4, [pid 5082] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... openat resumed>) = 4 [pid 5082] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] newfstatat(4, "", [pid 5082] newfstatat(3, "", [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, [pid 5082] getdents64(3, [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5081] getdents64(4, [pid 5082] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4 [pid 5081] close(4 [pid 5083] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./3/bus" [pid 5083] rmdir("./3/bus" [pid 5081] <... rmdir resumed>) = 0 [pid 5081] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./3/binderfs" [pid 5083] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] <... unlink resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5081] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./3") = 0 [pid 5081] mkdir("./4", 0777 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5083] unlink("./3/binderfs") = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./3") = 0 [pid 5083] mkdir("./4", 0777) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5082] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./4/bus") = 0 [pid 5082] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./4/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./4") = 0 [pid 5082] mkdir("./5", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5147 ./strace-static-x86_64: Process 5147 attached [pid 5147] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5147] chdir("./4") = 0 [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5147] setpgid(0, 0 [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5147] <... setpgid resumed>) = 0 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5147] write(3, "1000", 4) = 4 [pid 5147] close(3) = 0 [pid 5147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5147] write(1, "executing program\n", 18executing program ) = 18 [pid 5147] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5147] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5147] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5147] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5147] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5147] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5148 attached [pid 5148] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5147] <... clone3 resumed> => {parent_tid=[5148]}, 88) = 5148 [pid 5148] <... rseq resumed>) = 0 [pid 5148] set_robust_list(0x7f8282ac39a0, 24 [pid 5147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5148] <... set_robust_list resumed>) = 0 [pid 5147] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] rt_sigprocmask(SIG_SETMASK, [], [pid 5147] <... futex resumed>) = 0 [pid 5148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5147] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5148] memfd_create("syzkaller", 0) = 3 [pid 5148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5081] <... ioctl resumed>) = 0 [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5149 attached , child_tidptr=0x555571ec3690) = 5149 [pid 5149] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5149] chdir("./4") = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5149] write(3, "1000", 4executing program ) = 4 [pid 5149] close(3) = 0 [pid 5149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5149] write(1, "executing program\n", 18) = 18 [pid 5149] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5149] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5149] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5149] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5149] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] close(3 [pid 5149] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5083] <... close resumed>) = 0 [pid 5149] <... clone3 resumed> => {parent_tid=[5150]}, 88) = 5150 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5149] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5149] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5149] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5151 attached ./strace-static-x86_64: Process 5150 attached [pid 5151] set_robust_list(0x555571ec36a0, 24 [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5151 [pid 5150] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5151] <... set_robust_list resumed>) = 0 [pid 5151] chdir("./4" [pid 5150] <... rseq resumed>) = 0 [pid 5150] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5151] <... chdir resumed>) = 0 [pid 5150] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5150] memfd_create("syzkaller", 0 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5151] setpgid(0, 0) = 0 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5151] write(3, "1000", 4 [pid 5150] <... memfd_create resumed>) = 3 [pid 5082] <... ioctl resumed>) = 0 [pid 5151] <... write resumed>) = 4 [pid 5151] close(3 [pid 5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5151] <... close resumed>) = 0 [pid 5150] <... mmap resumed>) = 0x7f827a600000 [pid 5151] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5151] write(1, "executing program\n", 18) = 18 [pid 5151] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5151] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5151] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5151] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5152]}, 88) = 5152 ./strace-static-x86_64: Process 5152 attached [pid 5151] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5152] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5151] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] close(3 [pid 5152] set_robust_list(0x7f8282ac39a0, 24 [pid 5082] <... close resumed>) = 0 [pid 5152] <... set_robust_list resumed>) = 0 [pid 5152] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5152] memfd_create("syzkaller", 0) = 3 [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5153 attached [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5153 [pid 5153] set_robust_list(0x555571ec36a0, 24 [pid 5152] <... mmap resumed>) = 0x7f827a600000 [pid 5153] <... set_robust_list resumed>) = 0 [pid 5153] chdir("./5") = 0 [pid 5153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5153] setpgid(0, 0) = 0 [pid 5153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5153] write(3, "1000", 4) = 4 [pid 5153] close(3) = 0 [pid 5153] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5153] write(1, "executing program\n", 18) = 18 [pid 5153] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5153] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5153] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5153] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5153] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5153] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5154]}, 88) = 5154 [pid 5153] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5154 attached NULL, 8) = 0 [pid 5154] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5153] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... rseq resumed>) = 0 [pid 5153] <... futex resumed>) = 0 [pid 5154] set_robust_list(0x7f8282ac39a0, 24 [pid 5153] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5154] <... set_robust_list resumed>) = 0 [pid 5154] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5154] memfd_create("syzkaller", 0) = 3 [pid 5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5146] <... write resumed>) = 16777216 [pid 5146] munmap(0x7f827a600000, 138412032 [pid 5148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5146] <... munmap resumed>) = 0 [pid 5146] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5146] close(3) = 0 [pid 5146] close(4) = 0 [pid 5146] mkdir("./bus", 0777) = 0 [pid 5150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 64.149965][ T5146] loop4: detected capacity change from 0 to 32768 [pid 5146] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5146] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5146] chdir("./bus") = 0 [pid 5146] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5146] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5146] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5144] <... futex resumed>) = 0 [pid 5144] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5144] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] <... futex resumed>) = 0 [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5146] unlink("./file1" [pid 5144] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5144] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5144] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5144] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5144] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5155]}, 88) = 5155 [pid 5144] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5144] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5144] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5155 attached [pid 5155] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5155] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 64.270022][ T5146] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 64.270022][ T5146] [ 64.304766][ T5146] ERROR: (device loop4): remounting filesystem as read-only [pid 5155] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5146] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5146] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5155] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5146] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5144] <... futex resumed>) = 0 [pid 5144] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5146] <... futex resumed>) = 0 [pid 5144] <... futex resumed>) = 1 [pid 5146] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5144] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] <... open resumed>) = -1 EFAULT (Bad address) [pid 5146] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5144] <... futex resumed>) = 0 [pid 5144] exit_group(0) = ? [pid 5155] <... futex resumed>) = ? [pid 5155] +++ exited with 0 +++ [pid 5146] +++ exited with 0 +++ [pid 5144] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5144, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [ 64.329039][ T5146] ERROR: (device loop4): jfs_unlink: [ 64.329039][ T5146] [pid 5085] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5085] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [ 64.385151][ T5085] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 64.385151][ T5085] [ 64.410300][ T5085] ERROR: (device loop4): remounting filesystem as read-only [pid 5085] rmdir("./4/bus") = 0 [pid 5085] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./4/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./4") = 0 [pid 5085] mkdir("./5", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5148] <... write resumed>) = 16777216 [pid 5148] munmap(0x7f827a600000, 138412032) = 0 [pid 5152] <... write resumed>) = 16777216 [pid 5150] <... write resumed>) = 16777216 [pid 5152] munmap(0x7f827a600000, 138412032 [pid 5148] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5150] munmap(0x7f827a600000, 138412032 [pid 5148] <... openat resumed>) = 4 [pid 5148] ioctl(4, LOOP_SET_FD, 3 [pid 5152] <... munmap resumed>) = 0 [pid 5152] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5152] ioctl(4, LOOP_SET_FD, 3 [pid 5150] <... munmap resumed>) = 0 [pid 5148] <... ioctl resumed>) = 0 [pid 5148] close(3) = 0 [pid 5154] <... write resumed>) = 16777216 [pid 5152] <... ioctl resumed>) = 0 [pid 5150] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5148] close(4 [pid 5154] munmap(0x7f827a600000, 138412032 [pid 5152] close(3 [pid 5150] <... openat resumed>) = 4 [pid 5148] <... close resumed>) = 0 [pid 5148] mkdir("./bus", 0777) = 0 [pid 5148] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5152] <... close resumed>) = 0 [pid 5150] ioctl(4, LOOP_SET_FD, 3 [pid 5148] <... mount resumed>) = 0 [ 64.680656][ T5148] loop3: detected capacity change from 0 to 32768 [ 64.699361][ T5152] loop2: detected capacity change from 0 to 32768 [pid 5148] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5152] close(4 [pid 5148] <... openat resumed>) = 3 [pid 5152] <... close resumed>) = 0 [pid 5148] chdir("./bus" [pid 5152] mkdir("./bus", 0777 [pid 5148] <... chdir resumed>) = 0 [pid 5152] <... mkdir resumed>) = 0 [pid 5148] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5148] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5147] <... futex resumed>) = 0 [pid 5148] unlink("./file1" [pid 5147] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5147] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] <... munmap resumed>) = 0 [pid 5152] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5150] <... ioctl resumed>) = 0 [pid 5150] close(3) = 0 [pid 5150] close(4) = 0 [pid 5150] mkdir("./bus", 0777) = 0 [ 64.728595][ T5150] loop0: detected capacity change from 0 to 32768 [ 64.739605][ T5148] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 64.739605][ T5148] [pid 5150] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5150] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5150] chdir("./bus") = 0 [pid 5150] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5150] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5150] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] <... futex resumed>) = 0 [pid 5152] <... mount resumed>) = 0 [pid 5152] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5152] chdir("./bus") = 0 [pid 5152] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5152] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5151] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] unlink("./file1" [pid 5151] <... futex resumed>) = 0 [pid 5151] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5154] ioctl(4, LOOP_SET_FD, 3 [pid 5149] <... futex resumed>) = 1 [pid 5147] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5149] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5147] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 0 [pid 5147] <... futex resumed>) = 0 [pid 5150] unlink("./file1" [pid 5147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5147] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5147] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5147] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5156]}, 88) = 5156 [pid 5147] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 64.778058][ T5152] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 64.778058][ T5152] [ 64.789417][ T5148] ERROR: (device loop3): remounting filesystem as read-only [ 64.794335][ T5154] loop1: detected capacity change from 0 to 32768 [ 64.804417][ T5148] ERROR: (device loop3): jfs_unlink: [ 64.804417][ T5148] [ 64.807261][ T5150] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 64.807261][ T5150] [pid 5147] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5156 attached ) = 0 [pid 5156] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5156] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5148] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5147] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5156] rt_sigprocmask(SIG_SETMASK, [], [pid 5148] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5148] <... futex resumed>) = 0 [pid 5156] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5148] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] <... ioctl resumed>) = 0 [pid 5151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5154] close(3 [pid 5151] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... close resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5154] close(4 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5154] <... close resumed>) = 0 [pid 5151] <... mmap resumed>) = 0x7f8282a82000 [pid 5154] mkdir("./bus", 0777 [pid 5151] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5154] <... mkdir resumed>) = 0 [pid 5151] <... mprotect resumed>) = 0 [pid 5154] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5151] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5149] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5149] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... clone3 resumed> => {parent_tid=[5157]}, 88) = 5157 [pid 5151] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5149] <... futex resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5151] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5151] <... futex resumed>) = 0 [pid 5085] close(3 [pid 5151] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] <... mmap resumed>) = 0x7f8282a82000 [pid 5085] <... close resumed>) = 0 ./strace-static-x86_64: Process 5157 attached [pid 5149] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5157] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5157] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5157] rt_sigprocmask(SIG_SETMASK, [], [pid 5154] <... mount resumed>) = 0 [pid 5149] <... mprotect resumed>) = 0 [pid 5157] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5154] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5157] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5154] <... openat resumed>) = 3 [pid 5154] chdir("./bus") = 0 [pid 5154] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 64.834860][ T5152] ERROR: (device loop2): remounting filesystem as read-only [ 64.844184][ T5156] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 64.844184][ T5156] ./strace-static-x86_64: Process 5158 attached [pid 5156] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5154] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5158 [pid 5158] set_robust_list(0x555571ec36a0, 24 [pid 5156] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... set_robust_list resumed>) = 0 [pid 5156] <... futex resumed>) = 1 [pid 5149] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5158] chdir("./5" [pid 5156] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5147] <... futex resumed>) = 0 [pid 5147] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 1 [pid 5147] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5153] <... futex resumed>) = 0 [pid 5153] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5153] <... futex resumed>) = 1 [pid 5154] unlink("./file1" [pid 5153] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... chdir resumed>) = 0 [pid 5148] <... futex resumed>) = 0 [pid 5148] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5149] <... clone3 resumed> => {parent_tid=[5159]}, 88) = 5159 [pid 5158] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5149] rt_sigprocmask(SIG_SETMASK, [], [pid 5158] <... prctl resumed>) = 0 [pid 5149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5149] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... open resumed>) = -1 EFAULT (Bad address) [pid 5158] setpgid(0, 0 [pid 5148] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... futex resumed>) = 0 [pid 5158] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5159 attached [pid 5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5149] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5148] <... futex resumed>) = 1 [pid 5147] <... futex resumed>) = 0 [pid 5159] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5147] exit_group(0 [pid 5159] <... rseq resumed>) = 0 [pid 5147] <... exit_group resumed>) = ? [pid 5159] set_robust_list(0x7f8282aa29a0, 24 [pid 5158] <... openat resumed>) = 3 [pid 5156] <... futex resumed>) = ? [pid 5156] +++ exited with 0 +++ [pid 5159] <... set_robust_list resumed>) = 0 [pid 5152] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5159] rt_sigprocmask(SIG_SETMASK, [], [pid 5152] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5148] +++ exited with 0 +++ [pid 5147] +++ exited with 0 +++ [pid 5158] write(3, "1000", 4 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=21 /* 0.21 s */} --- [pid 5158] <... write resumed>) = 4 [pid 5159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5158] close(3 [pid 5152] <... futex resumed>) = 0 [pid 5151] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... close resumed>) = 0 [pid 5159] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5157] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5152] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5151] <... futex resumed>) = 0 [pid 5159] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5158] symlink("/dev/binderfs", "./binderfs" [pid 5157] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... open resumed>) = -1 EFAULT (Bad address) [pid 5151] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... symlink resumed>) = 0 [pid 5157] <... futex resumed>) = 0 [pid 5152] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 5159] <... futex resumed>) = 1 [pid 5158] write(1, "executing program\n", 18 [pid 5157] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5149] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5159] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5158] <... write resumed>) = 18 [pid 5152] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] exit_group(0 [pid 5149] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5158] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5158] <... futex resumed>) = 0 [pid 5149] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5084] newfstatat(3, "", [pid 5158] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5158] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5157] <... futex resumed>) = ? [pid 5152] <... futex resumed>) = ? [pid 5151] <... exit_group resumed>) = ? [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5159] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5157] +++ exited with 0 +++ [pid 5152] +++ exited with 0 +++ [pid 5151] +++ exited with 0 +++ [pid 5084] getdents64(3, [pid 5159] <... open resumed>) = -1 EFAULT (Bad address) [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 64.884439][ T5152] ERROR: (device loop2): jfs_unlink: [ 64.884439][ T5152] [ 64.893904][ T5150] ERROR: (device loop0): remounting filesystem as read-only [ 64.905752][ T5154] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 64.905752][ T5154] [ 64.922032][ T5150] ERROR: (device loop0): jfs_unlink: [ 64.922032][ T5150] [pid 5159] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... mmap resumed>) = 0x7f8282aa3000 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=33 /* 0.33 s */} --- [pid 5159] <... futex resumed>) = 1 [pid 5149] <... futex resumed>) = 0 [pid 5159] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5158] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5154] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5153] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5150] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5084] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5158] <... mprotect resumed>) = 0 [pid 5154] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5154] <... futex resumed>) = 0 [pid 5153] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] <... futex resumed>) = 0 [pid 5158] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5154] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5150] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5149] exit_group(0 [pid 5158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5153] <... futex resumed>) = 0 [pid 5153] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... futex resumed>) = ? [pid 5159] +++ exited with 0 +++ [pid 5150] <... futex resumed>) = ? [ 64.945770][ T5154] ERROR: (device loop1): remounting filesystem as read-only [ 64.949032][ T5150] ERROR: (device loop0): remounting filesystem as read-only [ 64.956962][ T5154] ERROR: (device loop1): jfs_unlink: [ 64.956962][ T5154] [ 64.968232][ T5083] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 64.968232][ T5083] [ 64.979686][ T5083] ERROR: (device loop2): remounting filesystem as read-only [ 64.988177][ T5154] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt ./strace-static-x86_64: Process 5160 attached [pid 5154] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5150] +++ exited with 0 +++ [pid 5149] <... exit_group resumed>) = ? [pid 5083] <... umount2 resumed>) = 0 [pid 5160] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5158] <... clone3 resumed> => {parent_tid=[5160]}, 88) = 5160 [pid 5154] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5160] <... rseq resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] set_robust_list(0x7f8282ac39a0, 24 [pid 5158] rt_sigprocmask(SIG_SETMASK, [], [pid 5154] <... futex resumed>) = 1 [pid 5153] <... futex resumed>) = 0 [pid 5149] +++ exited with 0 +++ [pid 5083] newfstatat(AT_FDCWD, "./4/bus", [pid 5160] <... set_robust_list resumed>) = 0 [pid 5158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5154] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5153] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5160] rt_sigprocmask(SIG_SETMASK, [], [pid 5158] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5153] <... futex resumed>) = 0 [pid 5083] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5160] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5158] <... futex resumed>) = 0 [pid 5154] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5153] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] memfd_create("syzkaller", 0 [pid 5158] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5154] <... open resumed>) = -1 EFAULT (Bad address) [pid 5083] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5160] <... memfd_create resumed>) = 3 [pid 5154] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5154] <... futex resumed>) = 1 [pid 5153] <... futex resumed>) = 0 [pid 5083] newfstatat(4, "", [pid 5081] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5160] <... mmap resumed>) = 0x7f827a600000 [pid 5154] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5153] exit_group(0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5154] <... futex resumed>) = ? [pid 5153] <... exit_group resumed>) = ? [pid 5083] getdents64(4, [pid 5154] +++ exited with 0 +++ [pid 5153] +++ exited with 0 +++ [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] newfstatat(3, "", [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5153, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [ 64.988177][ T5154] [pid 5083] getdents64(4, [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] getdents64(3, [pid 5083] close(4 [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] <... close resumed>) = 0 [pid 5081] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] rmdir("./4/bus") = 0 [pid 5083] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5082] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5083] unlink("./4/binderfs" [pid 5082] newfstatat(3, "", [pid 5083] <... unlink resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, [pid 5082] getdents64(3, [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] close(3 [pid 5082] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./4") = 0 [pid 5083] mkdir("./5", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] <... umount2 resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./5/bus", [pid 5081] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] newfstatat(AT_FDCWD, "./4/bus", [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(4, "", [pid 5081] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5082] getdents64(4, [pid 5081] newfstatat(4, "", [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, [pid 5081] getdents64(4, [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] close(4 [pid 5081] getdents64(4, [pid 5082] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] rmdir("./5/bus" [pid 5081] close(4 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./4/bus") = 0 [pid 5082] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5081] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5082] unlink("./5/binderfs" [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5081] unlink("./4/binderfs" [pid 5082] getdents64(3, [pid 5081] <... unlink resumed>) = 0 [ 65.044108][ T5081] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 65.044108][ T5081] [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5081] getdents64(3, [pid 5082] close(3 [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./4") = 0 [pid 5081] mkdir("./5", 0777 [pid 5082] rmdir("./5" [pid 5081] <... mkdir resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5082] mkdir("./6", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./4/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./4/bus") = 0 [pid 5084] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./4/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./4") = 0 [pid 5084] mkdir("./5", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... ioctl resumed>) = 0 [pid 5081] <... ioctl resumed>) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5161 ./strace-static-x86_64: Process 5161 attached [pid 5161] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5161] chdir("./5") = 0 [pid 5161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5161] setpgid(0, 0) = 0 [pid 5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5161] write(3, "1000", 4) = 4 [pid 5161] close(3) = 0 [pid 5161] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5161] write(1, "executing program\n", 18 [pid 5081] close(3 [pid 5161] <... write resumed>) = 18 [pid 5081] <... close resumed>) = 0 [pid 5161] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5161] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5162 attached [pid 5161] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5161] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5161] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5162] set_robust_list(0x555571ec36a0, 24 [pid 5161] <... mprotect resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x555571ec3690) = 5162 [pid 5161] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5161] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5163]}, 88) = 5163 ./strace-static-x86_64: Process 5163 attached [pid 5161] rt_sigprocmask(SIG_SETMASK, [], [pid 5163] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5163] <... rseq resumed>) = 0 [pid 5161] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] set_robust_list(0x7f8282ac39a0, 24 [pid 5161] <... futex resumed>) = 0 [pid 5163] <... set_robust_list resumed>) = 0 [pid 5162] <... set_robust_list resumed>) = 0 [pid 5161] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5163] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5162] chdir("./5" [pid 5163] memfd_create("syzkaller", 0 [pid 5162] <... chdir resumed>) = 0 [pid 5162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5162] setpgid(0, 0 [pid 5163] <... memfd_create resumed>) = 3 [pid 5162] <... setpgid resumed>) = 0 [pid 5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5163] <... mmap resumed>) = 0x7f827a600000 [pid 5162] <... openat resumed>) = 3 [pid 5162] write(3, "1000", 4) = 4 [pid 5162] close(3 [pid 5082] <... ioctl resumed>) = 0 [pid 5162] <... close resumed>) = 0 [pid 5162] symlink("/dev/binderfs", "./binderfs" [pid 5082] close(3) = 0 executing program [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5162] <... symlink resumed>) = 0 [pid 5162] write(1, "executing program\n", 18./strace-static-x86_64: Process 5164 attached ) = 18 [pid 5164] set_robust_list(0x555571ec36a0, 24 [pid 5162] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5164 [pid 5164] <... set_robust_list resumed>) = 0 [pid 5162] <... futex resumed>) = 0 [pid 5164] chdir("./6" [pid 5162] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5164] <... chdir resumed>) = 0 [pid 5162] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5162] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5164] setpgid(0, 0 [pid 5162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5164] <... setpgid resumed>) = 0 [pid 5162] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5162] <... mmap resumed>) = 0x7f8282aa3000 [pid 5164] <... openat resumed>) = 3 [pid 5162] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5164] write(3, "1000", 4 [pid 5162] <... mprotect resumed>) = 0 [pid 5164] <... write resumed>) = 4 [pid 5162] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5164] close(3 [pid 5162] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5164] <... close resumed>) = 0 [pid 5162] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5162] <... clone3 resumed> => {parent_tid=[5165]}, 88) = 5165 [pid 5164] write(1, "executing program\n", 18executing program [pid 5162] rt_sigprocmask(SIG_SETMASK, [], [pid 5164] <... write resumed>) = 18 [pid 5162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5164] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = 0 [pid 5162] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5165 attached [pid 5164] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5162] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5165] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5164] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5165] <... rseq resumed>) = 0 [pid 5164] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5165] set_robust_list(0x7f8282ac39a0, 24 [pid 5164] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5165] <... set_robust_list resumed>) = 0 [pid 5164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5165] rt_sigprocmask(SIG_SETMASK, [], [pid 5164] <... mmap resumed>) = 0x7f8282aa3000 [pid 5165] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5164] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5165] memfd_create("syzkaller", 0 [pid 5164] <... mprotect resumed>) = 0 [pid 5165] <... memfd_create resumed>) = 3 [pid 5164] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5164] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5165] <... mmap resumed>) = 0x7f827a600000 ./strace-static-x86_64: Process 5166 attached [pid 5164] <... clone3 resumed> => {parent_tid=[5166]}, 88) = 5166 [pid 5164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5164] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5166] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5166] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5166] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5166] memfd_create("syzkaller", 0) = 3 [pid 5166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5160] <... write resumed>) = 16777216 [pid 5160] munmap(0x7f827a600000, 138412032) = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] <... ioctl resumed>) = 0 [pid 5160] <... openat resumed>) = 4 [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5084] close(3 [pid 5160] <... ioctl resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5167 attached [pid 5167] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5167 [pid 5160] close(3) = 0 [pid 5160] close(4) = 0 [pid 5167] chdir("./5" [pid 5160] mkdir("./bus", 0777) = 0 [pid 5160] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5167] <... chdir resumed>) = 0 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5167] setpgid(0, 0) = 0 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5167] write(3, "1000", 4) = 4 [pid 5167] close(3) = 0 [pid 5167] symlink("/dev/binderfs", "./binderfs") = 0 [ 65.661424][ T5160] loop4: detected capacity change from 0 to 32768 executing program [pid 5167] write(1, "executing program\n", 18) = 18 [pid 5167] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5167] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5167] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5167] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5160] <... mount resumed>) = 0 [pid 5160] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5160] chdir("./bus") = 0 [pid 5160] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5167] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5160] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... clone3 resumed> => {parent_tid=[5168]}, 88) = 5168 [pid 5160] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5168 attached NULL, 8) = 0 [pid 5158] <... futex resumed>) = 0 [pid 5168] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5167] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = 0 [pid 5168] <... rseq resumed>) = 0 [pid 5167] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5160] <... futex resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5168] set_robust_list(0x7f8282ac39a0, 24 [pid 5160] unlink("./file1" [pid 5158] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5168] <... set_robust_list resumed>) = 0 [pid 5168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5168] memfd_create("syzkaller", 0 [pid 5158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5168] <... memfd_create resumed>) = 3 [pid 5158] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5158] <... futex resumed>) = 0 [pid 5168] <... mmap resumed>) = 0x7f827a600000 [pid 5158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5158] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [ 65.775886][ T5160] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 65.775886][ T5160] [ 65.809621][ T5160] ERROR: (device loop4): remounting filesystem as read-only [ 65.817163][ T5160] ERROR: (device loop4): jfs_unlink: [ 65.817163][ T5160] [pid 5158] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5169]}, 88) = 5169 [pid 5158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5169 attached [pid 5158] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5158] <... futex resumed>) = 0 [pid 5158] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... rseq resumed>) = 0 [pid 5169] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5169] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5169] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5169] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5158] <... futex resumed>) = 0 [pid 5169] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5158] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... open resumed>) = -1 EFAULT (Bad address) [pid 5158] <... futex resumed>) = 0 [pid 5169] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... futex resumed>) = 0 [pid 5158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5160] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5160] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] exit_group(0) = ? [pid 5169] <... futex resumed>) = ? [pid 5160] <... futex resumed>) = ? [pid 5169] +++ exited with 0 +++ [pid 5160] +++ exited with 0 +++ [pid 5158] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5158, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=23 /* 0.23 s */} --- [pid 5085] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 65.879366][ T5160] ERROR: (device loop4): remounting filesystem as read-only [ 65.918137][ T5085] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 65.918137][ T5085] [pid 5085] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5085] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./5/bus") = 0 [pid 5085] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./5/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./5") = 0 [pid 5085] mkdir("./6", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5163] <... write resumed>) = 16777216 [pid 5163] munmap(0x7f827a600000, 138412032 [pid 5166] <... write resumed>) = 16777216 [pid 5166] munmap(0x7f827a600000, 138412032 [pid 5163] <... munmap resumed>) = 0 [pid 5163] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5163] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5163] close(3) = 0 [pid 5163] close(4 [pid 5166] <... munmap resumed>) = 0 [pid 5163] <... close resumed>) = 0 [pid 5166] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5165] <... write resumed>) = 16777216 [pid 5163] mkdir("./bus", 0777 [pid 5085] <... ioctl resumed>) = 0 [pid 5163] <... mkdir resumed>) = 0 [pid 5166] <... openat resumed>) = 4 [pid 5166] ioctl(4, LOOP_SET_FD, 3 [ 66.281497][ T5163] loop2: detected capacity change from 0 to 32768 [pid 5165] munmap(0x7f827a600000, 138412032 [pid 5085] close(3 [pid 5166] <... ioctl resumed>) = 0 [pid 5163] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5085] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5163] <... mount resumed>) = 0 [pid 5163] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5170 ./strace-static-x86_64: Process 5170 attached [pid 5163] <... openat resumed>) = 3 [pid 5166] close(3 [pid 5170] set_robust_list(0x555571ec36a0, 24 [pid 5166] <... close resumed>) = 0 [pid 5163] chdir("./bus") = 0 [pid 5166] close(4 [pid 5163] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5170] <... set_robust_list resumed>) = 0 [pid 5170] chdir("./6" [pid 5166] <... close resumed>) = 0 [pid 5163] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5166] mkdir("./bus", 0777 [pid 5163] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... chdir resumed>) = 0 [pid 5166] <... mkdir resumed>) = 0 [pid 5163] <... futex resumed>) = 1 [pid 5161] <... futex resumed>) = 0 [pid 5170] prctl(PR_SET_PDEATHSIG, SIGKILL [ 66.332140][ T5166] loop1: detected capacity change from 0 to 32768 [pid 5166] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5165] <... munmap resumed>) = 0 [pid 5163] unlink("./file1" executing program [pid 5161] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] <... prctl resumed>) = 0 [pid 5161] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] setpgid(0, 0) = 0 [pid 5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5170] write(3, "1000", 4) = 4 [pid 5170] close(3) = 0 [pid 5170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5170] write(1, "executing program\n", 18) = 18 [pid 5170] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5170] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5170] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5170] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5165] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5170] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5165] <... openat resumed>) = 4 [pid 5170] <... clone3 resumed> => {parent_tid=[5171]}, 88) = 5171 [pid 5170] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5170] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5165] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5171 attached [pid 5171] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5171] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5171] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5171] memfd_create("syzkaller", 0) = 3 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5165] <... ioctl resumed>) = 0 [pid 5165] close(3) = 0 [pid 5165] close(4) = 0 [pid 5161] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5165] mkdir("./bus", 0777 [pid 5161] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 66.376283][ T5163] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 66.376283][ T5163] [ 66.395495][ T5165] loop0: detected capacity change from 0 to 32768 [pid 5165] <... mkdir resumed>) = 0 [pid 5161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5165] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5161] <... mmap resumed>) = 0x7f8282a82000 [pid 5161] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5161] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5161] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5163] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5161] <... clone3 resumed> => {parent_tid=[5172]}, 88) = 5172 ./strace-static-x86_64: Process 5172 attached [pid 5161] rt_sigprocmask(SIG_SETMASK, [], [pid 5172] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5172] <... rseq resumed>) = 0 [pid 5161] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] set_robust_list(0x7f8282aa29a0, 24 [pid 5166] <... mount resumed>) = 0 [pid 5161] <... futex resumed>) = 0 [pid 5172] <... set_robust_list resumed>) = 0 [pid 5161] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5166] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5172] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5166] <... openat resumed>) = 3 [pid 5166] chdir("./bus" [pid 5165] <... mount resumed>) = 0 [pid 5163] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... chdir resumed>) = 0 [pid 5165] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5163] <... futex resumed>) = 0 [pid 5165] <... openat resumed>) = 3 [pid 5163] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5165] chdir("./bus") = 0 [pid 5166] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5165] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5166] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5166] <... futex resumed>) = 1 [pid 5165] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5165] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5162] <... futex resumed>) = 0 [pid 5172] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [ 66.429104][ T5163] ERROR: (device loop2): remounting filesystem as read-only [ 66.436452][ T5163] ERROR: (device loop2): jfs_unlink: [ 66.436452][ T5163] [ 66.464273][ T5172] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 66.464273][ T5172] [pid 5162] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = 1 [pid 5165] unlink("./file1" [pid 5164] <... futex resumed>) = 0 [pid 5162] <... futex resumed>) = 0 [pid 5161] <... futex resumed>) = 0 [pid 5172] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5162] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5161] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5163] <... futex resumed>) = 0 [pid 5163] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5166] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5166] unlink("./file1" [pid 5163] <... open resumed>) = -1 EFAULT (Bad address) [pid 5163] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5161] <... futex resumed>) = 0 [pid 5161] exit_group(0 [pid 5172] <... futex resumed>) = ? [pid 5172] +++ exited with 0 +++ [pid 5161] <... exit_group resumed>) = ? [pid 5163] +++ exited with 0 +++ [pid 5161] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5161, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5083] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5164] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5162] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 66.490876][ T5165] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 66.490876][ T5165] [ 66.504290][ T5166] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 66.504290][ T5166] [ 66.528483][ T5165] ERROR: (device loop0): remounting filesystem as read-only [pid 5164] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = 0 [pid 5162] <... futex resumed>) = 0 [pid 5164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5162] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5164] <... mmap resumed>) = 0x7f8282a82000 [pid 5162] <... mmap resumed>) = 0x7f8282a82000 [pid 5164] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5162] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5164] <... mprotect resumed>) = 0 [pid 5164] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5162] <... mprotect resumed>) = 0 [pid 5164] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5162] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5164] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5162] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5173 attached [pid 5162] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5083] <... openat resumed>) = 3 [pid 5173] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5164] <... clone3 resumed> => {parent_tid=[5173]}, 88) = 5173 [pid 5083] newfstatat(3, "", [pid 5173] <... rseq resumed>) = 0 [pid 5164] rt_sigprocmask(SIG_SETMASK, [], [pid 5162] <... clone3 resumed> => {parent_tid=[5174]}, 88) = 5174 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5174 attached [pid 5173] set_robust_list(0x7f8282aa29a0, 24 [pid 5164] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5162] rt_sigprocmask(SIG_SETMASK, [], [pid 5164] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5173] <... set_robust_list resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5162] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] rt_sigprocmask(SIG_SETMASK, [], [pid 5164] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5162] <... futex resumed>) = 0 [pid 5173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5162] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5173] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 5173] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5174] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5164] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5173] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5173] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5174] <... rseq resumed>) = 0 [pid 5174] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5174] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5174] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5174] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5162] <... futex resumed>) = 0 [pid 5174] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 66.536676][ T5166] ERROR: (device loop1): remounting filesystem as read-only [ 66.555670][ T5166] ERROR: (device loop1): jfs_unlink: [ 66.555670][ T5166] [ 66.564785][ T5165] ERROR: (device loop0): jfs_unlink: [ 66.564785][ T5165] [ 66.583148][ T5166] ERROR: (device loop1): remounting filesystem as read-only [pid 5162] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5162] <... futex resumed>) = 0 [pid 5162] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5174] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5174] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5162] <... futex resumed>) = 0 [pid 5165] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5166] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5165] <... futex resumed>) = 0 [pid 5166] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5165] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5164] exit_group(0 [pid 5162] exit_group(0 [pid 5174] <... futex resumed>) = ? [pid 5173] <... futex resumed>) = ? [pid 5166] <... futex resumed>) = ? [pid 5165] <... futex resumed>) = ? [pid 5164] <... exit_group resumed>) = ? [pid 5162] <... exit_group resumed>) = ? [pid 5174] +++ exited with 0 +++ [pid 5173] +++ exited with 0 +++ [pid 5166] +++ exited with 0 +++ [pid 5165] +++ exited with 0 +++ [pid 5164] +++ exited with 0 +++ [pid 5162] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5162, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5082] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(3, "", [pid 5081] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... umount2 resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5083] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] newfstatat(3, "", [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] getdents64(3, [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] newfstatat(AT_FDCWD, "./5/bus", [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5081] getdents64(3, [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5168] <... write resumed>) = 16777216 [pid 5083] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... umount2 resumed>) = 0 [pid 5081] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5168] munmap(0x7f827a600000, 138412032 [pid 5083] <... openat resumed>) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [ 66.594024][ T5165] ERROR: (device loop0): remounting filesystem as read-only [ 66.626392][ T5082] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 66.626392][ T5082] [pid 5083] getdents64(4, [pid 5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] close(4) = 0 [pid 5083] rmdir("./5/bus") = 0 [pid 5083] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./5/binderfs") = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./5") = 0 [pid 5083] mkdir("./6", 0777 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... mkdir resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./6/bus", [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5082] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./6/bus") = 0 [pid 5082] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = 0 [pid 5168] <... munmap resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5081] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5168] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5168] <... openat resumed>) = 4 [pid 5082] unlink("./6/binderfs" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... unlink resumed>) = 0 [ 66.661659][ T5081] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 66.661659][ T5081] [pid 5081] newfstatat(AT_FDCWD, "./5/bus", [pid 5168] ioctl(4, LOOP_SET_FD, 3 [pid 5082] getdents64(3, [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./5/bus") = 0 [pid 5081] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./5/binderfs") = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./5") = 0 [pid 5081] mkdir("./6", 0777 [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5082] close(3 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5082] <... close resumed>) = 0 [pid 5082] rmdir("./6") = 0 [pid 5082] mkdir("./7", 0777) = 0 [pid 5168] <... ioctl resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5168] close(3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5168] <... close resumed>) = 0 [pid 5168] close(4) = 0 [pid 5168] mkdir("./bus", 0777) = 0 [ 66.705886][ T5168] loop3: detected capacity change from 0 to 32768 [pid 5168] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5168] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5168] chdir("./bus") = 0 [pid 5168] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5168] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5167] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] unlink("./file1" [pid 5167] <... futex resumed>) = 0 [ 66.838398][ T5168] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 66.838398][ T5168] [pid 5167] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5167] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5167] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5167] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5175]}, 88) = 5175 [pid 5167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5175 attached [pid 5175] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5167] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... rseq resumed>) = 0 [pid 5168] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5167] <... futex resumed>) = 0 [pid 5167] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5175] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5175] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [ 66.879410][ T5168] ERROR: (device loop3): remounting filesystem as read-only [ 66.886750][ T5168] ERROR: (device loop3): jfs_unlink: [ 66.886750][ T5168] [pid 5168] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5175] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5168] <... futex resumed>) = 0 [pid 5168] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5168] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 66.931016][ T5175] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 66.931016][ T5175] [pid 5168] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] exit_group(0) = ? [pid 5168] <... futex resumed>) = ? [pid 5168] +++ exited with 0 +++ [pid 5175] <... futex resumed>) = ? [pid 5175] +++ exited with 0 +++ [pid 5167] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5176 attached , child_tidptr=0x555571ec3690) = 5176 [pid 5176] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5176] chdir("./6") = 0 [pid 5082] close(3 [pid 5176] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5171] <... write resumed>) = 16777216 [pid 5176] <... prctl resumed>) = 0 [pid 5176] setpgid(0, 0) = 0 [pid 5176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5171] munmap(0x7f827a600000, 138412032 [pid 5082] <... close resumed>) = 0 [pid 5176] <... openat resumed>) = 3 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... ioctl resumed>) = 0 [pid 5176] write(3, "1000", 4 [pid 5081] close(3 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5177 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5178 attached ./strace-static-x86_64: Process 5177 attached [pid 5176] <... write resumed>) = 4 [pid 5081] <... clone resumed>, child_tidptr=0x555571ec3690) = 5178 [pid 5178] set_robust_list(0x555571ec36a0, 24 [pid 5177] set_robust_list(0x555571ec36a0, 24 [pid 5176] close(3) = 0 [pid 5177] <... set_robust_list resumed>) = 0 [pid 5176] symlink("/dev/binderfs", "./binderfs" [pid 5178] <... set_robust_list resumed>) = 0 [pid 5177] chdir("./7" [pid 5176] <... symlink resumed>) = 0 [pid 5171] <... munmap resumed>) = 0 executing program [pid 5178] chdir("./6" [pid 5177] <... chdir resumed>) = 0 [pid 5176] write(1, "executing program\n", 18 [pid 5171] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5178] <... chdir resumed>) = 0 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5176] <... write resumed>) = 18 [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5177] <... prctl resumed>) = 0 [pid 5176] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... openat resumed>) = 4 [pid 5178] <... prctl resumed>) = 0 [pid 5177] setpgid(0, 0 [pid 5176] <... futex resumed>) = 0 [pid 5177] <... setpgid resumed>) = 0 [pid 5176] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5178] setpgid(0, 0 [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5176] <... rt_sigaction resumed>NULL, 8) = 0 executing program [pid 5178] <... setpgid resumed>) = 0 [pid 5177] <... openat resumed>) = 3 [pid 5176] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5171] ioctl(4, LOOP_SET_FD, 3 [pid 5177] write(3, "1000", 4 [pid 5176] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5177] <... write resumed>) = 4 [pid 5176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5177] close(3 [pid 5176] <... mmap resumed>) = 0x7f8282aa3000 [pid 5177] <... close resumed>) = 0 [pid 5176] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5177] symlink("/dev/binderfs", "./binderfs" [pid 5176] <... mprotect resumed>) = 0 [pid 5177] <... symlink resumed>) = 0 [pid 5176] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5179 attached [pid 5179] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5176] <... clone3 resumed> => {parent_tid=[5179]}, 88) = 5179 [pid 5179] <... rseq resumed>) = 0 [pid 5177] write(1, "executing program\n", 18 [pid 5176] rt_sigprocmask(SIG_SETMASK, [], [pid 5179] set_robust_list(0x7f8282ac39a0, 24 [pid 5177] <... write resumed>) = 18 [pid 5176] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5179] <... set_robust_list resumed>) = 0 [pid 5177] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] rt_sigprocmask(SIG_SETMASK, [], [pid 5177] <... futex resumed>) = 0 [pid 5176] <... futex resumed>) = 0 [pid 5179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5177] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5176] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5179] memfd_create("syzkaller", 0 [pid 5177] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5177] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5179] <... memfd_create resumed>) = 3 [pid 5177] <... mmap resumed>) = 0x7f8282aa3000 [pid 5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5177] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5178] <... openat resumed>) = 3 [pid 5177] <... mprotect resumed>) = 0 [pid 5171] <... ioctl resumed>) = 0 [pid 5178] write(3, "1000", 4 [pid 5171] close(3 [pid 5178] <... write resumed>) = 4 [pid 5171] <... close resumed>) = 0 [pid 5178] close(3 [pid 5171] close(4 [pid 5178] <... close resumed>) = 0 [pid 5178] symlink("/dev/binderfs", "./binderfs" [pid 5177] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5171] <... close resumed>) = 0 [pid 5178] <... symlink resumed>) = 0 [pid 5177] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5171] mkdir("./bus", 0777executing program [pid 5178] write(1, "executing program\n", 18 [pid 5177] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5171] <... mkdir resumed>) = 0 [pid 5178] <... write resumed>) = 18 ./strace-static-x86_64: Process 5180 attached [pid 5180] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5178] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... clone3 resumed> => {parent_tid=[5180]}, 88) = 5180 [pid 5180] <... rseq resumed>) = 0 [pid 5178] <... futex resumed>) = 0 [pid 5177] rt_sigprocmask(SIG_SETMASK, [], [pid 5171] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5180] set_robust_list(0x7f8282ac39a0, 24 [pid 5178] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5178] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5178] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5178] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5180] <... set_robust_list resumed>) = 0 [pid 5178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5177] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5181 attached [pid 5180] rt_sigprocmask(SIG_SETMASK, [], [pid 5177] <... futex resumed>) = 0 [pid 5181] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5177] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5181] <... rseq resumed>) = 0 [pid 5180] memfd_create("syzkaller", 0 [pid 5178] <... clone3 resumed> => {parent_tid=[5181]}, 88) = 5181 [pid 5181] set_robust_list(0x7f8282ac39a0, 24 [pid 5178] rt_sigprocmask(SIG_SETMASK, [], [pid 5181] <... set_robust_list resumed>) = 0 [pid 5180] <... memfd_create resumed>) = 3 [pid 5178] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5181] rt_sigprocmask(SIG_SETMASK, [], [pid 5180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5180] <... mmap resumed>) = 0x7f827a600000 [pid 5178] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] memfd_create("syzkaller", 0 [pid 5178] <... futex resumed>) = 0 [pid 5178] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5181] <... memfd_create resumed>) = 3 [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [ 67.085165][ T5171] loop4: detected capacity change from 0 to 32768 [pid 5171] <... mount resumed>) = 0 [pid 5171] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5171] chdir("./bus") = 0 [pid 5171] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5171] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5170] <... futex resumed>) = 0 [pid 5171] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5170] <... futex resumed>) = 0 [pid 5171] unlink("./file1" [ 67.148842][ T5171] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 67.148842][ T5171] [ 67.179169][ T5171] ERROR: (device loop4): remounting filesystem as read-only [pid 5170] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5170] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5170] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5182 attached [pid 5182] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5170] <... clone3 resumed> => {parent_tid=[5182]}, 88) = 5182 [pid 5182] <... rseq resumed>) = 0 [pid 5170] rt_sigprocmask(SIG_SETMASK, [], [pid 5182] set_robust_list(0x7f8282aa29a0, 24 [pid 5170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5182] <... set_robust_list resumed>) = 0 [pid 5170] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] rt_sigprocmask(SIG_SETMASK, [], [pid 5170] <... futex resumed>) = 0 [pid 5182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5170] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 67.196539][ T5171] ERROR: (device loop4): jfs_unlink: [ 67.196539][ T5171] [pid 5182] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5171] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5171] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5182] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5182] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5170] <... futex resumed>) = 0 [pid 5182] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 5170] <... futex resumed>) = 1 [pid 5171] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5170] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... open resumed>) = -1 EFAULT (Bad address) [pid 5171] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5170] <... futex resumed>) = 0 [pid 5171] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] exit_group(0 [pid 5182] <... futex resumed>) = ? [pid 5171] <... futex resumed>) = ? [pid 5170] <... exit_group resumed>) = ? [pid 5182] +++ exited with 0 +++ [pid 5171] +++ exited with 0 +++ [pid 5170] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5170, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5085] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 67.229297][ T5182] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 67.229297][ T5182] [pid 5085] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./5/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 4 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(4, "", [pid 5085] newfstatat(AT_FDCWD, "./6/bus", [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] getdents64(4, [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] close(4 [pid 5085] <... openat resumed>) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, [pid 5084] <... close resumed>) = 0 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] rmdir("./5/bus") = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5084] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] rmdir("./6/bus" [pid 5084] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./5/binderfs" [pid 5085] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... unlink resumed>) = 0 [pid 5084] getdents64(3, [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5084] close(3 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... close resumed>) = 0 [pid 5085] unlink("./6/binderfs" [pid 5084] rmdir("./5" [pid 5085] <... unlink resumed>) = 0 [pid 5085] getdents64(3, [pid 5084] <... rmdir resumed>) = 0 [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5084] mkdir("./6", 0777 [pid 5085] <... close resumed>) = 0 [pid 5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] rmdir("./6" [pid 5084] <... mkdir resumed>) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5085] mkdir("./7", 0777 [pid 5084] <... openat resumed>) = 3 [pid 5085] <... mkdir resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5179] <... write resumed>) = 16777216 [pid 5085] <... ioctl resumed>) = 0 [pid 5179] munmap(0x7f827a600000, 138412032 [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5183 ./strace-static-x86_64: Process 5183 attached [pid 5183] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5183] chdir("./6") = 0 [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5183] setpgid(0, 0) = 0 [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] close(3) = 0 [pid 5183] <... openat resumed>) = 3 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5183] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5184 attached [pid 5183] close(3) = 0 [pid 5184] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5183] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5183] write(1, "executing program\n", 18 executing program [pid 5184] chdir("./7" [pid 5183] <... write resumed>) = 18 [pid 5183] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5183] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5183] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5183] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5184] <... chdir resumed>) = 0 [pid 5183] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5184 [pid 5183] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5185 attached [pid 5183] <... clone3 resumed> => {parent_tid=[5185]}, 88) = 5185 [pid 5185] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5183] rt_sigprocmask(SIG_SETMASK, [], [pid 5185] <... rseq resumed>) = 0 [pid 5183] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5185] set_robust_list(0x7f8282ac39a0, 24 [pid 5183] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] <... set_robust_list resumed>) = 0 [pid 5183] <... futex resumed>) = 0 [pid 5185] rt_sigprocmask(SIG_SETMASK, [], [pid 5183] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5185] memfd_create("syzkaller", 0 [pid 5184] <... prctl resumed>) = 0 [pid 5179] <... munmap resumed>) = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5184] setpgid(0, 0 [pid 5179] <... openat resumed>) = 4 [pid 5184] <... setpgid resumed>) = 0 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5185] <... memfd_create resumed>) = 3 [pid 5179] ioctl(4, LOOP_SET_FD, 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5184] <... openat resumed>) = 3 [pid 5185] <... mmap resumed>) = 0x7f827a600000 [pid 5184] write(3, "1000", 4) = 4 [pid 5179] <... ioctl resumed>) = 0 [pid 5179] close(3) = 0 [pid 5179] close(4) = 0 [pid 5179] mkdir("./bus", 0777) = 0 [pid 5184] close(3 [pid 5179] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5184] <... close resumed>) = 0 [pid 5179] <... mount resumed>) = 0 [pid 5179] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5184] symlink("/dev/binderfs", "./binderfs" [pid 5179] <... openat resumed>) = 3 [pid 5184] <... symlink resumed>) = 0 [pid 5181] <... write resumed>) = 16777216 [pid 5179] chdir("./bus") = 0 [pid 5179] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5179] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 67.760736][ T5179] loop2: detected capacity change from 0 to 32768 [pid 5179] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULLexecuting program [pid 5184] write(1, "executing program\n", 18) = 18 [pid 5181] munmap(0x7f827a600000, 138412032 [pid 5184] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5184] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5176] <... futex resumed>) = 0 [pid 5184] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5176] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5179] <... futex resumed>) = 0 [pid 5176] <... futex resumed>) = 1 [pid 5184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5179] unlink("./file1" [pid 5176] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5184] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5184] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5184] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5181] <... munmap resumed>) = 0 [pid 5180] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5186 attached [pid 5186] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5186] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5186] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5184] <... clone3 resumed> => {parent_tid=[5186]}, 88) = 5186 [pid 5184] rt_sigprocmask(SIG_SETMASK, [], [pid 5186] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5180] munmap(0x7f827a600000, 138412032 [pid 5179] <... unlink resumed>) = -1 EIO (Input/output error) [ 67.821515][ T5179] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 67.821515][ T5179] [ 67.843329][ T5179] ERROR: (device loop2): remounting filesystem as read-only [ 67.854903][ T5179] ERROR: (device loop2): jfs_unlink: [ 67.854903][ T5179] [pid 5184] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... openat resumed>) = 4 [pid 5180] <... munmap resumed>) = 0 [pid 5179] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5181] ioctl(4, LOOP_SET_FD, 3 [pid 5179] <... futex resumed>) = 0 [pid 5176] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5176] <... futex resumed>) = 0 [pid 5180] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5184] <... futex resumed>) = 1 [pid 5180] ioctl(4, LOOP_SET_FD, 3 [pid 5186] <... futex resumed>) = 0 [pid 5184] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5176] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5186] memfd_create("syzkaller", 0) = 3 [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5179] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5181] <... ioctl resumed>) = 0 [pid 5181] close(3) = 0 [pid 5181] close(4) = 0 [pid 5181] mkdir("./bus", 0777) = 0 [pid 5179] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5179] <... futex resumed>) = 1 [pid 5176] <... futex resumed>) = 0 [pid 5179] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5176] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5176] <... futex resumed>) = 0 [pid 5179] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5176] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5179] <... open resumed>) = -1 EFAULT (Bad address) [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5179] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5176] <... futex resumed>) = 0 [pid 5179] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5176] exit_group(0 [pid 5179] <... futex resumed>) = ? [pid 5176] <... exit_group resumed>) = ? [pid 5180] <... ioctl resumed>) = 0 [pid 5180] close(3) = 0 [pid 5180] close(4) = 0 [ 67.907779][ T5181] loop0: detected capacity change from 0 to 32768 [ 67.914954][ T5179] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 67.914954][ T5179] [ 67.918572][ T5180] loop1: detected capacity change from 0 to 32768 [pid 5180] mkdir("./bus", 0777 [pid 5179] +++ exited with 0 +++ [pid 5176] +++ exited with 0 +++ [pid 5180] <... mkdir resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5176, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5181] <... mount resumed>) = 0 [pid 5180] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5181] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5181] chdir("./bus") = 0 [pid 5083] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5180] <... mount resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5180] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5083] newfstatat(3, "", [pid 5180] <... openat resumed>) = 3 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5180] chdir("./bus" [pid 5083] getdents64(3, [pid 5180] <... chdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5180] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5181] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5180] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5181] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... futex resumed>) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5181] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] <... futex resumed>) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5180] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5178] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5181] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = 1 [pid 5181] unlink("./file1" [pid 5180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5178] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5180] unlink("./file1" [pid 5177] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5177] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5177] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5178] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5178] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5178] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5187]}, 88) = 5187 [pid 5178] rt_sigprocmask(SIG_SETMASK, [], [pid 5177] <... futex resumed>) = 0 [pid 5083] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5178] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5177] <... mmap resumed>) = 0x7f8282a82000 [pid 5177] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5083] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5187 attached [pid 5178] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5178] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... mprotect resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5177] rt_sigprocmask(SIG_BLOCK, ~[], [ 67.997391][ T5181] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 67.997391][ T5181] [ 67.997393][ T5180] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 67.997393][ T5180] [ 68.034448][ T5181] ERROR: (device loop0): remounting filesystem as read-only [pid 5083] newfstatat(4, "", [pid 5187] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, [pid 5177] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5187] <... rseq resumed>) = 0 [pid 5177] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5188 attached [pid 5187] set_robust_list(0x7f8282aa29a0, 24 [pid 5083] getdents64(4, [pid 5177] <... clone3 resumed> => {parent_tid=[5188]}, 88) = 5188 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5188] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5177] rt_sigprocmask(SIG_SETMASK, [], [pid 5188] <... rseq resumed>) = 0 [pid 5083] close(4 [pid 5188] set_robust_list(0x7f8282aa29a0, 24 [pid 5177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5188] <... set_robust_list resumed>) = 0 [pid 5177] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... close resumed>) = 0 [pid 5188] rt_sigprocmask(SIG_SETMASK, [], [pid 5177] <... futex resumed>) = 0 [pid 5083] rmdir("./6/bus" [pid 5188] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5177] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5187] <... set_robust_list resumed>) = 0 [pid 5187] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5187] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5187] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5178] <... futex resumed>) = 0 [pid 5187] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5178] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5187] <... open resumed>) = -1 EFAULT (Bad address) [pid 5178] <... futex resumed>) = 0 [pid 5187] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5187] <... futex resumed>) = 0 [pid 5178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5187] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5083] <... rmdir resumed>) = 0 [pid 5083] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5188] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5188] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5188] <... futex resumed>) = 1 [pid 5180] <... futex resumed>) = 0 [pid 5177] <... futex resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5188] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... futex resumed>) = 0 [pid 5180] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5177] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5180] <... open resumed>) = -1 EFAULT (Bad address) [pid 5180] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5177] <... futex resumed>) = 0 [pid 5180] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5177] exit_group(0 [pid 5083] unlink("./6/binderfs" [pid 5188] <... futex resumed>) = ? [pid 5180] <... futex resumed>) = ? [pid 5177] <... exit_group resumed>) = ? [pid 5188] +++ exited with 0 +++ [pid 5180] +++ exited with 0 +++ [pid 5181] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5177] +++ exited with 0 +++ [pid 5083] <... unlink resumed>) = 0 [pid 5083] getdents64(3, [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5177, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 5082] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... close resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] rmdir("./6" [pid 5082] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5181] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... rmdir resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5181] <... futex resumed>) = 0 [pid 5178] exit_group(0 [pid 5083] mkdir("./7", 0777 [pid 5082] newfstatat(3, "", [pid 5187] <... futex resumed>) = ? [pid 5178] <... exit_group resumed>) = ? [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5187] +++ exited with 0 +++ [pid 5181] +++ exited with 0 +++ [pid 5178] +++ exited with 0 +++ [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5178, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 5082] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [ 68.072535][ T5180] ERROR: (device loop1): remounting filesystem as read-only [ 68.073063][ T5181] ERROR: (device loop0): jfs_unlink: [ 68.073063][ T5181] [ 68.091853][ T5180] ERROR: (device loop1): jfs_unlink: [ 68.091853][ T5180] [ 68.102627][ T5181] ERROR: (device loop0): remounting filesystem as read-only [pid 5081] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... umount2 resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./7/bus", [pid 5081] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] newfstatat(AT_FDCWD, "./6/bus", [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [ 68.146108][ T5082] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 68.146108][ T5082] [ 68.161653][ T5081] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 68.161653][ T5081] [ 68.169570][ T5082] ERROR: (device loop1): remounting filesystem as read-only [pid 5081] close(4) = 0 [pid 5081] rmdir("./6/bus") = 0 [pid 5081] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./6/binderfs") = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./6") = 0 [pid 5081] mkdir("./7", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5082] newfstatat(4, "", [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./7/bus") = 0 [pid 5082] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./7/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./7") = 0 [pid 5082] mkdir("./8", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5185] <... write resumed>) = 16777216 [pid 5185] munmap(0x7f827a600000, 138412032) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] close(3 [pid 5185] <... openat resumed>) = 4 [pid 5083] <... close resumed>) = 0 [pid 5185] ioctl(4, LOOP_SET_FD, 3 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5189 ./strace-static-x86_64: Process 5189 attached [pid 5185] <... ioctl resumed>) = 0 [pid 5185] close(3) = 0 [pid 5189] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5185] close(4 [pid 5189] chdir("./7" [pid 5185] <... close resumed>) = 0 [pid 5185] mkdir("./bus", 0777 [pid 5189] <... chdir resumed>) = 0 [pid 5185] <... mkdir resumed>) = 0 [pid 5185] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5189] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... ioctl resumed>) = 0 [pid 5189] <... prctl resumed>) = 0 [pid 5189] setpgid(0, 0) = 0 [pid 5189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5189] write(3, "1000", 4) = 4 [pid 5189] close(3) = 0 [pid 5189] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5189] write(1, "executing program\n", 18) = 18 [pid 5189] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5189] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5189] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [ 68.489874][ T5185] loop3: detected capacity change from 0 to 32768 [pid 5189] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5189] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5081] close(3 [pid 5189] <... clone3 resumed> => {parent_tid=[5190]}, 88) = 5190 [pid 5189] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] <... close resumed>) = 0 [pid 5189] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5189] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] <... mount resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5190 attached [pid 5190] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5190] set_robust_list(0x7f8282ac39a0, 24./strace-static-x86_64: Process 5191 attached ) = 0 [pid 5189] <... futex resumed>) = 0 [pid 5185] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5081] <... clone resumed>, child_tidptr=0x555571ec3690) = 5191 [pid 5191] set_robust_list(0x555571ec36a0, 24 [pid 5189] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5185] <... openat resumed>) = 3 [pid 5185] chdir("./bus") = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5191] <... set_robust_list resumed>) = 0 [pid 5185] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5191] chdir("./7" [pid 5185] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... chdir resumed>) = 0 [pid 5185] <... futex resumed>) = 1 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5185] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] <... prctl resumed>) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 executing program [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] write(1, "executing program\n", 18) = 18 [pid 5191] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] rt_sigprocmask(SIG_SETMASK, [], [pid 5183] <... futex resumed>) = 0 [pid 5191] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5190] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5183] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5185] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = 1 [pid 5191] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5190] memfd_create("syzkaller", 0 [pid 5185] unlink("./file1" [pid 5183] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5190] <... memfd_create resumed>) = 3 [pid 5186] <... write resumed>) = 16777216 [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5190] <... mmap resumed>) = 0x7f827a600000 [pid 5191] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5191] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5192]}, 88) = 5192 [pid 5191] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5191] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5186] munmap(0x7f827a600000, 138412032./strace-static-x86_64: Process 5192 attached [pid 5192] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5192] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5192] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5082] <... ioctl resumed>) = 0 [ 68.575874][ T5185] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 68.575874][ T5185] [pid 5186] <... munmap resumed>) = 0 [pid 5082] close(3) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5193 attached [pid 5183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5183] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5193 [pid 5183] <... futex resumed>) = 0 [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5183] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5193] set_robust_list(0x555571ec36a0, 24 [pid 5183] <... mprotect resumed>) = 0 [pid 5183] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5193] <... set_robust_list resumed>) = 0 [pid 5193] chdir("./8") = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5186] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5183] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5193] <... prctl resumed>) = 0 [pid 5186] <... openat resumed>) = 4 [pid 5183] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5193] setpgid(0, 0 [pid 5186] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5194 attached [pid 5193] <... setpgid resumed>) = 0 [pid 5186] <... ioctl resumed>) = 0 [pid 5183] <... clone3 resumed> => {parent_tid=[5194]}, 88) = 5194 [pid 5194] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5186] close(3 [pid 5183] rt_sigprocmask(SIG_SETMASK, [], [pid 5194] <... rseq resumed>) = 0 [pid 5183] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5186] <... close resumed>) = 0 [pid 5194] set_robust_list(0x7f8282aa29a0, 24 [pid 5183] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] close(4 [pid 5183] <... futex resumed>) = 0 [pid 5193] <... openat resumed>) = 3 [pid 5194] <... set_robust_list resumed>) = 0 [pid 5193] write(3, "1000", 4 [pid 5186] <... close resumed>) = 0 [pid 5183] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] rt_sigprocmask(SIG_SETMASK, [], [pid 5193] <... write resumed>) = 4 [pid 5194] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5193] close(3 [pid 5194] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5193] <... close resumed>) = 0 [pid 5194] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5194] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5194] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] mkdir("./bus", 0777 [pid 5183] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 5194] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5193] write(1, "executing program\n", 18 [pid 5194] <... open resumed>) = -1 EFAULT (Bad address) [pid 5193] <... write resumed>) = 18 [pid 5194] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5183] <... futex resumed>) = 0 [pid 5194] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5193] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5186] <... mkdir resumed>) = 0 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [ 68.622795][ T5185] ERROR: (device loop3): remounting filesystem as read-only [ 68.654881][ T5186] loop4: detected capacity change from 0 to 32768 [ 68.655020][ T5185] ERROR: (device loop3): jfs_unlink: [ 68.655020][ T5185] [pid 5193] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5186] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5193] <... mprotect resumed>) = 0 [pid 5193] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5195]}, 88) = 5195 [pid 5193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5186] <... mount resumed>) = 0 [pid 5193] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5195 attached [pid 5193] <... futex resumed>) = 0 [pid 5186] <... openat resumed>) = 3 [pid 5195] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5193] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5186] chdir("./bus" [pid 5185] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5186] <... chdir resumed>) = 0 [pid 5185] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5185] <... futex resumed>) = 0 [pid 5186] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5185] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5186] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] exit_group(0 [pid 5184] <... futex resumed>) = 0 [pid 5194] <... futex resumed>) = ? [pid 5194] +++ exited with 0 +++ [pid 5186] <... futex resumed>) = 1 [pid 5185] <... futex resumed>) = ? [pid 5184] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... exit_group resumed>) = ? [pid 5186] unlink("./file1" [pid 5185] +++ exited with 0 +++ [pid 5184] <... futex resumed>) = 0 [pid 5183] +++ exited with 0 +++ [pid 5195] <... rseq resumed>) = 0 [pid 5184] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5195] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5195] memfd_create("syzkaller", 0) = 3 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=22 /* 0.22 s */} --- [ 68.710023][ T5185] ERROR: (device loop3): remounting filesystem as read-only [ 68.745248][ T5186] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 68.745248][ T5186] [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5084] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5186] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5186] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5184] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5186] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5184] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] newfstatat(3, "", [pid 5186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5184] <... futex resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5186] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5184] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 68.769224][ T5186] ERROR: (device loop4): remounting filesystem as read-only [ 68.776688][ T5186] ERROR: (device loop4): jfs_unlink: [ 68.776688][ T5186] [ 68.798049][ T5186] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 68.798049][ T5186] [pid 5084] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5186] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5186] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5184] <... futex resumed>) = 0 [pid 5186] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5184] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = 0 [pid 5186] <... open resumed>) = -1 EFAULT (Bad address) [pid 5184] <... futex resumed>) = 0 [pid 5186] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5186] <... futex resumed>) = 0 [pid 5184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5186] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5184] exit_group(0 [pid 5186] <... futex resumed>) = ? [pid 5184] <... exit_group resumed>) = ? [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5186] +++ exited with 0 +++ [ 68.819890][ T5084] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 68.819890][ T5084] [pid 5184] +++ exited with 0 +++ [pid 5084] newfstatat(AT_FDCWD, "./6/bus", [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./6/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... openat resumed>) = 4 [pid 5085] <... openat resumed>) = 3 [pid 5084] newfstatat(4, "", [pid 5085] newfstatat(3, "", [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, [pid 5085] getdents64(3, [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] getdents64(4, [pid 5085] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./6/bus") = 0 [pid 5084] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./6/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./6" [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5085] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] mkdir("./7", 0777) = 0 [pid 5085] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./7/bus") = 0 [pid 5085] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./7/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./7") = 0 [pid 5085] mkdir("./8", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] <... ioctl resumed>) = 0 [pid 5190] <... write resumed>) = 16777216 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5196 attached , child_tidptr=0x555571ec3690) = 5196 [pid 5196] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5196] chdir("./7") = 0 [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5190] munmap(0x7f827a600000, 138412032 [pid 5196] setpgid(0, 0 [pid 5192] <... write resumed>) = 16777216 [pid 5196] <... setpgid resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5196] write(3, "1000", 4 [pid 5192] munmap(0x7f827a600000, 138412032 [pid 5196] <... write resumed>) = 4 [pid 5196] close(3) = 0 [pid 5196] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5196] write(1, "executing program\n", 18 [pid 5190] <... munmap resumed>) = 0 [pid 5196] <... write resumed>) = 18 [pid 5190] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5196] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] <... openat resumed>) = 4 [pid 5196] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5190] ioctl(4, LOOP_SET_FD, 3 [pid 5196] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5196] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5192] <... munmap resumed>) = 0 [pid 5196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5196] <... mmap resumed>) = 0x7f8282aa3000 [pid 5192] <... openat resumed>) = 4 [pid 5192] ioctl(4, LOOP_SET_FD, 3 [pid 5196] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5190] <... ioctl resumed>) = 0 [pid 5196] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5190] close(3 [pid 5196] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5190] <... close resumed>) = 0 [pid 5196] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5190] close(4) = 0 [pid 5190] mkdir("./bus", 0777) = 0 [pid 5192] <... ioctl resumed>) = 0 [pid 5192] close(3) = 0 [pid 5192] close(4) = 0 [pid 5192] mkdir("./bus", 0777) = 0 [pid 5192] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity"./strace-static-x86_64: Process 5197 attached [pid 5196] <... clone3 resumed> => {parent_tid=[5197]}, 88) = 5197 [pid 5192] <... mount resumed>) = 0 [pid 5190] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5197] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5196] rt_sigprocmask(SIG_SETMASK, [], [pid 5192] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5197] <... rseq resumed>) = 0 [pid 5196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5192] <... openat resumed>) = 3 [pid 5197] set_robust_list(0x7f8282ac39a0, 24 [pid 5196] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] chdir("./bus" [pid 5197] <... set_robust_list resumed>) = 0 [pid 5196] <... futex resumed>) = 0 [pid 5197] rt_sigprocmask(SIG_SETMASK, [], [pid 5196] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5197] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 69.317604][ T5190] loop2: detected capacity change from 0 to 32768 [ 69.319147][ T5192] loop0: detected capacity change from 0 to 32768 [pid 5197] memfd_create("syzkaller", 0 [pid 5192] <... chdir resumed>) = 0 [pid 5197] <... memfd_create resumed>) = 3 [pid 5192] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5192] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5192] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] <... mmap resumed>) = 0x7f827a600000 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5191] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] unlink("./file1" [pid 5191] <... futex resumed>) = 0 [pid 5191] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5190] <... mount resumed>) = 0 [pid 5190] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5190] chdir("./bus" [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5190] <... chdir resumed>) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5190] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5198 attached [pid 5198] set_robust_list(0x555571ec36a0, 24 [pid 5190] <... futex resumed>) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5198] <... set_robust_list resumed>) = 0 [pid 5190] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] chdir("./8" [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] <... chdir resumed>) = 0 [pid 5190] unlink("./file1" [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5189] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5198 [ 69.385841][ T5192] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 69.385841][ T5192] [ 69.416266][ T5190] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 69.416266][ T5190] [pid 5198] <... prctl resumed>) = 0 [pid 5191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5198] setpgid(0, 0 [pid 5191] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... setpgid resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5191] <... mmap resumed>) = 0x7f8282a82000 [pid 5191] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5198] <... openat resumed>) = 3 [pid 5191] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5199]}, 88) = 5199 ./strace-static-x86_64: Process 5199 attached [pid 5198] write(3, "1000", 4 [pid 5191] rt_sigprocmask(SIG_SETMASK, [], [pid 5199] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5198] <... write resumed>) = 4 [pid 5191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5199] <... rseq resumed>) = 0 [pid 5198] close(3 [pid 5191] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] set_robust_list(0x7f8282aa29a0, 24 [ 69.432827][ T5192] ERROR: (device loop0): remounting filesystem as read-only [pid 5198] <... close resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5199] <... set_robust_list resumed>) = 0 [pid 5198] symlink("/dev/binderfs", "./binderfs" [pid 5195] <... write resumed>) = 16777216 [pid 5191] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5189] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5199] rt_sigprocmask(SIG_SETMASK, [], [pid 5189] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... symlink resumed>) = 0 [pid 5199] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5189] <... futex resumed>) = 0 [pid 5199] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5199] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5189] <... mmap resumed>) = 0x7f8282a82000 [pid 5199] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5199] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5189] <... mprotect resumed>) = 0 [pid 5191] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] rt_sigprocmask(SIG_BLOCK, ~[], executing program [pid 5199] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5191] <... futex resumed>) = 0 [pid 5198] write(1, "executing program\n", 18 [pid 5189] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5195] munmap(0x7f827a600000, 138412032 [pid 5198] <... write resumed>) = 18 [pid 5199] <... open resumed>) = -1 EFAULT (Bad address) [pid 5198] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5199] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5199] <... futex resumed>) = 0 [pid 5191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... clone3 resumed> => {parent_tid=[5200]}, 88) = 5200 [pid 5199] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] <... futex resumed>) = 0 [pid 5189] rt_sigprocmask(SIG_SETMASK, [], [pid 5198] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5189] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5189] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5198] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5189] <... futex resumed>) = 0 [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5200 attached [pid 5189] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5200] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5200] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5200] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5200] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5189] <... futex resumed>) = 0 [pid 5200] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5189] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5189] <... futex resumed>) = 0 [pid 5200] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5189] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5200] <... open resumed>) = -1 EFAULT (Bad address) [pid 5200] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5189] <... futex resumed>) = 0 [ 69.458615][ T5190] ERROR: (device loop2): remounting filesystem as read-only [ 69.459989][ T5192] ERROR: (device loop0): jfs_unlink: [ 69.459989][ T5192] [ 69.489733][ T5190] ERROR: (device loop2): jfs_unlink: [ 69.489733][ T5190] [ 69.497415][ T5190] ERROR: (device loop2): remounting filesystem as read-only [pid 5200] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] <... mmap resumed>) = 0x7f8282aa3000 [pid 5198] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5201 attached [pid 5201] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5192] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5201] <... rseq resumed>) = 0 [pid 5198] <... clone3 resumed> => {parent_tid=[5201]}, 88) = 5201 [pid 5195] <... munmap resumed>) = 0 [pid 5190] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5201] set_robust_list(0x7f8282ac39a0, 24 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], [pid 5195] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5192] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] exit_group(0 [pid 5190] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] <... set_robust_list resumed>) = 0 [pid 5199] <... futex resumed>) = ? [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5195] <... openat resumed>) = 4 [pid 5192] <... futex resumed>) = ? [pid 5191] <... exit_group resumed>) = ? [pid 5190] <... futex resumed>) = 0 [ 69.499642][ T5192] ERROR: (device loop0): remounting filesystem as read-only [pid 5201] rt_sigprocmask(SIG_SETMASK, [], [pid 5199] +++ exited with 0 +++ [pid 5198] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] ioctl(4, LOOP_SET_FD, 3 [pid 5192] +++ exited with 0 +++ [pid 5191] +++ exited with 0 +++ [pid 5190] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5198] <... futex resumed>) = 0 [pid 5189] exit_group(0 [pid 5200] <... futex resumed>) = ? [pid 5190] <... futex resumed>) = ? [pid 5189] <... exit_group resumed>) = ? [pid 5200] +++ exited with 0 +++ [pid 5190] +++ exited with 0 +++ [pid 5189] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5189, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5081] <... restart_syscall resumed>) = 0 [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5081] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5201] memfd_create("syzkaller", 0 [pid 5198] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5201] <... memfd_create resumed>) = 3 [pid 5201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5201] <... mmap resumed>) = 0x7f827a600000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5083] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] newfstatat(3, "", [pid 5083] newfstatat(3, "", [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5195] <... ioctl resumed>) = 0 [pid 5195] close(3) = 0 [ 69.541362][ T5195] loop1: detected capacity change from 0 to 32768 [pid 5195] close(4 [pid 5197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5195] <... close resumed>) = 0 [pid 5195] mkdir("./bus", 0777) = 0 [pid 5195] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5195] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5195] chdir("./bus") = 0 [pid 5195] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 69.586713][ T5083] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 69.586713][ T5083] [ 69.597145][ T5081] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 69.597145][ T5081] [pid 5195] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = 0 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] unlink("./file1" [pid 5193] <... futex resumed>) = 0 [pid 5081] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5193] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./7/bus") = 0 [pid 5081] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5081] unlink("./7/binderfs") = 0 [pid 5195] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5081] getdents64(3, [pid 5195] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5083] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] close(3 [pid 5195] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 69.629984][ T5195] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 69.629984][ T5195] [ 69.660353][ T5195] ERROR: (device loop1): remounting filesystem as read-only [ 69.667787][ T5195] ERROR: (device loop1): jfs_unlink: [ 69.667787][ T5195] [pid 5193] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... close resumed>) = 0 [pid 5195] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5193] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] newfstatat(AT_FDCWD, "./7/bus", [pid 5081] rmdir("./7" [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5083] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] mkdir("./8", 0777 [pid 5195] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5195] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 4 [pid 5081] <... openat resumed>) = 3 [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5193] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] newfstatat(4, "", [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5195] <... open resumed>) = -1 EFAULT (Bad address) [pid 5193] <... futex resumed>) = 0 [pid 5195] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5195] <... futex resumed>) = 0 [pid 5193] exit_group(0 [pid 5083] getdents64(4, [pid 5193] <... exit_group resumed>) = ? [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5195] +++ exited with 0 +++ [pid 5193] +++ exited with 0 +++ [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5083] rmdir("./7/bus" [pid 5082] restart_syscall(<... resuming interrupted clone ...> [pid 5083] <... rmdir resumed>) = 0 [pid 5082] <... restart_syscall resumed>) = 0 [pid 5083] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./7/binderfs") = 0 [pid 5082] <... openat resumed>) = 3 [pid 5083] getdents64(3, [pid 5082] newfstatat(3, "", [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./7" [pid 5082] getdents64(3, [pid 5083] <... rmdir resumed>) = 0 [pid 5083] mkdir("./8", 0777) = 0 [ 69.696186][ T5195] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 69.696186][ T5195] [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./8/bus") = 0 [pid 5082] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./8/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./8") = 0 [pid 5082] mkdir("./9", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5197] <... write resumed>) = 16777216 [pid 5197] munmap(0x7f827a600000, 138412032 [pid 5081] <... ioctl resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5081] close(3 [pid 5197] <... munmap resumed>) = 0 [pid 5083] close(3) = 0 [pid 5081] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5203 [pid 5197] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5202 [pid 5197] <... openat resumed>) = 4 [pid 5197] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5202 attached ./strace-static-x86_64: Process 5203 attached [pid 5203] set_robust_list(0x555571ec36a0, 24 [pid 5202] set_robust_list(0x555571ec36a0, 24 [pid 5203] <... set_robust_list resumed>) = 0 [pid 5202] <... set_robust_list resumed>) = 0 [pid 5202] chdir("./8" [pid 5203] chdir("./8" [pid 5202] <... chdir resumed>) = 0 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5203] <... chdir resumed>) = 0 [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5202] <... prctl resumed>) = 0 [pid 5203] <... prctl resumed>) = 0 [pid 5202] setpgid(0, 0 [pid 5203] setpgid(0, 0 [pid 5202] <... setpgid resumed>) = 0 [pid 5203] <... setpgid resumed>) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5202] <... openat resumed>) = 3 [pid 5203] write(3, "1000", 4) = 4 [pid 5202] write(3, "1000", 4 [pid 5203] close(3 [pid 5202] <... write resumed>) = 4 [pid 5203] <... close resumed>) = 0 [pid 5202] close(3 [pid 5197] <... ioctl resumed>) = 0 [pid 5203] symlink("/dev/binderfs", "./binderfs" [pid 5202] <... close resumed>) = 0 [pid 5197] close(3 executing program [pid 5203] <... symlink resumed>) = 0 [pid 5197] <... close resumed>) = 0 [pid 5203] write(1, "executing program\n", 18 [pid 5202] symlink("/dev/binderfs", "./binderfs" [pid 5197] close(4 [pid 5203] <... write resumed>) = 18 [pid 5202] <... symlink resumed>) = 0 [pid 5197] <... close resumed>) = 0 executing program [pid 5203] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] write(1, "executing program\n", 18 [pid 5197] mkdir("./bus", 0777 [pid 5203] <... futex resumed>) = 0 [pid 5202] <... write resumed>) = 18 [pid 5203] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5202] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5202] <... futex resumed>) = 0 [pid 5203] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5202] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5202] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5202] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5197] <... mkdir resumed>) = 0 [pid 5203] <... mmap resumed>) = 0x7f8282aa3000 [pid 5202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5197] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5202] <... mmap resumed>) = 0x7f8282aa3000 [pid 5203] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [ 70.069259][ T5197] loop3: detected capacity change from 0 to 32768 [pid 5202] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5203] <... mprotect resumed>) = 0 [pid 5202] <... mprotect resumed>) = 0 [pid 5203] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5202] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5202] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5204 attached ./strace-static-x86_64: Process 5205 attached [pid 5204] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5203] <... clone3 resumed> => {parent_tid=[5204]}, 88) = 5204 [pid 5202] <... clone3 resumed> => {parent_tid=[5205]}, 88) = 5205 [pid 5204] <... rseq resumed>) = 0 [pid 5203] rt_sigprocmask(SIG_SETMASK, [], [pid 5202] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] <... ioctl resumed>) = 0 [pid 5205] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5204] set_robust_list(0x7f8282ac39a0, 24 [pid 5203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] close(3 [pid 5205] <... rseq resumed>) = 0 [pid 5204] <... set_robust_list resumed>) = 0 [pid 5203] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] set_robust_list(0x7f8282ac39a0, 24 [pid 5204] rt_sigprocmask(SIG_SETMASK, [], [pid 5203] <... futex resumed>) = 0 [pid 5202] <... futex resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5205] <... set_robust_list resumed>) = 0 [pid 5204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5203] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5202] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5197] <... mount resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5205] rt_sigprocmask(SIG_SETMASK, [], [pid 5204] memfd_create("syzkaller", 0 [pid 5205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5197] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5206 attached [pid 5205] memfd_create("syzkaller", 0 [pid 5204] <... memfd_create resumed>) = 3 [pid 5197] <... openat resumed>) = 3 [pid 5206] set_robust_list(0x555571ec36a0, 24 [pid 5204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5197] chdir("./bus" [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5206 [pid 5206] <... set_robust_list resumed>) = 0 [pid 5204] <... mmap resumed>) = 0x7f827a600000 [pid 5197] <... chdir resumed>) = 0 [pid 5206] chdir("./9" [pid 5205] <... memfd_create resumed>) = 3 [pid 5197] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5197] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5205] <... mmap resumed>) = 0x7f827a600000 [pid 5197] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... chdir resumed>) = 0 [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5197] <... futex resumed>) = 1 [pid 5196] <... futex resumed>) = 0 [pid 5206] <... prctl resumed>) = 0 [pid 5197] unlink("./file1" [pid 5196] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] setpgid(0, 0 [pid 5196] <... futex resumed>) = 0 [pid 5206] <... setpgid resumed>) = 0 [pid 5196] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5206] write(3, "1000", 4) = 4 [pid 5206] close(3) = 0 [pid 5206] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5206] write(1, "executing program\n", 18) = 18 [pid 5206] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5206] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5206] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5206] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5207 attached [pid 5207] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5206] <... clone3 resumed> => {parent_tid=[5207]}, 88) = 5207 [ 70.170231][ T5197] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 70.170231][ T5197] [pid 5207] <... rseq resumed>) = 0 [pid 5206] rt_sigprocmask(SIG_SETMASK, [], [pid 5201] <... write resumed>) = 16777216 [pid 5196] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5207] set_robust_list(0x7f8282ac39a0, 24 [pid 5206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5196] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... set_robust_list resumed>) = 0 [pid 5206] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = 0 [pid 5207] rt_sigprocmask(SIG_SETMASK, [], [pid 5206] <... futex resumed>) = 0 [pid 5201] munmap(0x7f827a600000, 138412032 [pid 5196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5207] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5206] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5196] <... mmap resumed>) = 0x7f8282a82000 [pid 5196] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5207] memfd_create("syzkaller", 0 [pid 5196] <... mprotect resumed>) = 0 [pid 5207] <... memfd_create resumed>) = 3 [pid 5196] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5196] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5207] <... mmap resumed>) = 0x7f827a600000 [pid 5196] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5208]}, 88) = 5208 [pid 5196] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5196] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 70.215443][ T5197] ERROR: (device loop3): remounting filesystem as read-only ./strace-static-x86_64: Process 5208 attached [pid 5196] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5208] set_robust_list(0x7f8282aa29a0, 24 [pid 5201] <... munmap resumed>) = 0 [pid 5208] <... set_robust_list resumed>) = 0 [pid 5201] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5208] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5201] <... openat resumed>) = 4 [pid 5208] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5201] ioctl(4, LOOP_SET_FD, 3 [pid 5208] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5201] <... ioctl resumed>) = 0 [pid 5208] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5196] <... futex resumed>) = 0 [pid 5208] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5196] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5208] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5196] <... futex resumed>) = 0 [pid 5208] <... open resumed>) = -1 EFAULT (Bad address) [pid 5196] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5201] close(3) = 0 [pid 5201] close(4) = 0 [pid 5208] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] mkdir("./bus", 0777 [pid 5197] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5197] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] <... mkdir resumed>) = 0 [pid 5197] <... futex resumed>) = 0 [pid 5208] <... futex resumed>) = 1 [pid 5196] <... futex resumed>) = 0 [pid 5208] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5196] exit_group(0 [pid 5201] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5208] <... futex resumed>) = ? [pid 5196] <... exit_group resumed>) = ? [pid 5208] +++ exited with 0 +++ [ 70.260111][ T5197] ERROR: (device loop3): jfs_unlink: [ 70.260111][ T5197] [ 70.280435][ T5201] loop4: detected capacity change from 0 to 32768 [ 70.292065][ T5197] ERROR: (device loop3): remounting filesystem as read-only [pid 5197] +++ exited with 0 +++ [pid 5196] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5196, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", [pid 5201] <... mount resumed>) = 0 [pid 5201] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5201] <... openat resumed>) = 3 [pid 5201] chdir("./bus" [pid 5084] getdents64(3, [pid 5201] <... chdir resumed>) = 0 [pid 5201] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5201] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5201] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5201] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] <... futex resumed>) = 0 [pid 5198] <... futex resumed>) = 1 [pid 5201] unlink("./file1" [ 70.354512][ T5201] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 70.354512][ T5201] [ 70.354554][ T5084] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 70.354554][ T5084] [ 70.391888][ T5201] ERROR: (device loop4): remounting filesystem as read-only [pid 5198] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5198] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5198] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... umount2 resumed>) = 0 [pid 5198] <... mprotect resumed>) = 0 [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5209 attached [pid 5209] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5198] <... clone3 resumed> => {parent_tid=[5209]}, 88) = 5209 [pid 5209] <... rseq resumed>) = 0 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5209] set_robust_list(0x7f8282aa29a0, 24 [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5209] <... set_robust_list resumed>) = 0 [pid 5198] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] newfstatat(AT_FDCWD, "./7/bus", [pid 5209] rt_sigprocmask(SIG_SETMASK, [], [pid 5198] <... futex resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5198] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./7/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5209] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5209] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5209] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./7/bus") = 0 [pid 5084] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./7/binderfs") = 0 [pid 5209] <... futex resumed>) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5209] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5198] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... open resumed>) = -1 EFAULT (Bad address) [pid 5198] <... futex resumed>) = 0 [pid 5209] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... futex resumed>) = 0 [pid 5198] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5209] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./7") = 0 [pid 5084] mkdir("./8", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5201] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5201] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5201] <... futex resumed>) = 0 [pid 5201] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5198] exit_group(0 [pid 5209] <... futex resumed>) = ? [pid 5201] <... futex resumed>) = ? [pid 5198] <... exit_group resumed>) = ? [pid 5209] +++ exited with 0 +++ [pid 5201] +++ exited with 0 +++ [pid 5198] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=32 /* 0.32 s */} --- [pid 5085] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", [pid 5205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 70.425579][ T5201] ERROR: (device loop4): jfs_unlink: [ 70.425579][ T5201] [ 70.453067][ T5201] ERROR: (device loop4): remounting filesystem as read-only [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [ 70.509081][ T5085] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 70.509081][ T5085] [pid 5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./8/bus") = 0 [pid 5085] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./8/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./8") = 0 [pid 5085] mkdir("./9", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5204] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5210 attached [pid 5210] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5210] chdir("./8") = 0 [pid 5210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5210] setpgid(0, 0) = 0 [pid 5210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5204] munmap(0x7f827a600000, 138412032 [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5210 [pid 5210] write(3, "1000", 4executing program ) = 4 [pid 5210] close(3) = 0 [pid 5210] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5210] write(1, "executing program\n", 18) = 18 [pid 5210] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] <... munmap resumed>) = 0 [pid 5210] <... futex resumed>) = 0 [pid 5210] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5210] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5204] ioctl(4, LOOP_SET_FD, 3 [pid 5210] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5207] <... write resumed>) = 16777216 [pid 5205] <... write resumed>) = 16777216 [pid 5210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5210] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5204] <... ioctl resumed>) = 0 [pid 5210] <... mprotect resumed>) = 0 [pid 5207] munmap(0x7f827a600000, 138412032 [pid 5205] munmap(0x7f827a600000, 138412032 [pid 5204] close(3 [pid 5085] <... ioctl resumed>) = 0 [pid 5210] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5204] <... close resumed>) = 0 [pid 5204] close(4 [pid 5085] close(3 [pid 5210] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5211 attached [pid 5204] <... close resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5204] mkdir("./bus", 0777) = 0 [pid 5204] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity"./strace-static-x86_64: Process 5212 attached [pid 5210] <... clone3 resumed> => {parent_tid=[5211]}, 88) = 5211 [pid 5211] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5212] set_robust_list(0x555571ec36a0, 24 [pid 5210] rt_sigprocmask(SIG_SETMASK, [], [pid 5211] <... rseq resumed>) = 0 [pid 5211] set_robust_list(0x7f8282ac39a0, 24 [pid 5210] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5212] <... set_robust_list resumed>) = 0 [pid 5211] <... set_robust_list resumed>) = 0 [pid 5210] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5212 [pid 5212] chdir("./9" [pid 5211] rt_sigprocmask(SIG_SETMASK, [], [pid 5210] <... futex resumed>) = 0 [pid 5212] <... chdir resumed>) = 0 [pid 5211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5210] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5205] <... munmap resumed>) = 0 [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5211] memfd_create("syzkaller", 0 [pid 5205] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5204] <... mount resumed>) = 0 [pid 5212] <... prctl resumed>) = 0 [pid 5212] setpgid(0, 0 [pid 5205] <... openat resumed>) = 4 [pid 5212] <... setpgid resumed>) = 0 [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5211] <... memfd_create resumed>) = 3 [ 70.920368][ T5204] loop0: detected capacity change from 0 to 32768 [pid 5205] ioctl(4, LOOP_SET_FD, 3 [pid 5204] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5207] <... munmap resumed>) = 0 [pid 5204] <... openat resumed>) = 3 [pid 5211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5204] chdir("./bus") = 0 [pid 5204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5204] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] unlink("./file1" [pid 5203] <... futex resumed>) = 0 [pid 5212] <... openat resumed>) = 3 [pid 5211] <... mmap resumed>) = 0x7f827a600000 [pid 5207] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5205] <... ioctl resumed>) = 0 [pid 5203] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] write(3, "1000", 4) = 4 [pid 5207] <... openat resumed>) = 4 [pid 5205] close(3 [pid 5212] close(3 [pid 5205] <... close resumed>) = 0 [pid 5207] ioctl(4, LOOP_SET_FD, 3 [pid 5212] <... close resumed>) = 0 [pid 5212] symlink("/dev/binderfs", "./binderfs" [pid 5205] close(4) = 0 [pid 5212] <... symlink resumed>) = 0 [pid 5205] mkdir("./bus", 0777 [pid 5207] <... ioctl resumed>) = 0 [pid 5205] <... mkdir resumed>) = 0 [pid 5207] close(3) = 0 [pid 5207] close(4) = 0 [pid 5207] mkdir("./bus", 0777executing program [pid 5212] write(1, "executing program\n", 18 [pid 5207] <... mkdir resumed>) = 0 [pid 5205] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5207] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5212] <... write resumed>) = 18 [pid 5212] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] <... mount resumed>) = 0 [pid 5204] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5207] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5212] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5207] <... openat resumed>) = 3 [pid 5212] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5207] chdir("./bus" [pid 5212] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5207] <... chdir resumed>) = 0 [pid 5212] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5207] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5207] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5204] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5207] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... mount resumed>) = 0 [pid 5203] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5212] <... mmap resumed>) = 0x7f8282aa3000 [pid 5207] <... futex resumed>) = 1 [ 70.986235][ T5205] loop2: detected capacity change from 0 to 32768 [ 70.993138][ T5204] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 70.993138][ T5204] [ 71.010417][ T5207] loop1: detected capacity change from 0 to 32768 [ 71.014707][ T5204] ERROR: (device loop0): remounting filesystem as read-only [ 71.026552][ T5204] ERROR: (device loop0): jfs_unlink: [ 71.026552][ T5204] [pid 5206] <... futex resumed>) = 0 [pid 5204] <... futex resumed>) = 0 [pid 5203] <... futex resumed>) = 0 [pid 5212] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5207] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5203] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5212] <... mprotect resumed>) = 0 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5205] <... openat resumed>) = 3 [pid 5204] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5212] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5207] unlink("./file1" [pid 5206] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] chdir("./bus" [pid 5212] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5212] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5205] <... chdir resumed>) = 0 [pid 5205] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5213 attached ) = -1 EBUSY (Device or resource busy) [pid 5213] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5205] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... rseq resumed>) = 0 [pid 5213] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5212] <... clone3 resumed> => {parent_tid=[5213]}, 88) = 5213 [pid 5202] <... futex resumed>) = 0 [pid 5213] rt_sigprocmask(SIG_SETMASK, [], [pid 5212] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5212] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5212] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5202] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5202] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] memfd_create("syzkaller", 0 [pid 5205] <... futex resumed>) = 0 [pid 5213] <... memfd_create resumed>) = 3 [pid 5205] unlink("./file1" [pid 5204] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5204] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5203] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5203] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5204] <... futex resumed>) = 1 [pid 5204] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5204] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5203] exit_group(0) = ? [pid 5204] <... futex resumed>) = ? [ 71.071008][ T5204] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 71.071008][ T5204] [ 71.084218][ T5207] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 71.084218][ T5207] [ 71.106289][ T5205] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 71.106289][ T5205] [pid 5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5206] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5204] +++ exited with 0 +++ [pid 5203] +++ exited with 0 +++ [pid 5206] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5206] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5203, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5206] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5206] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5214 attached [pid 5081] <... restart_syscall resumed>) = 0 [pid 5214] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5206] <... clone3 resumed> => {parent_tid=[5214]}, 88) = 5214 [pid 5214] <... rseq resumed>) = 0 [pid 5206] rt_sigprocmask(SIG_SETMASK, [], [pid 5214] set_robust_list(0x7f8282aa29a0, 24 [pid 5206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] <... set_robust_list resumed>) = 0 [pid 5206] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] rt_sigprocmask(SIG_SETMASK, [], [pid 5206] <... futex resumed>) = 0 [pid 5214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5206] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5202] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5202] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5202] <... futex resumed>) = 0 [pid 5202] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5202] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5081] getdents64(3, [pid 5202] <... mprotect resumed>) = 0 [pid 5202] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5202] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5215]}, 88) = 5215 [pid 5202] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5202] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 71.119737][ T5207] ERROR: (device loop1): remounting filesystem as read-only [ 71.150080][ T5207] ERROR: (device loop1): jfs_unlink: [ 71.150080][ T5207] [ 71.161323][ T5205] ERROR: (device loop2): remounting filesystem as read-only [pid 5081] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5215 attached [pid 5215] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5215] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5215] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5207] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5215] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5207] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5207] <... futex resumed>) = 0 [pid 5207] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5215] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... futex resumed>) = 0 [pid 5202] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] <... futex resumed>) = 1 [pid 5215] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5215] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5214] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... futex resumed>) = 0 [pid 5214] <... futex resumed>) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5214] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = 0 [pid 5206] <... futex resumed>) = 1 [pid 5215] <... futex resumed>) = 1 [pid 5207] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5206] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5215] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] <... open resumed>) = -1 EFAULT (Bad address) [pid 5207] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] exit_group(0 [pid 5205] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5205] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] <... futex resumed>) = ? [pid 5206] <... exit_group resumed>) = ? [pid 5205] <... futex resumed>) = 0 [pid 5207] <... futex resumed>) = ? [pid 5205] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5202] exit_group(0 [pid 5215] <... futex resumed>) = ? [pid 5202] <... exit_group resumed>) = ? [pid 5215] +++ exited with 0 +++ [pid 5214] +++ exited with 0 +++ [pid 5205] <... futex resumed>) = ? [pid 5207] +++ exited with 0 +++ [pid 5206] +++ exited with 0 +++ [pid 5205] +++ exited with 0 +++ [pid 5202] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5206, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5082] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5082] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 71.179177][ T5205] ERROR: (device loop2): jfs_unlink: [ 71.179177][ T5205] [ 71.198942][ T5205] ERROR: (device loop2): remounting filesystem as read-only [ 71.219912][ T5082] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [pid 5083] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] <... umount2 resumed>) = 0 [pid 5083] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./8/bus" [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5082] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(4, "", [pid 5083] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] unlink("./8/binderfs" [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, [pid 5083] <... unlink resumed>) = 0 [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] getdents64(3, [pid 5082] close(4 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] <... close resumed>) = 0 [pid 5082] rmdir("./9/bus" [pid 5083] close(3 [pid 5082] <... rmdir resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5082] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] rmdir("./8" [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 71.219912][ T5082] [ 71.239249][ T5083] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 71.239249][ T5083] [ 71.246864][ T5082] ERROR: (device loop1): remounting filesystem as read-only [pid 5082] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./9/binderfs" [pid 5083] <... rmdir resumed>) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5082] getdents64(3, [pid 5083] mkdir("./9", 0777 [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./9" [pid 5083] <... mkdir resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] mkdir("./10", 0777 [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5082] <... mkdir resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./8/bus") = 0 [pid 5081] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./8/binderfs") = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./8") = 0 [pid 5081] mkdir("./9", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5211] <... write resumed>) = 16777216 [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(3 [pid 5211] munmap(0x7f827a600000, 138412032 [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5216 attached [pid 5216] set_robust_list(0x555571ec36a0, 24 [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5216 [pid 5216] <... set_robust_list resumed>) = 0 [pid 5216] chdir("./9") = 0 [pid 5216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5216] setpgid(0, 0) = 0 [pid 5216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5216] write(3, "1000", 4) = 4 [pid 5216] close(3) = 0 [pid 5216] symlink("/dev/binderfs", "./binderfs" [pid 5211] <... munmap resumed>) = 0 [pid 5211] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5216] <... symlink resumed>) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5216] write(1, "executing program\n", 18executing program [pid 5082] close(3 [pid 5216] <... write resumed>) = 18 [pid 5082] <... close resumed>) = 0 [pid 5216] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5216] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5217 attached [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5217 [pid 5216] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5217] set_robust_list(0x555571ec36a0, 24 [pid 5216] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5217] <... set_robust_list resumed>) = 0 [pid 5216] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5217] chdir("./10") = 0 [pid 5211] <... openat resumed>) = 4 [pid 5211] ioctl(4, LOOP_SET_FD, 3 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5216] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5211] <... ioctl resumed>) = 0 [pid 5217] <... prctl resumed>) = 0 [pid 5216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5217] setpgid(0, 0 [pid 5216] <... mmap resumed>) = 0x7f8282aa3000 [pid 5216] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5217] <... setpgid resumed>) = 0 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5216] <... mprotect resumed>) = 0 [pid 5211] close(3) = 0 [pid 5211] close(4 [pid 5217] <... openat resumed>) = 3 [pid 5216] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5211] <... close resumed>) = 0 [pid 5216] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5217] write(3, "1000", 4 [pid 5216] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5217] <... write resumed>) = 4 ./strace-static-x86_64: Process 5218 attached [pid 5217] close(3 [pid 5213] <... write resumed>) = 16777216 [pid 5211] mkdir("./bus", 0777 [pid 5218] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5217] <... close resumed>) = 0 [pid 5216] <... clone3 resumed> => {parent_tid=[5218]}, 88) = 5218 [pid 5211] <... mkdir resumed>) = 0 [pid 5217] symlink("/dev/binderfs", "./binderfs" [pid 5216] rt_sigprocmask(SIG_SETMASK, [], [pid 5213] munmap(0x7f827a600000, 138412032 [pid 5216] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5211] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5216] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] <... symlink resumed>) = 0 [pid 5216] <... futex resumed>) = 0 [pid 5216] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}executing program [pid 5217] write(1, "executing program\n", 18) = 18 [pid 5217] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... rseq resumed>) = 0 [pid 5218] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5217] <... futex resumed>) = 0 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], [pid 5217] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5218] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5217] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5217] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5218] memfd_create("syzkaller", 0 [pid 5217] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 71.669214][ T5211] loop3: detected capacity change from 0 to 32768 [pid 5218] <... memfd_create resumed>) = 3 [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5211] <... mount resumed>) = 0 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5217] <... mmap resumed>) = 0x7f8282aa3000 [pid 5211] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5218] <... mmap resumed>) = 0x7f827a600000 [pid 5217] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5211] <... openat resumed>) = 3 [pid 5211] chdir("./bus" [pid 5217] <... mprotect resumed>) = 0 [pid 5211] <... chdir resumed>) = 0 [pid 5211] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5211] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5210] <... futex resumed>) = 0 [pid 5211] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5210] <... futex resumed>) = 0 [pid 5211] unlink("./file1" [pid 5210] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5217] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5217] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5213] <... munmap resumed>) = 0 [pid 5217] <... clone3 resumed> => {parent_tid=[5219]}, 88) = 5219 [pid 5213] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5217] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5219 attached NULL, 8) = 0 [pid 5213] <... openat resumed>) = 4 [pid 5217] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] ioctl(4, LOOP_SET_FD, 3 [pid 5219] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5219] set_robust_list(0x7f8282ac39a0, 24 [pid 5217] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5213] <... ioctl resumed>) = 0 [pid 5213] close(3) = 0 [pid 5213] close(4) = 0 [pid 5219] <... set_robust_list resumed>) = 0 [pid 5213] mkdir("./bus", 0777 [pid 5219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5213] <... mkdir resumed>) = 0 [pid 5219] memfd_create("syzkaller", 0) = 3 [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5213] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5210] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 71.734802][ T5211] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 71.734802][ T5211] [ 71.761710][ T5213] loop4: detected capacity change from 0 to 32768 [ 71.762303][ T5211] ERROR: (device loop3): remounting filesystem as read-only [pid 5210] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5210] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5210] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5211] <... unlink resumed>) = -1 EIO (Input/output error) ./strace-static-x86_64: Process 5220 attached [pid 5211] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... clone3 resumed> => {parent_tid=[5220]}, 88) = 5220 [pid 5211] <... futex resumed>) = 0 [pid 5210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5210] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5210] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5220] set_robust_list(0x7f8282aa29a0, 24 [pid 5211] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] <... set_robust_list resumed>) = 0 [pid 5220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5220] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5213] <... mount resumed>) = 0 [pid 5213] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5081] <... ioctl resumed>) = 0 [ 71.809087][ T5211] ERROR: (device loop3): jfs_unlink: [ 71.809087][ T5211] [ 71.846518][ T5220] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 71.846518][ T5220] [pid 5081] close(3 [pid 5220] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5213] chdir("./bus" [pid 5210] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5210] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... chdir resumed>) = 0 [pid 5213] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5211] <... futex resumed>) = 0 [pid 5210] <... futex resumed>) = 1 [pid 5213] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5211] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5210] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] <... open resumed>) = -1 EFAULT (Bad address) [pid 5081] <... close resumed>) = 0 [pid 5220] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5220] <... futex resumed>) = 0 [pid 5211] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 1 ./strace-static-x86_64: Process 5221 attached [pid 5220] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] <... futex resumed>) = 0 [pid 5211] <... futex resumed>) = 1 [pid 5210] <... futex resumed>) = 0 [pid 5221] set_robust_list(0x555571ec36a0, 24 [pid 5211] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] exit_group(0 [pid 5212] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... set_robust_list resumed>) = 0 [pid 5220] <... futex resumed>) = ? [pid 5213] <... futex resumed>) = 0 [pid 5212] <... futex resumed>) = 1 [pid 5211] <... futex resumed>) = ? [pid 5210] <... exit_group resumed>) = ? [pid 5081] <... clone resumed>, child_tidptr=0x555571ec3690) = 5221 [pid 5221] chdir("./9" [pid 5220] +++ exited with 0 +++ [pid 5213] unlink("./file1" [pid 5212] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5211] +++ exited with 0 +++ [pid 5210] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5210, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5221] <... chdir resumed>) = 0 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5221] setpgid(0, 0) = 0 [pid 5084] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] <... openat resumed>) = 3 [pid 5084] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5221] write(3, "1000", 4 [pid 5084] newfstatat(3, "", [pid 5221] <... write resumed>) = 4 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5221] close(3 [pid 5084] getdents64(3, [pid 5221] <... close resumed>) = 0 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5221] symlink("/dev/binderfs", "./binderfs" [pid 5084] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5221] <... symlink resumed>) = 0 [pid 5221] write(1, "executing program\n", 18executing program [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5221] <... write resumed>) = 18 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] newfstatat(AT_FDCWD, "./8/bus", [pid 5221] <... futex resumed>) = 0 [ 71.904630][ T5213] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 71.904630][ T5213] [ 71.940958][ T5213] ERROR: (device loop4): remounting filesystem as read-only [pid 5221] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5221] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5084] umount2("./8/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5221] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5221] <... mmap resumed>) = 0x7f8282aa3000 [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5212] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] newfstatat(4, "", [pid 5221] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5212] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5221] <... mprotect resumed>) = 0 [pid 5212] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] getdents64(4, [pid 5212] <... mmap resumed>) = 0x7f8282a82000 [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5213] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5221] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5212] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4 [pid 5212] <... mprotect resumed>) = 0 [pid 5221] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5084] <... close resumed>) = 0 [pid 5221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5212] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] rmdir("./8/bus" [pid 5213] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5213] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5222 attached [pid 5221] <... clone3 resumed> => {parent_tid=[5222]}, 88) = 5222 [pid 5084] <... rmdir resumed>) = 0 [pid 5221] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5222] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5221] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] <... rseq resumed>) = 0 [pid 5222] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5084] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5222] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5212] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5222] memfd_create("syzkaller", 0 [pid 5084] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5222] <... memfd_create resumed>) = 3 [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] unlink("./8/binderfs" [pid 5222] <... mmap resumed>) = 0x7f827a600000 [pid 5212] <... clone3 resumed> => {parent_tid=[5223]}, 88) = 5223 [pid 5212] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5212] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... unlink resumed>) = 0 [pid 5212] <... futex resumed>) = 0 [pid 5221] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5212] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5223 attached [pid 5084] getdents64(3, [pid 5223] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5223] <... rseq resumed>) = 0 [pid 5084] close(3 [pid 5223] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5223] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./8" [pid 5223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5223] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5084] <... rmdir resumed>) = 0 [pid 5084] mkdir("./9", 0777) = 0 [pid 5223] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5223] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5212] <... futex resumed>) = 0 [pid 5223] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5213] <... futex resumed>) = 0 [pid 5212] <... futex resumed>) = 1 [pid 5213] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5212] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5213] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5213] <... futex resumed>) = 0 [pid 5212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5213] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5212] exit_group(0 [pid 5223] <... futex resumed>) = ? [pid 5213] <... futex resumed>) = ? [pid 5212] <... exit_group resumed>) = ? [pid 5223] +++ exited with 0 +++ [pid 5213] +++ exited with 0 +++ [pid 5212] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5212, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [ 71.962453][ T5213] ERROR: (device loop4): jfs_unlink: [ 71.962453][ T5213] [ 71.997568][ T5223] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 71.997568][ T5223] [pid 5085] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, [pid 5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5085] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./9/bus") = 0 [pid 5085] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./9/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./9") = 0 [pid 5085] mkdir("./10", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5218] <... write resumed>) = 16777216 [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5224 attached [pid 5224] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5224] chdir("./9" [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5224 [pid 5224] <... chdir resumed>) = 0 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5224] setpgid(0, 0 [pid 5218] munmap(0x7f827a600000, 138412032 [pid 5224] <... setpgid resumed>) = 0 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5224] write(3, "1000", 4) = 4 [pid 5224] close(3) = 0 [pid 5224] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5224] write(1, "executing program\n", 18) = 18 [pid 5224] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5224] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5224] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5224] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5225 attached => {parent_tid=[5225]}, 88) = 5225 [pid 5085] <... ioctl resumed>) = 0 [pid 5225] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5225] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5225] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] close(3 [pid 5225] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5225] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5224] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = 0 [pid 5224] <... futex resumed>) = 1 [pid 5085] <... close resumed>) = 0 [pid 5224] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] memfd_create("syzkaller", 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5225] <... memfd_create resumed>) = 3 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5226 attached ) = 0x7f827a600000 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5226 [pid 5226] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5226] chdir("./10" [pid 5218] <... munmap resumed>) = 0 [pid 5226] <... chdir resumed>) = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5226] setpgid(0, 0 [pid 5219] <... write resumed>) = 16777216 [pid 5218] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5226] <... setpgid resumed>) = 0 [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5218] <... openat resumed>) = 4 [pid 5226] <... openat resumed>) = 3 [pid 5218] ioctl(4, LOOP_SET_FD, 3 [pid 5226] write(3, "1000", 4) = 4 [pid 5219] munmap(0x7f827a600000, 138412032 [pid 5218] <... ioctl resumed>) = 0 [pid 5226] close(3) = 0 [pid 5226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5226] write(1, "executing program\n", 18executing program ) = 18 [pid 5226] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5226] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5218] close(3 [pid 5226] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5218] <... close resumed>) = 0 [pid 5226] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5218] close(4 [pid 5226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5218] <... close resumed>) = 0 [pid 5226] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5218] mkdir("./bus", 0777 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5218] <... mkdir resumed>) = 0 [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5218] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity"./strace-static-x86_64: Process 5227 attached [pid 5226] <... clone3 resumed> => {parent_tid=[5227]}, 88) = 5227 [pid 5219] <... munmap resumed>) = 0 [pid 5227] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], [pid 5227] <... rseq resumed>) = 0 [pid 5226] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 72.477222][ T5218] loop2: detected capacity change from 0 to 32768 [pid 5227] set_robust_list(0x7f8282ac39a0, 24 [pid 5226] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5218] <... mount resumed>) = 0 [pid 5227] <... set_robust_list resumed>) = 0 [pid 5226] <... futex resumed>) = 0 [pid 5218] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5227] rt_sigprocmask(SIG_SETMASK, [], [pid 5226] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5219] <... openat resumed>) = 4 [pid 5227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] <... openat resumed>) = 3 [pid 5219] ioctl(4, LOOP_SET_FD, 3 [pid 5227] memfd_create("syzkaller", 0) = 3 [pid 5218] chdir("./bus" [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5218] <... chdir resumed>) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5227] <... mmap resumed>) = 0x7f827a600000 [pid 5218] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5218] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5218] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] <... futex resumed>) = 0 [pid 5218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5216] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] unlink("./file1" [pid 5216] <... futex resumed>) = 0 [pid 5216] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] <... ioctl resumed>) = 0 [pid 5219] close(3) = 0 [pid 5219] close(4) = 0 [pid 5219] mkdir("./bus", 0777) = 0 [ 72.552937][ T5219] loop1: detected capacity change from 0 to 32768 [ 72.580035][ T5218] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 72.580035][ T5218] [pid 5219] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5216] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5216] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5216] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5216] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5216] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5228]}, 88) = 5228 [pid 5216] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5216] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5216] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5228 attached [pid 5228] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5228] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5228] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5228] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5228] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5216] <... futex resumed>) = 0 [pid 5228] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5216] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] <... open resumed>) = -1 EFAULT (Bad address) [pid 5216] <... futex resumed>) = 0 [pid 5228] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... futex resumed>) = 0 [pid 5216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5219] <... mount resumed>) = 0 [pid 5218] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5219] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5218] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] exit_group(0 [pid 5219] <... openat resumed>) = 3 [pid 5228] <... futex resumed>) = ? [pid 5219] chdir("./bus" [pid 5218] <... futex resumed>) = ? [pid 5216] <... exit_group resumed>) = ? [pid 5228] +++ exited with 0 +++ [pid 5219] <... chdir resumed>) = 0 [pid 5218] +++ exited with 0 +++ [pid 5216] +++ exited with 0 +++ [pid 5219] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5219] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5216, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=25 /* 0.25 s */} --- [pid 5219] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5219] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [ 72.607226][ T5218] ERROR: (device loop2): remounting filesystem as read-only [ 72.639537][ T5218] ERROR: (device loop2): jfs_unlink: [ 72.639537][ T5218] [ 72.648114][ T5218] ERROR: (device loop2): remounting filesystem as read-only [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5217] <... futex resumed>) = 0 [pid 5083] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5219] unlink("./file1" [pid 5217] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5217] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5217] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5217] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5217] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5229 attached => {parent_tid=[5229]}, 88) = 5229 [pid 5229] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5217] rt_sigprocmask(SIG_SETMASK, [], [pid 5229] <... rseq resumed>) = 0 [pid 5217] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5229] set_robust_list(0x7f8282aa29a0, 24 [pid 5217] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... set_robust_list resumed>) = 0 [pid 5217] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5229] rt_sigprocmask(SIG_SETMASK, [], [pid 5217] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 72.699472][ T5219] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 72.699472][ T5219] [ 72.714455][ T5083] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 72.714455][ T5083] [ 72.714637][ T5219] ERROR: (device loop1): remounting filesystem as read-only [pid 5229] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5083] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./9/bus") = 0 [pid 5083] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./9/binderfs") = 0 [pid 5219] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5083] getdents64(3, [pid 5229] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5219] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5229] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = 0 [pid 5083] close(3 [pid 5229] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5229] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] rmdir("./9" [pid 5217] <... futex resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5217] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5219] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5219] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] mkdir("./10", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5222] <... write resumed>) = 16777216 [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [ 72.770933][ T5219] ERROR: (device loop1): jfs_unlink: [ 72.770933][ T5219] [pid 5222] munmap(0x7f827a600000, 138412032 [pid 5219] <... futex resumed>) = 1 [pid 5217] <... futex resumed>) = 0 [pid 5217] exit_group(0 [pid 5229] <... futex resumed>) = ? [pid 5217] <... exit_group resumed>) = ? [pid 5229] +++ exited with 0 +++ [pid 5219] +++ exited with 0 +++ [pid 5217] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5082] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5222] <... munmap resumed>) = 0 [pid 5222] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5222] ioctl(4, LOOP_SET_FD, 3 [pid 5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5222] <... ioctl resumed>) = 0 [pid 5222] close(3) = 0 [pid 5222] close(4) = 0 [pid 5222] mkdir("./bus", 0777) = 0 [ 72.837717][ T5082] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 72.837717][ T5082] [ 72.856512][ T5222] loop0: detected capacity change from 0 to 32768 [ 72.877760][ T5082] ERROR: (device loop1): remounting filesystem as read-only [pid 5222] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5222] <... mount resumed>) = 0 [pid 5222] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5222] chdir("./bus") = 0 [pid 5222] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5222] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5222] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5221] <... futex resumed>) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5221] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5222] <... futex resumed>) = 0 [pid 5221] <... futex resumed>) = 1 [pid 5082] getdents64(4, [pid 5222] unlink("./file1" [pid 5221] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./10/bus") = 0 [pid 5082] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./10/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./10") = 0 [pid 5082] mkdir("./11", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 72.948008][ T5222] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 72.948008][ T5222] [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5221] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5221] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5221] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5221] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5230]}, 88) = 5230 [pid 5221] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5221] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5221] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5230 attached [pid 5230] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5230] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5230] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5230] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5230] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5221] <... futex resumed>) = 0 [pid 5221] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 72.999569][ T5222] ERROR: (device loop0): remounting filesystem as read-only [ 73.021494][ T5222] ERROR: (device loop0): jfs_unlink: [ 73.021494][ T5222] [pid 5221] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5230] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5221] <... futex resumed>) = 0 [pid 5230] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5222] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5222] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5221] exit_group(0 [pid 5230] <... futex resumed>) = ? [pid 5222] <... futex resumed>) = ? [pid 5221] <... exit_group resumed>) = ? [pid 5230] +++ exited with 0 +++ [pid 5222] +++ exited with 0 +++ [pid 5221] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5081] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5225] <... write resumed>) = 16777216 [pid 5225] munmap(0x7f827a600000, 138412032 [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./9/bus") = 0 [pid 5081] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 73.048246][ T5222] ERROR: (device loop0): remounting filesystem as read-only [ 73.077791][ T5081] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 73.077791][ T5081] [pid 5081] unlink("./9/binderfs") = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./9") = 0 [pid 5081] mkdir("./10", 0777 [pid 5225] <... munmap resumed>) = 0 [pid 5225] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... ioctl resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5083] close(3 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5225] <... openat resumed>) = 4 [pid 5081] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5225] ioctl(4, LOOP_SET_FD, 3 [pid 5083] <... close resumed>) = 0 [pid 5225] <... ioctl resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5231 attached [pid 5231] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5231] chdir("./10") = 0 [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5231] setpgid(0, 0) = 0 [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5231 [pid 5231] write(3, "1000", 4 [pid 5225] close(3 [pid 5231] <... write resumed>) = 4 [pid 5231] close(3) = 0 [pid 5225] <... close resumed>) = 0 [pid 5231] symlink("/dev/binderfs", "./binderfs" [pid 5225] close(4 [pid 5231] <... symlink resumed>) = 0 [pid 5225] <... close resumed>) = 0 executing program [pid 5231] write(1, "executing program\n", 18 [pid 5225] mkdir("./bus", 0777 [pid 5231] <... write resumed>) = 18 [pid 5231] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 73.169414][ T5225] loop3: detected capacity change from 0 to 32768 [pid 5231] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5225] <... mkdir resumed>) = 0 [pid 5231] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5231] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5225] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5231] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5225] <... mount resumed>) = 0 [pid 5225] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5225] chdir("./bus") = 0 [pid 5231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5225] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5231] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5225] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5225] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5224] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5232 attached [pid 5231] <... clone3 resumed> => {parent_tid=[5232]}, 88) = 5232 [pid 5225] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5231] rt_sigprocmask(SIG_SETMASK, [], [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5224] <... futex resumed>) = 0 [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5225] unlink("./file1" [pid 5224] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5232] <... rseq resumed>) = 0 [pid 5232] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5232] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5232] memfd_create("syzkaller", 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5232] <... memfd_create resumed>) = 3 [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5224] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5224] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5224] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5224] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5224] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5233]}, 88) = 5233 ./strace-static-x86_64: Process 5233 attached [pid 5224] rt_sigprocmask(SIG_SETMASK, [], [pid 5233] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5233] <... rseq resumed>) = 0 [pid 5224] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] set_robust_list(0x7f8282aa29a0, 24 [pid 5224] <... futex resumed>) = 0 [pid 5233] <... set_robust_list resumed>) = 0 [pid 5224] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5233] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5082] close(3) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5234 attached [pid 5227] <... write resumed>) = 16777216 [pid 5234] set_robust_list(0x555571ec36a0, 24 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5234 [pid 5234] <... set_robust_list resumed>) = 0 [ 73.251618][ T5225] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 73.251618][ T5225] [ 73.287627][ T5225] ERROR: (device loop3): remounting filesystem as read-only [pid 5234] chdir("./11" [pid 5227] munmap(0x7f827a600000, 138412032 [pid 5234] <... chdir resumed>) = 0 [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5227] <... munmap resumed>) = 0 [pid 5225] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5224] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5234] setpgid(0, 0 [pid 5227] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5225] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... setpgid resumed>) = 0 [pid 5227] <... openat resumed>) = 4 [pid 5225] <... futex resumed>) = 0 [pid 5224] <... futex resumed>) = 0 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5227] ioctl(4, LOOP_SET_FD, 3 [pid 5225] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5224] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5234] <... openat resumed>) = 3 [pid 5233] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5225] <... open resumed>) = -1 EFAULT (Bad address) [pid 5233] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5233] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] write(3, "1000", 4 [pid 5227] <... ioctl resumed>) = 0 [pid 5225] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... write resumed>) = 4 [pid 5227] close(3 [pid 5225] <... futex resumed>) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5234] close(3 [pid 5227] <... close resumed>) = 0 [pid 5225] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] exit_group(0 [pid 5234] <... close resumed>) = 0 [pid 5233] <... futex resumed>) = ? [pid 5227] close(4 [pid 5225] <... futex resumed>) = ? [pid 5224] <... exit_group resumed>) = ? [pid 5234] symlink("/dev/binderfs", "./binderfs" [pid 5233] +++ exited with 0 +++ [pid 5225] +++ exited with 0 +++ [pid 5224] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5234] <... symlink resumed>) = 0 [pid 5227] <... close resumed>) = 0 [pid 5227] mkdir("./bus", 0777 [pid 5084] <... restart_syscall resumed>) = 0 [pid 5084] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5227] <... mkdir resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5234] write(1, "executing program\n", 18 [pid 5227] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5084] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", executing program [pid 5234] <... write resumed>) = 18 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5234] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, [pid 5234] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5234] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5084] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5234] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5234] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5234] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [ 73.328992][ T5225] ERROR: (device loop3): jfs_unlink: [ 73.328992][ T5225] [ 73.363185][ T5227] loop4: detected capacity change from 0 to 32768 [pid 5234] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5227] <... mount resumed>) = 0 [pid 5234] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5227] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5234] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5227] <... openat resumed>) = 3 [pid 5234] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5227] chdir("./bus"./strace-static-x86_64: Process 5235 attached ) = 0 [pid 5235] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5234] <... clone3 resumed> => {parent_tid=[5235]}, 88) = 5235 [pid 5227] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5234] rt_sigprocmask(SIG_SETMASK, [], [pid 5235] <... rseq resumed>) = 0 [pid 5227] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] set_robust_list(0x7f8282ac39a0, 24 [pid 5234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5227] <... futex resumed>) = 1 [pid 5226] <... futex resumed>) = 0 [pid 5235] <... set_robust_list resumed>) = 0 [pid 5234] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... futex resumed>) = 0 [pid 5227] unlink("./file1" [pid 5226] <... futex resumed>) = 0 [pid 5234] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5226] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5235] memfd_create("syzkaller", 0) = 3 [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [ 73.393017][ T5084] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 73.393017][ T5084] [ 73.414403][ T5227] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 73.414403][ T5227] [ 73.422888][ T5084] ERROR: (device loop3): remounting filesystem as read-only [pid 5081] <... ioctl resumed>) = 0 [ 73.440720][ T5227] ERROR: (device loop4): remounting filesystem as read-only [pid 5226] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] close(3 [pid 5226] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] <... close resumed>) = 0 [pid 5226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5226] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5226] <... mprotect resumed>) = 0 [pid 5226] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5081] <... clone resumed>, child_tidptr=0x555571ec3690) = 5236 ./strace-static-x86_64: Process 5237 attached [pid 5237] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5226] <... clone3 resumed> => {parent_tid=[5237]}, 88) = 5237 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5226] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5236 attached [pid 5237] <... rseq resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5237] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5237] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5237] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5236] set_robust_list(0x555571ec36a0, 24 [pid 5226] <... futex resumed>) = 0 [pid 5237] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... set_robust_list resumed>) = 0 [pid 5226] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] <... futex resumed>) = 0 [pid 5237] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5236] chdir("./10" [pid 5226] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./9/bus", [pid 5237] <... futex resumed>) = 0 [pid 5226] <... futex resumed>) = 1 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5237] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5226] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./9/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5237] <... open resumed>) = -1 EFAULT (Bad address) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5237] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5237] <... futex resumed>) = 0 [pid 5226] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... openat resumed>) = 4 [pid 5237] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./9/bus") = 0 [pid 5236] <... chdir resumed>) = 0 [pid 5084] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5236] setpgid(0, 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5236] <... setpgid resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./9/binderfs" [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... unlink resumed>) = 0 [pid 5084] getdents64(3, [pid 5236] <... openat resumed>) = 3 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3 [pid 5236] write(3, "1000", 4 [pid 5084] <... close resumed>) = 0 [pid 5236] <... write resumed>) = 4 [pid 5084] rmdir("./9" [pid 5236] close(3 [pid 5084] <... rmdir resumed>) = 0 executing program [pid 5084] mkdir("./10", 0777 [pid 5236] <... close resumed>) = 0 [pid 5227] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5084] <... mkdir resumed>) = 0 [pid 5236] symlink("/dev/binderfs", "./binderfs" [pid 5227] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5236] <... symlink resumed>) = 0 [pid 5227] <... futex resumed>) = 0 [pid 5236] write(1, "executing program\n", 18 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5236] <... write resumed>) = 18 [pid 5227] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5226] exit_group(0 [pid 5237] <... futex resumed>) = ? [pid 5236] <... futex resumed>) = 0 [pid 5227] <... futex resumed>) = ? [pid 5226] <... exit_group resumed>) = ? [pid 5237] +++ exited with 0 +++ [pid 5236] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5227] +++ exited with 0 +++ [pid 5236] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5226] +++ exited with 0 +++ [pid 5236] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=33 /* 0.33 s */} --- [ 73.460980][ T5227] ERROR: (device loop4): jfs_unlink: [ 73.460980][ T5227] [ 73.503736][ T5227] ERROR: (device loop4): remounting filesystem as read-only [pid 5236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... restart_syscall resumed>) = 0 [pid 5236] <... mmap resumed>) = 0x7f8282aa3000 [pid 5236] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5085] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5236] <... mprotect resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5236] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5085] newfstatat(3, "", ./strace-static-x86_64: Process 5238 attached [pid 5236] <... clone3 resumed> => {parent_tid=[5238]}, 88) = 5238 [pid 5238] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5236] rt_sigprocmask(SIG_SETMASK, [], [pid 5238] <... rseq resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5238] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5238] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5236] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = 0 [pid 5236] <... futex resumed>) = 1 [pid 5236] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5238] memfd_create("syzkaller", 0) = 3 [pid 5238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 73.581300][ T5085] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 73.581300][ T5085] [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./10/bus") = 0 [pid 5085] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./10/binderfs") = 0 [pid 5085] getdents64(3, [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./10") = 0 [pid 5085] mkdir("./11", 0777) = 0 [pid 5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5239 ./strace-static-x86_64: Process 5239 attached [pid 5239] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5239] chdir("./10") = 0 [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5239] setpgid(0, 0) = 0 [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5239] write(3, "1000", 4) = 4 [pid 5239] close(3) = 0 [pid 5239] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5239] write(1, "executing program\n", 18) = 18 [pid 5239] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5239] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5239] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5239] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5239] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5240]}, 88) = 5240 [pid 5239] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5239] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5240 attached [pid 5239] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5240] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5240] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5240] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5240] memfd_create("syzkaller", 0) = 3 [pid 5240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5241 ./strace-static-x86_64: Process 5241 attached [pid 5241] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5241] chdir("./11") = 0 [pid 5241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5241] setpgid(0, 0) = 0 [pid 5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5241] write(3, "1000", 4) = 4 [pid 5241] close(3) = 0 [pid 5241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5241] write(1, "executing program\n", 18executing program ) = 18 [pid 5241] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5241] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5241] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5241] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5238] <... write resumed>) = 16777216 [pid 5241] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5242]}, 88) = 5242 [pid 5241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5241] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5241] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5242 attached [pid 5238] munmap(0x7f827a600000, 138412032 [pid 5242] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5242] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5242] memfd_create("syzkaller", 0) = 3 [pid 5242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5235] <... write resumed>) = 16777216 [pid 5235] munmap(0x7f827a600000, 138412032 [pid 5238] <... munmap resumed>) = 0 [pid 5235] <... munmap resumed>) = 0 [pid 5232] <... write resumed>) = 16777216 [pid 5238] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5235] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5232] munmap(0x7f827a600000, 138412032 [pid 5238] <... openat resumed>) = 4 [pid 5235] <... openat resumed>) = 4 [pid 5235] ioctl(4, LOOP_SET_FD, 3 [pid 5238] ioctl(4, LOOP_SET_FD, 3 [pid 5235] <... ioctl resumed>) = 0 [pid 5238] <... ioctl resumed>) = 0 [pid 5235] close(3 [pid 5238] close(3 [pid 5235] <... close resumed>) = 0 [pid 5232] <... munmap resumed>) = 0 [pid 5238] <... close resumed>) = 0 [pid 5235] close(4 [pid 5238] close(4) = 0 [pid 5235] <... close resumed>) = 0 [pid 5238] mkdir("./bus", 0777 [pid 5235] mkdir("./bus", 0777 [pid 5240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5238] <... mkdir resumed>) = 0 [pid 5235] <... mkdir resumed>) = 0 [pid 5238] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [ 74.169364][ T5235] loop1: detected capacity change from 0 to 32768 [ 74.181273][ T5238] loop0: detected capacity change from 0 to 32768 [pid 5235] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5232] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5232] ioctl(4, LOOP_SET_FD, 3 [pid 5238] <... mount resumed>) = 0 [pid 5235] <... mount resumed>) = 0 [pid 5238] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5235] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5238] <... openat resumed>) = 3 [pid 5238] chdir("./bus" [pid 5235] <... openat resumed>) = 3 [pid 5238] <... chdir resumed>) = 0 [pid 5235] chdir("./bus" [pid 5238] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5235] <... chdir resumed>) = 0 [pid 5238] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5235] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5238] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5238] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5235] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... ioctl resumed>) = 0 [pid 5238] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 1 [pid 5234] <... futex resumed>) = 0 [pid 5232] close(3 [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] <... futex resumed>) = 0 [pid 5235] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] unlink("./file1" [pid 5236] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... close resumed>) = 0 [pid 5232] close(4) = 0 [pid 5232] mkdir("./bus", 0777) = 0 [pid 5232] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [ 74.231757][ T5232] loop2: detected capacity change from 0 to 32768 [ 74.261694][ T5238] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 74.261694][ T5238] [pid 5232] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5234] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5234] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... openat resumed>) = 3 [pid 5232] chdir("./bus") = 0 [pid 5232] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5232] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5231] <... futex resumed>) = 0 [pid 5232] unlink("./file1" [pid 5231] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 0 [pid 5231] <... futex resumed>) = 0 [pid 5231] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] unlink("./file1" [pid 5236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5234] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5236] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5234] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5236] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5236] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5234] <... futex resumed>) = 0 [pid 5236] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5234] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5243 attached [ 74.277438][ T5232] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 74.277438][ T5232] [ 74.300428][ T5235] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 74.300428][ T5235] [ 74.302800][ T5232] ERROR: (device loop2): remounting filesystem as read-only [ 74.311685][ T5238] ERROR: (device loop0): remounting filesystem as read-only [pid 5243] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5236] <... clone3 resumed> => {parent_tid=[5243]}, 88) = 5243 [pid 5234] <... mmap resumed>) = 0x7f8282a82000 [pid 5231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5231] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5231] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5244]}, 88) = 5244 [pid 5231] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5244 attached [pid 5243] <... rseq resumed>) = 0 [pid 5236] rt_sigprocmask(SIG_SETMASK, [], [pid 5234] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5231] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5243] set_robust_list(0x7f8282aa29a0, 24 [pid 5242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5238] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5235] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5234] <... mprotect resumed>) = 0 [pid 5232] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5244] <... rseq resumed>) = 0 [pid 5243] <... set_robust_list resumed>) = 0 [pid 5238] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5232] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] set_robust_list(0x7f8282aa29a0, 24 [pid 5243] rt_sigprocmask(SIG_SETMASK, [], [pid 5238] <... futex resumed>) = 0 [pid 5236] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = 0 [pid 5234] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5232] <... futex resumed>) = 0 [pid 5244] <... set_robust_list resumed>) = 0 [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5238] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5232] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] rt_sigprocmask(SIG_SETMASK, [], [ 74.333846][ T5235] ERROR: (device loop1): remounting filesystem as read-only [ 74.337803][ T5232] ERROR: (device loop2): jfs_unlink: [ 74.337803][ T5232] [ 74.349097][ T5238] ERROR: (device loop0): jfs_unlink: [ 74.349097][ T5238] [ 74.357943][ T5235] ERROR: (device loop1): jfs_unlink: [ 74.357943][ T5235] [pid 5243] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5245 attached [pid 5244] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5234] <... clone3 resumed> => {parent_tid=[5245]}, 88) = 5245 [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5231] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5244] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5243] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5234] rt_sigprocmask(SIG_SETMASK, [], [pid 5232] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5245] <... rseq resumed>) = 0 [pid 5232] <... open resumed>) = -1 EFAULT (Bad address) [pid 5245] set_robust_list(0x7f8282aa29a0, 24 [pid 5234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5232] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... set_robust_list resumed>) = 0 [pid 5245] rt_sigprocmask(SIG_SETMASK, [], [pid 5234] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... futex resumed>) = 1 [pid 5231] <... futex resumed>) = 0 [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] <... futex resumed>) = 0 [pid 5232] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5244] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5234] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] exit_group(0) = ? [pid 5236] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... futex resumed>) = ? [pid 5244] +++ exited with 0 +++ [pid 5232] +++ exited with 0 +++ [pid 5231] +++ exited with 0 +++ [pid 5243] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] <... futex resumed>) = 0 [pid 5236] <... futex resumed>) = 1 [pid 5238] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5236] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=32 /* 0.32 s */} --- [pid 5238] <... open resumed>) = -1 EFAULT (Bad address) [pid 5245] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5238] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5245] <... futex resumed>) = 1 [pid 5238] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5234] <... futex resumed>) = 0 [pid 5083] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5245] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] exit_group(0 [pid 5234] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] <... futex resumed>) = ? [pid 5238] <... futex resumed>) = ? [pid 5236] <... exit_group resumed>) = ? [pid 5235] <... futex resumed>) = 0 [pid 5234] <... futex resumed>) = 1 [pid 5083] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5243] +++ exited with 0 +++ [pid 5238] +++ exited with 0 +++ [pid 5235] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5234] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 3 [pid 5235] <... open resumed>) = -1 EFAULT (Bad address) [ 74.405248][ T5243] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 74.405248][ T5243] [ 74.416871][ T5244] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 74.416871][ T5244] [ 74.442173][ T5245] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 74.442173][ T5245] [pid 5235] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] newfstatat(3, "", [pid 5236] +++ exited with 0 +++ [pid 5235] <... futex resumed>) = 1 [pid 5234] <... futex resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5234] exit_group(0 [pid 5083] getdents64(3, [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5236, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5245] <... futex resumed>) = ? [pid 5234] <... exit_group resumed>) = ? [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5245] +++ exited with 0 +++ [pid 5083] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5081] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5235] +++ exited with 0 +++ [pid 5234] +++ exited with 0 +++ [pid 5081] <... openat resumed>) = 4 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=34 /* 0.34 s */} --- [pid 5081] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5082] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] rmdir("./10/bus" [pid 5082] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... rmdir resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5082] newfstatat(3, "", [pid 5081] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5082] getdents64(3, [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] unlink("./10/binderfs") = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./10") = 0 [pid 5081] mkdir("./11", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5242] <... write resumed>) = 16777216 [pid 5242] munmap(0x7f827a600000, 138412032 [pid 5240] <... write resumed>) = 16777216 [pid 5240] munmap(0x7f827a600000, 138412032 [pid 5242] <... munmap resumed>) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5240] <... munmap resumed>) = 0 [pid 5242] ioctl(4, LOOP_SET_FD, 3 [pid 5240] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5242] <... ioctl resumed>) = 0 [pid 5240] <... openat resumed>) = 4 [pid 5240] ioctl(4, LOOP_SET_FD, 3 [pid 5242] close(3 [pid 5081] <... ioctl resumed>) = 0 [pid 5242] <... close resumed>) = 0 [pid 5242] close(4 [pid 5081] close(3 [pid 5242] <... close resumed>) = 0 [pid 5240] <... ioctl resumed>) = 0 [pid 5240] close(3 [pid 5081] <... close resumed>) = 0 [pid 5242] mkdir("./bus", 0777 [pid 5240] <... close resumed>) = 0 [pid 5240] close(4) = 0 [pid 5240] mkdir("./bus", 0777 [pid 5242] <... mkdir resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] <... mkdir resumed>) = 0 [pid 5240] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity"./strace-static-x86_64: Process 5246 attached [pid 5242] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5081] <... clone resumed>, child_tidptr=0x555571ec3690) = 5246 [pid 5246] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5246] chdir("./11") = 0 [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 74.689678][ T5242] loop4: detected capacity change from 0 to 32768 [ 74.699880][ T5240] loop3: detected capacity change from 0 to 32768 [pid 5246] setpgid(0, 0) = 0 [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5246] write(3, "1000", 4) = 4 [pid 5246] close(3) = 0 [pid 5240] <... mount resumed>) = 0 [pid 5240] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5246] symlink("/dev/binderfs", "./binderfs" [pid 5242] <... mount resumed>) = 0 [pid 5240] <... openat resumed>) = 3 [pid 5246] <... symlink resumed>) = 0 [pid 5242] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5240] chdir("./bus" [pid 5242] <... openat resumed>) = 3 [pid 5242] chdir("./bus") = 0 executing program [pid 5240] <... chdir resumed>) = 0 [pid 5246] write(1, "executing program\n", 18 [pid 5240] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5246] <... write resumed>) = 18 [pid 5246] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5246] <... futex resumed>) = 0 [pid 5246] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5240] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5246] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5240] unlink("./file1" [pid 5239] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5239] <... futex resumed>) = 0 [pid 5242] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5239] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = 0 [pid 5246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5242] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5083] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] newfstatat(AT_FDCWD, "./10/bus", [pid 5242] <... futex resumed>) = 1 [pid 5246] <... mmap resumed>) = 0x7f8282aa3000 [pid 5242] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5241] <... futex resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5246] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5241] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5246] <... mprotect resumed>) = 0 [pid 5242] <... futex resumed>) = 0 [pid 5241] <... futex resumed>) = 1 [pid 5246] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5242] unlink("./file1" [pid 5241] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5246] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5247]}, 88) = 5247 [pid 5246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5246] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5246] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5247 attached [pid 5247] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5247] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5247] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5247] memfd_create("syzkaller", 0) = 3 [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5083] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [ 74.764493][ T5240] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 74.764493][ T5240] [ 74.781299][ T5242] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 74.781299][ T5242] [ 74.799979][ T5240] ERROR: (device loop3): remounting filesystem as read-only [pid 5083] close(4) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5239] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] rmdir("./10/bus" [pid 5082] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5239] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5239] <... futex resumed>) = 0 [pid 5241] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5241] <... futex resumed>) = 0 [pid 5239] <... mmap resumed>) = 0x7f8282a82000 [pid 5241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5239] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5241] <... mmap resumed>) = 0x7f8282a82000 [pid 5239] <... mprotect resumed>) = 0 [pid 5241] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5239] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5241] <... mprotect resumed>) = 0 [pid 5239] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5241] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5239] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5241] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5241] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5239] <... clone3 resumed> => {parent_tid=[5248]}, 88) = 5248 [pid 5241] <... clone3 resumed> => {parent_tid=[5249]}, 88) = 5249 [pid 5239] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5248 attached [pid 5242] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5241] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5239] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./11/bus", ./strace-static-x86_64: Process 5249 attached [pid 5248] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5242] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5248] <... rseq resumed>) = 0 [pid 5242] <... futex resumed>) = 0 [pid 5241] <... futex resumed>) = 0 [pid 5239] <... futex resumed>) = 0 [pid 5083] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5249] <... rseq resumed>) = 0 [pid 5248] set_robust_list(0x7f8282aa29a0, 24 [pid 5242] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5241] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5249] set_robust_list(0x7f8282aa29a0, 24 [pid 5248] <... set_robust_list resumed>) = 0 [pid 5249] <... set_robust_list resumed>) = 0 [pid 5248] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5249] rt_sigprocmask(SIG_SETMASK, [], [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5248] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5249] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5248] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5083] unlink("./10/binderfs" [pid 5082] <... openat resumed>) = 4 [pid 5248] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] newfstatat(4, "", [pid 5248] <... futex resumed>) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5239] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5248] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5239] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5082] getdents64(4, [pid 5248] <... open resumed>) = -1 EFAULT (Bad address) [pid 5239] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] getdents64(3, [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5248] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] getdents64(4, [pid 5248] <... futex resumed>) = 1 [pid 5239] <... futex resumed>) = 0 [pid 5083] close(3 [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] <... close resumed>) = 0 [pid 5082] close(4 [pid 5083] rmdir("./10" [pid 5082] <... close resumed>) = 0 [ 74.814428][ T5242] ERROR: (device loop4): remounting filesystem as read-only [ 74.819957][ T5240] ERROR: (device loop3): jfs_unlink: [ 74.819957][ T5240] [ 74.824984][ T5242] ERROR: (device loop4): jfs_unlink: [ 74.824984][ T5242] [ 74.847591][ T5249] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 74.847591][ T5249] [pid 5248] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... rmdir resumed>) = 0 [pid 5082] rmdir("./11/bus" [pid 5083] mkdir("./11", 0777 [pid 5249] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5240] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5082] <... rmdir resumed>) = 0 [pid 5249] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5240] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = 1 [pid 5241] <... futex resumed>) = 0 [pid 5240] <... futex resumed>) = 0 [pid 5239] exit_group(0 [pid 5083] <... mkdir resumed>) = 0 [pid 5082] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5249] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] <... futex resumed>) = ? [pid 5241] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... exit_group resumed>) = ? [pid 5248] +++ exited with 0 +++ [pid 5242] <... futex resumed>) = 0 [pid 5241] <... futex resumed>) = 1 [pid 5240] +++ exited with 0 +++ [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5241] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5242] <... open resumed>) = -1 EFAULT (Bad address) [pid 5242] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5242] <... futex resumed>) = 1 [pid 5241] <... futex resumed>) = 0 [pid 5082] unlink("./11/binderfs" [pid 5242] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5241] exit_group(0 [pid 5249] <... futex resumed>) = ? [pid 5242] <... futex resumed>) = ? [pid 5241] <... exit_group resumed>) = ? [pid 5083] <... openat resumed>) = 3 [pid 5082] <... unlink resumed>) = 0 [pid 5249] +++ exited with 0 +++ [pid 5242] +++ exited with 0 +++ [pid 5241] +++ exited with 0 +++ [pid 5239] +++ exited with 0 +++ [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5239, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [ 74.862472][ T5240] ERROR: (device loop3): remounting filesystem as read-only [pid 5082] close(3) = 0 [pid 5085] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] rmdir("./11" [pid 5085] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... rmdir resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5085] newfstatat(3, "", [pid 5084] newfstatat(3, "", [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, [pid 5084] getdents64(3, [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] mkdir("./12", 0777 [pid 5085] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... mkdir resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 74.916527][ T5084] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 74.916527][ T5084] [pid 5084] newfstatat(AT_FDCWD, "./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./10/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./10/bus") = 0 [pid 5084] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./10/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./10") = 0 [pid 5084] mkdir("./11", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5250 ./strace-static-x86_64: Process 5250 attached [pid 5250] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5250] chdir("./11") = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5250] setpgid(0, 0) = 0 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5082] <... ioctl resumed>) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5082] close(3 [pid 5085] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... close resumed>) = 0 executing program [pid 5250] <... openat resumed>) = 3 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5250] write(3, "1000", 4 [pid 5085] newfstatat(AT_FDCWD, "./11/bus", [pid 5250] <... write resumed>) = 4 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5250] close(3 [pid 5085] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5251 attached ) = 4 [pid 5085] newfstatat(4, "", [pid 5251] set_robust_list(0x555571ec36a0, 24 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, [pid 5250] <... close resumed>) = 0 [pid 5250] symlink("/dev/binderfs", "./binderfs" [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5250] <... symlink resumed>) = 0 [pid 5085] getdents64(4, [pid 5251] <... set_robust_list resumed>) = 0 [pid 5250] write(1, "executing program\n", 18 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5250] <... write resumed>) = 18 [pid 5085] close(4 [pid 5250] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] chdir("./12" [pid 5085] <... close resumed>) = 0 [pid 5250] <... futex resumed>) = 0 [pid 5085] rmdir("./11/bus" [pid 5251] <... chdir resumed>) = 0 [pid 5250] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5085] <... rmdir resumed>) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5251 [pid 5250] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5085] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5250] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5251] <... prctl resumed>) = 0 [pid 5250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5250] <... mmap resumed>) = 0x7f8282aa3000 [pid 5085] unlink("./11/binderfs" [pid 5250] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5251] setpgid(0, 0 [pid 5250] <... mprotect resumed>) = 0 [pid 5250] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5251] <... setpgid resumed>) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5252 attached ) = 3 [pid 5250] <... clone3 resumed> => {parent_tid=[5252]}, 88) = 5252 [pid 5085] close(3 [pid 5252] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5251] write(3, "1000", 4 [pid 5250] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... close resumed>) = 0 [pid 5252] <... rseq resumed>) = 0 [pid 5251] <... write resumed>) = 4 [pid 5250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] rmdir("./11" [pid 5252] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], [pid 5251] close(3 [pid 5250] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... rmdir resumed>) = 0 [pid 5251] <... close resumed>) = 0 [pid 5251] symlink("/dev/binderfs", "./binderfs" [pid 5252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5250] <... futex resumed>) = 0 [pid 5085] mkdir("./12", 0777 [pid 5252] memfd_create("syzkaller", 0 [pid 5251] <... symlink resumed>) = 0 [pid 5250] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5252] <... memfd_create resumed>) = 3 [pid 5085] <... mkdir resumed>) = 0 [pid 5251] write(1, "executing program\n", 18 [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program ) = 0x7f827a600000 [pid 5251] <... write resumed>) = 18 [pid 5251] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5251] <... futex resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5251] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5251] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5251] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5251] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5253 attached => {parent_tid=[5253]}, 88) = 5253 [pid 5253] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], [pid 5253] <... rseq resumed>) = 0 [pid 5251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5251] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] set_robust_list(0x7f8282ac39a0, 24 [pid 5251] <... futex resumed>) = 0 [pid 5253] <... set_robust_list resumed>) = 0 [pid 5251] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5253] memfd_create("syzkaller", 0) = 3 [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5247] <... write resumed>) = 16777216 [pid 5084] <... ioctl resumed>) = 0 [pid 5253] <... mmap resumed>) = 0x7f827a600000 [pid 5247] munmap(0x7f827a600000, 138412032 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5254 attached [pid 5247] <... munmap resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5254 [pid 5254] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5254] chdir("./11") = 0 [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5254] setpgid(0, 0 [pid 5247] <... openat resumed>) = 4 [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5254] <... setpgid resumed>) = 0 [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5254] write(3, "1000", 4) = 4 [pid 5254] close(3) = 0 [pid 5254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5247] <... ioctl resumed>) = 0 [pid 5254] write(1, "executing program\n", 18executing program ) = 18 [pid 5254] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] close(3 [pid 5254] <... futex resumed>) = 0 [pid 5247] <... close resumed>) = 0 [pid 5254] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5247] close(4 [pid 5254] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5247] <... close resumed>) = 0 [pid 5254] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5247] mkdir("./bus", 0777 [pid 5254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5247] <... mkdir resumed>) = 0 [pid 5254] <... mmap resumed>) = 0x7f8282aa3000 [pid 5254] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5254] rt_sigprocmask(SIG_BLOCK, ~[], [ 75.322961][ T5247] loop0: detected capacity change from 0 to 32768 [pid 5247] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5254] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5255]}, 88) = 5255 [pid 5254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5255 attached [pid 5254] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... mount resumed>) = 0 [pid 5255] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5254] <... futex resumed>) = 0 [pid 5247] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5255] <... rseq resumed>) = 0 [pid 5254] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5247] <... openat resumed>) = 3 [pid 5247] chdir("./bus" [pid 5255] set_robust_list(0x7f8282ac39a0, 24 [pid 5247] <... chdir resumed>) = 0 [pid 5255] <... set_robust_list resumed>) = 0 [pid 5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5255] rt_sigprocmask(SIG_SETMASK, [], [pid 5247] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5255] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5247] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] memfd_create("syzkaller", 0 [pid 5247] <... futex resumed>) = 1 [pid 5246] <... futex resumed>) = 0 [pid 5255] <... memfd_create resumed>) = 3 [pid 5247] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5247] unlink("./file1" [pid 5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5246] <... futex resumed>) = 0 [pid 5255] <... mmap resumed>) = 0x7f827a600000 [ 75.390737][ T5247] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 75.390737][ T5247] [ 75.430503][ T5247] ERROR: (device loop0): remounting filesystem as read-only [pid 5246] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5246] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5246] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5246] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5256 attached [pid 5252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5246] <... clone3 resumed> => {parent_tid=[5256]}, 88) = 5256 [pid 5256] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5246] rt_sigprocmask(SIG_SETMASK, [], [pid 5256] set_robust_list(0x7f8282aa29a0, 24 [pid 5247] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5247] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... set_robust_list resumed>) = 0 [pid 5246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5247] <... futex resumed>) = 0 [pid 5247] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5256] rt_sigprocmask(SIG_SETMASK, [], [pid 5246] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5256] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5246] <... futex resumed>) = 0 [pid 5246] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5256] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5256] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5256] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] <... futex resumed>) = 0 [pid 5246] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... futex resumed>) = 0 [pid 5246] <... futex resumed>) = 1 [pid 5247] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5246] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5247] <... open resumed>) = -1 EFAULT (Bad address) [pid 5247] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5247] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5246] <... futex resumed>) = 0 [pid 5246] exit_group(0 [pid 5256] <... futex resumed>) = ? [pid 5247] <... futex resumed>) = ? [pid 5246] <... exit_group resumed>) = ? [pid 5256] +++ exited with 0 +++ [pid 5247] +++ exited with 0 +++ [ 75.459615][ T5247] ERROR: (device loop0): jfs_unlink: [ 75.459615][ T5247] [ 75.482261][ T5256] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 75.482261][ T5256] [pid 5246] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5081] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5081] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5081] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] close(3 [pid 5081] newfstatat(AT_FDCWD, "./11/bus", [pid 5085] <... close resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5257 attached [pid 5081] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5257 [pid 5081] <... openat resumed>) = 4 [pid 5081] newfstatat(4, "", [pid 5257] chdir("./12" [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5257] <... chdir resumed>) = 0 [pid 5081] getdents64(4, [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./11/bus" [pid 5257] <... prctl resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5257] setpgid(0, 0 [pid 5081] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5257] <... setpgid resumed>) = 0 [pid 5081] unlink("./11/binderfs" [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... unlink resumed>) = 0 [pid 5257] <... openat resumed>) = 3 [pid 5081] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5257] write(3, "1000", 4 [pid 5081] close(3 [pid 5257] <... write resumed>) = 4 [pid 5081] <... close resumed>) = 0 [pid 5257] close(3) = 0 [pid 5081] rmdir("./11" [pid 5257] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... rmdir resumed>) = 0 [pid 5257] <... symlink resumed>) = 0 executing program [pid 5257] write(1, "executing program\n", 18 [pid 5081] mkdir("./12", 0777 [pid 5257] <... write resumed>) = 18 [pid 5081] <... mkdir resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5257] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5257] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5257] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5257] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5257] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5257] <... mprotect resumed>) = 0 [pid 5257] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5258 attached => {parent_tid=[5258]}, 88) = 5258 [pid 5258] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5257] rt_sigprocmask(SIG_SETMASK, [], [pid 5258] <... rseq resumed>) = 0 [pid 5257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5258] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5257] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], [pid 5257] <... futex resumed>) = 0 [pid 5258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5257] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5258] memfd_create("syzkaller", 0) = 3 [pid 5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5252] <... write resumed>) = 16777216 [pid 5258] <... mmap resumed>) = 0x7f827a600000 [pid 5252] munmap(0x7f827a600000, 138412032) = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5252] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5252] close(3) = 0 [pid 5252] close(4) = 0 [pid 5252] mkdir("./bus", 0777) = 0 [ 75.850903][ T5252] loop2: detected capacity change from 0 to 32768 [pid 5252] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5252] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5252] chdir("./bus") = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5252] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5252] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5250] <... futex resumed>) = 0 [pid 5250] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5250] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] <... futex resumed>) = 0 [ 76.000423][ T5252] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 76.000423][ T5252] [pid 5252] unlink("./file1" [pid 5250] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5250] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5250] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5250] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5259]}, 88) = 5259 [pid 5250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5250] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5259 attached [pid 5259] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5259] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5259] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5259] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5250] <... futex resumed>) = 0 [pid 5259] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5250] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... open resumed>) = -1 EFAULT (Bad address) [pid 5250] <... futex resumed>) = 0 [pid 5259] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5259] <... futex resumed>) = 0 [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 76.049424][ T5252] ERROR: (device loop2): remounting filesystem as read-only [ 76.057279][ T5252] ERROR: (device loop2): jfs_unlink: [ 76.057279][ T5252] [pid 5259] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5252] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = 0 [pid 5250] exit_group(0) = ? [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5259] <... futex resumed>) = ? [pid 5259] +++ exited with 0 +++ ./strace-static-x86_64: Process 5260 attached [pid 5081] <... clone resumed>, child_tidptr=0x555571ec3690) = 5260 [pid 5260] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5260] chdir("./12") = 0 [pid 5260] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5260] setpgid(0, 0) = 0 [ 76.099026][ T5252] ERROR: (device loop2): remounting filesystem as read-only [pid 5260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5252] <... futex resumed>) = ? [pid 5260] write(3, "1000", 4) = 4 [pid 5260] close(3) = 0 [pid 5260] symlink("/dev/binderfs", "./binderfs" [pid 5252] +++ exited with 0 +++ [pid 5250] +++ exited with 0 +++ executing program [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5250, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5260] <... symlink resumed>) = 0 [pid 5260] write(1, "executing program\n", 18 [pid 5083] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5260] <... write resumed>) = 18 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5260] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5260] <... futex resumed>) = 0 [pid 5260] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5083] <... openat resumed>) = 3 [pid 5260] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, [pid 5260] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5260] <... mmap resumed>) = 0x7f8282aa3000 [pid 5260] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5260] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5253] <... write resumed>) = 16777216 [pid 5260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5261]}, 88) = 5261 [pid 5260] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5260] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5253] munmap(0x7f827a600000, 138412032./strace-static-x86_64: Process 5261 attached [pid 5261] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5261] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5261] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5261] memfd_create("syzkaller", 0) = 3 [ 76.218042][ T5083] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 76.218042][ T5083] [pid 5253] <... munmap resumed>) = 0 [pid 5261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5253] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5253] ioctl(4, LOOP_SET_FD, 3 [pid 5255] <... write resumed>) = 16777216 [pid 5255] munmap(0x7f827a600000, 138412032 [pid 5083] <... umount2 resumed>) = 0 [pid 5083] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./11/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5253] <... ioctl resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5253] close(3 [pid 5083] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5253] <... close resumed>) = 0 [pid 5253] close(4 [pid 5083] <... openat resumed>) = 4 [pid 5253] <... close resumed>) = 0 [pid 5253] mkdir("./bus", 0777) = 0 [pid 5083] newfstatat(4, "", [pid 5255] <... munmap resumed>) = 0 [pid 5253] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5255] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] getdents64(4, [pid 5255] <... openat resumed>) = 4 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [ 76.283014][ T5253] loop1: detected capacity change from 0 to 32768 [pid 5255] ioctl(4, LOOP_SET_FD, 3 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4 [pid 5253] <... mount resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5253] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5253] chdir("./bus") = 0 [pid 5083] rmdir("./11/bus" [pid 5253] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] <... rmdir resumed>) = 0 [pid 5253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5253] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5253] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5251] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] unlink("./file1" [pid 5251] <... futex resumed>) = 0 [pid 5083] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5251] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5255] <... ioctl resumed>) = 0 [pid 5255] close(3) = 0 [pid 5255] close(4) = 0 [pid 5255] mkdir("./bus", 0777) = 0 [pid 5255] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5083] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./11/binderfs") = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./11" [pid 5255] <... mount resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5255] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5083] mkdir("./12", 0777 [pid 5255] <... openat resumed>) = 3 [pid 5255] chdir("./bus") = 0 [pid 5255] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... mkdir resumed>) = 0 [pid 5255] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5255] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5255] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [ 76.325518][ T5255] loop3: detected capacity change from 0 to 32768 [ 76.346867][ T5253] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 76.346867][ T5253] [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5255] unlink("./file1" [pid 5254] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5251] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5251] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5251] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5262 attached => {parent_tid=[5262]}, 88) = 5262 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5251] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 76.385737][ T5253] ERROR: (device loop1): remounting filesystem as read-only [ 76.394528][ T5255] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 76.394528][ T5255] [ 76.418308][ T5253] ERROR: (device loop1): jfs_unlink: [ 76.418308][ T5253] [pid 5262] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5251] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5262] <... rseq resumed>) = 0 [pid 5262] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5262] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5262] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5262] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5254] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] <... futex resumed>) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5251] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5251] <... futex resumed>) = 0 [pid 5262] <... open resumed>) = -1 EFAULT (Bad address) [pid 5262] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5251] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5254] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5263]}, 88) = 5263 [pid 5254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5254] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5263 attached [pid 5263] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [ 76.429511][ T5255] ERROR: (device loop3): remounting filesystem as read-only [ 76.453130][ T5255] ERROR: (device loop3): jfs_unlink: [ 76.453130][ T5255] [ 76.467611][ T5253] ERROR: (device loop1): remounting filesystem as read-only [pid 5263] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5263] rt_sigprocmask(SIG_SETMASK, [], [pid 5255] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5263] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5255] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5263] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5255] <... futex resumed>) = 0 [pid 5253] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... futex resumed>) = 0 [pid 5251] exit_group(0 [pid 5253] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5263] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5262] <... futex resumed>) = ? [pid 5258] <... write resumed>) = 16777216 [pid 5253] <... futex resumed>) = ? [pid 5251] <... exit_group resumed>) = ? [pid 5253] +++ exited with 0 +++ [pid 5263] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = 0 [pid 5254] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 0 [pid 5254] <... futex resumed>) = 1 [pid 5255] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5254] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5255] <... futex resumed>) = 0 [pid 5254] exit_group(0) = ? [pid 5262] +++ exited with 0 +++ [pid 5258] munmap(0x7f827a600000, 138412032 [pid 5255] +++ exited with 0 +++ [pid 5251] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5251, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=35 /* 0.35 s */} --- [pid 5263] <... futex resumed>) = ? [pid 5082] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5263] +++ exited with 0 +++ [pid 5254] +++ exited with 0 +++ [pid 5082] <... openat resumed>) = 3 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5254, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5082] newfstatat(3, "", [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 76.508378][ T5263] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 76.508378][ T5263] [pid 5082] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5258] <... munmap resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5258] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] newfstatat(AT_FDCWD, "./11/bus", [pid 5258] <... openat resumed>) = 4 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./11/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5258] ioctl(4, LOOP_SET_FD, 3 [pid 5084] openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./11/bus") = 0 [pid 5084] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./11/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./11") = 0 [pid 5084] mkdir("./12", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5258] <... ioctl resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5258] close(3 [pid 5083] <... ioctl resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5258] <... close resumed>) = 0 [pid 5083] close(3 [pid 5258] close(4 [pid 5082] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5258] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5258] mkdir("./bus", 0777 [pid 5082] newfstatat(AT_FDCWD, "./12/bus", [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5258] <... mkdir resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5258] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5082] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5264 attached ) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5264] set_robust_list(0x555571ec36a0, 24 [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5264 [pid 5264] <... set_robust_list resumed>) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5264] chdir("./12" [pid 5082] newfstatat(4, "", [pid 5264] <... chdir resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 76.566900][ T5082] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 76.566900][ T5082] [ 76.592600][ T5258] loop4: detected capacity change from 0 to 32768 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5082] getdents64(4, [pid 5264] <... prctl resumed>) = 0 [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5264] setpgid(0, 0 [pid 5082] close(4 [pid 5264] <... setpgid resumed>) = 0 [pid 5258] <... mount resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5258] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5258] chdir("./bus" [pid 5082] rmdir("./12/bus" [pid 5258] <... chdir resumed>) = 0 [pid 5258] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5258] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5258] <... futex resumed>) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5264] <... openat resumed>) = 3 [pid 5258] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5264] write(3, "1000", 4 [pid 5257] <... futex resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5264] <... write resumed>) = 4 executing program [pid 5264] close(3 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5258] unlink("./file1" [pid 5264] <... close resumed>) = 0 [pid 5082] unlink("./12/binderfs" [pid 5264] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5264] write(1, "executing program\n", 18) = 18 [pid 5082] getdents64(3, [pid 5264] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5264] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5264] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5264] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5257] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5257] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5257] <... futex resumed>) = 0 [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5258] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5264] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] close(3) = 0 [pid 5257] <... mmap resumed>) = 0x7f8282a82000 [pid 5257] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5082] rmdir("./12" [pid 5258] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... rmdir resumed>) = 0 [pid 5257] <... mprotect resumed>) = 0 [pid 5082] mkdir("./13", 0777) = 0 [pid 5257] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5264] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5257] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5082] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5265 attached [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5264] <... clone3 resumed> => {parent_tid=[5265]}, 88) = 5265 [pid 5257] <... clone3 resumed> => {parent_tid=[5266]}, 88) = 5266 ./strace-static-x86_64: Process 5266 attached [pid 5257] rt_sigprocmask(SIG_SETMASK, [], [pid 5266] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5266] <... rseq resumed>) = 0 [pid 5266] set_robust_list(0x7f8282aa29a0, 24 [pid 5265] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5266] <... set_robust_list resumed>) = 0 [pid 5265] <... rseq resumed>) = 0 [ 76.689986][ T5258] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 76.689986][ T5258] [ 76.703339][ T5258] ERROR: (device loop4): remounting filesystem as read-only [ 76.727681][ T5258] ERROR: (device loop4): jfs_unlink: [ 76.727681][ T5258] [pid 5266] rt_sigprocmask(SIG_SETMASK, [], [pid 5265] set_robust_list(0x7f8282ac39a0, 24 [pid 5266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5265] <... set_robust_list resumed>) = 0 [pid 5264] rt_sigprocmask(SIG_SETMASK, [], [pid 5257] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5265] rt_sigprocmask(SIG_SETMASK, [], [pid 5264] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5257] <... futex resumed>) = 0 [pid 5265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5265] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] <... futex resumed>) = 1 [pid 5265] <... futex resumed>) = 0 [pid 5264] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5265] memfd_create("syzkaller", 0) = 3 [pid 5265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5266] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5266] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5257] <... futex resumed>) = 0 [pid 5257] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] <... futex resumed>) = 1 [pid 5257] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] <... futex resumed>) = 0 [pid 5258] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5258] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 76.763348][ T5266] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 76.763348][ T5266] [pid 5257] exit_group(0 [pid 5266] <... futex resumed>) = ? [pid 5258] <... futex resumed>) = ? [pid 5257] <... exit_group resumed>) = ? [pid 5258] +++ exited with 0 +++ [pid 5266] +++ exited with 0 +++ [pid 5257] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5085] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5085] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5261] <... write resumed>) = 16777216 [pid 5085] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./12/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5261] munmap(0x7f827a600000, 138412032 [pid 5085] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [ 76.867099][ T930] cfg80211: failed to load regulatory.db [pid 5085] rmdir("./12/bus") = 0 [pid 5085] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./12/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./12" [pid 5084] <... ioctl resumed>) = 0 [pid 5261] <... munmap resumed>) = 0 [pid 5084] close(3 [pid 5085] <... rmdir resumed>) = 0 [pid 5085] mkdir("./13", 0777 [pid 5084] <... close resumed>) = 0 [pid 5261] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] <... mkdir resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5261] <... openat resumed>) = 4 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5261] ioctl(4, LOOP_SET_FD, 3 [pid 5085] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5267 attached [pid 5267] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5267 [pid 5267] chdir("./12") = 0 [pid 5267] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5267] setpgid(0, 0) = 0 [pid 5267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5267] write(3, "1000", 4) = 4 [pid 5267] close(3) = 0 [pid 5267] symlink("/dev/binderfs", "./binderfs" [pid 5261] <... ioctl resumed>) = 0 [pid 5267] <... symlink resumed>) = 0 [pid 5261] close(3) = 0 [pid 5261] close(4) = 0 [pid 5261] mkdir("./bus", 0777 [pid 5267] write(1, "executing program\n", 18 [pid 5261] <... mkdir resumed>) = 0 [pid 5261] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity"executing program [pid 5267] <... write resumed>) = 18 [pid 5267] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5267] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5267] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5267] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5267] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5268]}, 88) = 5268 [pid 5267] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5267] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5268 attached [pid 5268] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5268] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5268] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5268] memfd_create("syzkaller", 0 [pid 5261] <... mount resumed>) = 0 [pid 5268] <... memfd_create resumed>) = 3 [pid 5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5261] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5261] chdir("./bus") = 0 [pid 5261] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5261] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5260] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [ 76.991737][ T5261] loop0: detected capacity change from 0 to 32768 [pid 5261] unlink("./file1" [pid 5260] <... futex resumed>) = 0 [pid 5260] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5260] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5260] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5260] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5269]}, 88) = 5269 [pid 5260] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 77.053828][ T5261] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 77.053828][ T5261] [pid 5260] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5269 attached [pid 5269] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5269] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5269] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5269] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5082] <... ioctl resumed>) = 0 [ 77.117907][ T5261] ERROR: (device loop0): remounting filesystem as read-only [ 77.149967][ T5261] ERROR: (device loop0): jfs_unlink: [ 77.149967][ T5261] [pid 5265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5082] close(3) = 0 [pid 5260] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5260] futex(0x7f8282b9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5270 attached [pid 5260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5270] set_robust_list(0x555571ec36a0, 24 [pid 5260] <... mmap resumed>) = 0x7f8282a61000 [pid 5260] mprotect(0x7f8282a62000, 131072, PROT_READ|PROT_WRITE [pid 5270] <... set_robust_list resumed>) = 0 [pid 5260] <... mprotect resumed>) = 0 [pid 5260] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282a81990, parent_tid=0x7f8282a81990, exit_signal=0, stack=0x7f8282a61000, stack_size=0x20300, tls=0x7f8282a816c0} [pid 5270] chdir("./13") = 0 [pid 5261] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5261] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... clone3 resumed> => {parent_tid=[5271]}, 88) = 5271 [pid 5270] <... prctl resumed>) = 0 [pid 5269] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5261] <... futex resumed>) = 0 [pid 5260] rt_sigprocmask(SIG_SETMASK, [], [pid 5261] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5271 attached [pid 5269] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5271] rseq(0x7f8282a81fe0, 0x20, 0, 0x53053053 [pid 5269] <... futex resumed>) = 0 [pid 5260] futex(0x7f8282b9a6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... rseq resumed>) = 0 [pid 5270] setpgid(0, 0 [pid 5269] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5260] <... futex resumed>) = 0 [pid 5271] set_robust_list(0x7f8282a819a0, 24 [pid 5260] futex(0x7f8282b9a6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5271] <... set_robust_list resumed>) = 0 [pid 5271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5271] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5270] <... setpgid resumed>) = 0 [pid 5271] futex(0x7f8282b9a6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5271] futex(0x7f8282b9a6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5260] <... futex resumed>) = 0 [pid 5260] exit_group(0) = ? [pid 5271] <... futex resumed>) = ? [pid 5270] <... openat resumed>) = 3 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5270 [pid 5270] write(3, "1000", 4 [pid 5271] +++ exited with 0 +++ [pid 5269] <... futex resumed>) = ? [pid 5261] <... futex resumed>) = ? [pid 5261] +++ exited with 0 +++ [pid 5270] <... write resumed>) = 4 [pid 5270] close(3) = 0 [pid 5270] symlink("/dev/binderfs", "./binderfs" [pid 5269] +++ exited with 0 +++ [pid 5260] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5260, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5270] <... symlink resumed>) = 0 [pid 5081] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORYexecuting program [pid 5270] write(1, "executing program\n", 18 [pid 5081] <... openat resumed>) = 3 [pid 5081] newfstatat(3, "", [pid 5270] <... write resumed>) = 18 [ 77.173008][ T112] BUG: Bad page state in process jfsCommit pfn:1e399 [ 77.180229][ T112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x1e399 [pid 5270] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, [pid 5270] <... futex resumed>) = 0 [pid 5270] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5081] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5270] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5270] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5081] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5270] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5270] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5270] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5272 attached [ 77.219988][ T112] flags: 0xfff0000000401c(referenced|uptodate|dirty|private|node=0|zone=1|lastcpupid=0x7ff) [ 77.236334][ T5081] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 77.236334][ T5081] [ 77.252315][ T112] raw: 00fff0000000401c dead000000000100 dead000000000122 0000000000000000 => {parent_tid=[5272]}, 88) = 5272 [pid 5270] rt_sigprocmask(SIG_SETMASK, [], [pid 5272] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5270] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5272] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5270] <... futex resumed>) = 0 [pid 5272] memfd_create("syzkaller", 0 [pid 5270] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5272] <... memfd_create resumed>) = 3 [pid 5272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [ 77.269115][ T5081] ERROR: (device loop0): remounting filesystem as read-only [ 77.284690][ T112] raw: 000000000000001c ffff888077fed1f0 00000000ffffffff 0000000000000000 [pid 5085] <... ioctl resumed>) = 0 [ 77.320858][ T112] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 77.328283][ T112] page_owner tracks the page as allocated [ 77.342863][ T112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x40c40(GFP_NOFS|__GFP_COMP), pid 5261, tgid 5260 (syz-executor172), ts 77039403451, free_ts 77037480293 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5273 attached , child_tidptr=0x555571ec3690) = 5273 [ 77.394888][ T112] post_alloc_hook+0x1f3/0x230 [ 77.408913][ T112] get_page_from_freelist+0x2e2d/0x2ee0 [ 77.414515][ T112] __alloc_pages_noprof+0x256/0x6c0 [pid 5273] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5273] chdir("./13" [pid 5268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5273] <... chdir resumed>) = 0 [pid 5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5273] setpgid(0, 0) = 0 [ 77.438934][ T112] alloc_pages_mpol_noprof+0x3e8/0x680 [ 77.445468][ T112] folio_alloc_noprof+0x128/0x180 [ 77.458276][ T112] filemap_alloc_folio_noprof+0xdf/0x500 [ 77.478931][ T112] do_read_cache_folio+0xed/0x820 [ 77.484020][ T112] do_read_cache_page+0x30/0x200 [pid 5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5273] write(3, "1000", 4) = 4 [pid 5273] close(3) = 0 [pid 5273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5273] write(1, "executing program\n", 18executing program ) = 18 [pid 5273] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5273] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5273] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5273] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5273] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5274]}, 88) = 5274 [pid 5273] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 77.491842][ T112] __get_metapage+0x330/0x1050 [ 77.505097][ T112] diRead+0x5f4/0xae0 [ 77.518933][ T112] jfs_iget+0x8c/0x3b0 [ 77.523051][ T112] jfs_fill_super+0x808/0xc50 [ 77.527740][ T112] mount_bdev+0x20a/0x2d0 [pid 5273] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5274 attached ) = 0 [pid 5274] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5273] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5274] <... rseq resumed>) = 0 [pid 5274] set_robust_list(0x7f8282ac39a0, 24) = 0 [ 77.548310][ T112] legacy_get_tree+0xee/0x190 [pid 5274] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5274] memfd_create("syzkaller", 0) = 3 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [ 77.568960][ T112] vfs_get_tree+0x90/0x2a0 [ 77.573435][ T112] do_new_mount+0x2be/0xb40 [ 77.577952][ T112] page last free pid 5075 tgid 5075 stack trace: [ 77.604646][ T112] free_unref_page+0xd19/0xea0 [pid 5265] <... write resumed>) = 16777216 [ 77.628932][ T112] skb_release_data+0x6b2/0x880 [ 77.633933][ T112] __kfree_skb+0x55/0x70 [ 77.638193][ T112] tcp_rcv_established+0x10a2/0x2020 [ 77.668911][ T112] tcp_v4_do_rcv+0x965/0xc60 [ 77.673556][ T112] __release_sock+0x214/0x350 [pid 5265] munmap(0x7f827a600000, 138412032 [pid 5272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5265] <... munmap resumed>) = 0 [pid 5265] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 77.681661][ T112] release_sock+0x61/0x1f0 [ 77.686273][ T112] tcp_sendmsg+0x3a/0x50 [ 77.708907][ T112] __sock_sendmsg+0x1a6/0x270 [ 77.719394][ T112] sock_write_iter+0x2dd/0x400 [ 77.724271][ T112] vfs_write+0xa72/0xc90 [ 77.729888][ T112] ksys_write+0x1a0/0x2c0 [ 77.730050][ T5265] loop2: detected capacity change from 0 to 32768 [ 77.749322][ T112] do_syscall_64+0xf3/0x230 [ 77.753861][ T112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.781257][ T112] Modules linked in: [ 77.785385][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted 6.10.0-rc1-syzkaller-00304-g83814698cf48 #0 [ 77.795385][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 77.805472][ T112] Call Trace: [ 77.808778][ T112] [ 77.811727][ T112] dump_stack_lvl+0x241/0x360 [ 77.816430][ T112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.821652][ T112] ? __pfx_print_modules+0x10/0x10 [ 77.826790][ T112] ? __mem_cgroup_uncharge+0xa9/0x100 [pid 5265] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5265] close(3) = 0 [pid 5265] close(4) = 0 [pid 5265] mkdir("./bus", 0777) = 0 [pid 5265] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5265] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5265] chdir("./bus") = 0 [pid 5265] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5265] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 77.832182][ T112] bad_page+0x14c/0x170 [ 77.836357][ T112] free_unref_page+0xe3e/0xea0 [ 77.841140][ T112] ? __page_cache_release+0xbe7/0x1c80 [ 77.846627][ T112] __folio_put+0x3b9/0x620 [ 77.851065][ T112] ? folio_unlock+0x126/0x2f0 [ 77.855768][ T112] ? __pfx___folio_put+0x10/0x10 [ 77.860730][ T112] ? release_metapage+0x6fe/0x870 [ 77.865791][ T112] txUnlock+0x42f/0xca0 [ 77.869985][ T112] jfs_lazycommit+0x5f4/0xb80 [ 77.874694][ T112] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 77.880606][ T112] ? lockdep_hardirqs_on+0x99/0x150 [ 77.885827][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 77.891048][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 77.896882][ T112] ? __kthread_parkme+0x169/0x1d0 [ 77.901922][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 77.907145][ T112] kthread+0x2f0/0x390 [ 77.911229][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 77.916447][ T112] ? __pfx_kthread+0x10/0x10 [ 77.921055][ T112] ret_from_fork+0x4b/0x80 [ 77.925490][ T112] ? __pfx_kthread+0x10/0x10 [pid 5265] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5264] <... futex resumed>) = 0 [pid 5264] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = 0 [pid 5264] <... futex resumed>) = 1 [pid 5265] unlink("./file1" [pid 5264] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5264] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5264] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5264] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5264] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5275]}, 88) = 5275 [pid 5264] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5264] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 77.930097][ T112] ret_from_fork_asm+0x1a/0x30 [ 77.934899][ T112] [ 77.952142][ T5265] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 77.952142][ T5265] [ 77.965653][ T5265] ERROR: (device loop2): remounting filesystem as read-only ./strace-static-x86_64: Process 5275 attached [pid 5264] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5275] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5275] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5275] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5275] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5265] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5264] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5275] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... futex resumed>) = 0 [pid 5264] <... futex resumed>) = 0 [pid 5275] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5264] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5275] <... open resumed>) = -1 EFAULT (Bad address) [pid 5275] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5264] <... futex resumed>) = 0 [pid 5275] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] <... write resumed>) = 16777216 [pid 5268] munmap(0x7f827a600000, 138412032 [pid 5265] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] exit_group(0 [pid 5275] <... futex resumed>) = ? [pid 5264] <... exit_group resumed>) = ? [pid 5275] +++ exited with 0 +++ [pid 5265] <... futex resumed>) = ? [ 78.058938][ T5265] ERROR: (device loop2): jfs_unlink: [ 78.058938][ T5265] [pid 5268] <... munmap resumed>) = 0 [pid 5268] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5268] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5265] +++ exited with 0 +++ [pid 5264] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5264, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5268] close(3) = 0 [pid 5268] close(4) = 0 [pid 5268] mkdir("./bus", 0777) = 0 [pid 5083] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5268] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", [pid 5268] <... mount resumed>) = 0 [pid 5268] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5268] chdir("./bus") = 0 [pid 5268] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5268] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5267] <... futex resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5267] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] getdents64(3, [pid 5267] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [ 78.141563][ T5268] loop3: detected capacity change from 0 to 32768 [ 78.170654][ T112] Disabling lock debugging due to kernel taint [pid 5268] unlink("./file1" [pid 5083] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5267] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5267] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5267] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5272] <... write resumed>) = 16777216 [pid 5267] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 78.195652][ T5268] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 78.195652][ T5268] [ 78.207340][ T5083] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 78.207340][ T5083] [ 78.228602][ T5083] ERROR: (device loop2): remounting filesystem as read-only [ 78.229241][ T5268] ERROR: (device loop3): remounting filesystem as read-only [pid 5267] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5276]}, 88) = 5276 [pid 5267] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5267] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] munmap(0x7f827a600000, 138412032./strace-static-x86_64: Process 5276 attached [pid 5274] <... write resumed>) = 16777216 [pid 5268] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5083] <... umount2 resumed>) = 0 [pid 5276] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5274] munmap(0x7f827a600000, 138412032 [pid 5083] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5268] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] newfstatat(AT_FDCWD, "./12/bus", [pid 5276] <... rseq resumed>) = 0 [pid 5272] <... munmap resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5276] set_robust_list(0x7f8282aa29a0, 24 [pid 5272] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5276] <... set_robust_list resumed>) = 0 [pid 5272] <... openat resumed>) = 4 [pid 5276] rt_sigprocmask(SIG_SETMASK, [], [pid 5272] ioctl(4, LOOP_SET_FD, 3 [pid 5276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5274] <... munmap resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5274] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5276] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5274] <... openat resumed>) = 4 [pid 5083] <... openat resumed>) = 4 [pid 5274] ioctl(4, LOOP_SET_FD, 3 [pid 5083] newfstatat(4, "", [pid 5272] <... ioctl resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, [pid 5276] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5274] <... ioctl resumed>) = 0 [pid 5272] close(3 [pid 5276] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] close(3 [pid 5272] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5272] close(4) = 0 [pid 5267] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] getdents64(4, [pid 5272] mkdir("./bus", 0777 [pid 5267] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... close resumed>) = 0 [pid 5272] <... mkdir resumed>) = 0 [pid 5268] <... futex resumed>) = 0 [pid 5267] <... futex resumed>) = 1 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5276] <... futex resumed>) = 0 [pid 5274] close(4 [pid 5272] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5268] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5267] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] close(4 [pid 5274] <... close resumed>) = 0 [pid 5276] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] <... open resumed>) = -1 EFAULT (Bad address) [pid 5083] <... close resumed>) = 0 [pid 5268] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5267] <... futex resumed>) = 0 [pid 5083] rmdir("./12/bus" [pid 5272] <... mount resumed>) = 0 [pid 5274] mkdir("./bus", 0777 [pid 5268] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5267] exit_group(0 [pid 5083] <... rmdir resumed>) = 0 [pid 5276] <... futex resumed>) = ? [pid 5272] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5268] <... futex resumed>) = ? [pid 5267] <... exit_group resumed>) = ? [pid 5276] +++ exited with 0 +++ [pid 5268] +++ exited with 0 +++ [pid 5083] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5274] <... mkdir resumed>) = 0 [pid 5272] <... openat resumed>) = 3 [pid 5267] +++ exited with 0 +++ [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5274] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5272] chdir("./bus" [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5267, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=28 /* 0.28 s */} --- [pid 5083] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5274] <... mount resumed>) = 0 [pid 5272] <... chdir resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5274] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5272] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5274] <... openat resumed>) = 3 [pid 5272] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5083] unlink("./12/binderfs" [pid 5274] chdir("./bus" [pid 5272] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... chdir resumed>) = 0 [pid 5272] <... futex resumed>) = 1 [pid 5274] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5272] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5270] <... futex resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5083] getdents64(3, [ 78.256081][ T5268] ERROR: (device loop3): jfs_unlink: [ 78.256081][ T5268] [ 78.274237][ T5272] loop1: detected capacity change from 0 to 32768 [ 78.281609][ T5276] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 78.281609][ T5276] [ 78.292712][ T5274] loop4: detected capacity change from 0 to 32768 [pid 5270] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... futex resumed>) = 0 [pid 5270] <... futex resumed>) = 1 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5274] <... futex resumed>) = 1 [pid 5273] <... futex resumed>) = 0 [pid 5272] unlink("./file1" [pid 5270] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] close(3 [pid 5274] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] <... futex resumed>) = 0 [pid 5274] unlink("./file1" [pid 5273] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] rmdir("./12" [pid 5084] <... openat resumed>) = 3 [pid 5084] newfstatat(3, "", [pid 5083] <... rmdir resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] mkdir("./13", 0777 [pid 5084] getdents64(3, [pid 5083] <... mkdir resumed>) = 0 [ 78.332182][ T5272] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 78.332182][ T5272] [ 78.344524][ T5274] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 78.344524][ T5274] [ 78.356137][ T5272] ERROR: (device loop1): remounting filesystem as read-only [ 78.363986][ T5274] ERROR: (device loop4): remounting filesystem as read-only [ 78.364669][ T5272] ERROR: (device loop1): jfs_unlink: [ 78.364669][ T5272] [pid 5272] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5274] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5274] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... openat resumed>) = 3 [pid 5274] <... futex resumed>) = 1 [pid 5273] <... futex resumed>) = 0 [pid 5272] <... futex resumed>) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5274] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5273] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5270] <... futex resumed>) = 0 [pid 5274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5273] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5270] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5272] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5274] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5274] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5273] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5274] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5273] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5274] <... open resumed>) = -1 EFAULT (Bad address) [pid 5273] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5274] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5274] <... futex resumed>) = 1 [pid 5273] exit_group(0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5273] <... exit_group resumed>) = ? [pid 5084] newfstatat(AT_FDCWD, "./12/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./12/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5274] +++ exited with 0 +++ [pid 5273] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5273, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./12/bus") = 0 [pid 5085] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./12/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./12") = 0 [pid 5084] mkdir("./13", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5272] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5272] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5272] <... futex resumed>) = 0 [pid 5270] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5270] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] <... open resumed>) = -1 EFAULT (Bad address) [pid 5272] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5270] <... futex resumed>) = 0 [pid 5272] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5270] exit_group(0 [pid 5272] <... futex resumed>) = ? [pid 5270] <... exit_group resumed>) = ? [pid 5272] +++ exited with 0 +++ [pid 5270] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5270, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=24 /* 0.24 s */} --- [pid 5082] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5082] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 78.372428][ T5274] ERROR: (device loop4): jfs_unlink: [ 78.372428][ T5274] [ 78.392668][ T5274] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 78.392668][ T5274] [ 78.403371][ T5272] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 78.403371][ T5272] [pid 5082] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... ioctl resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] close(3./strace-static-x86_64: Process 5277 attached ) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5277] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5277] chdir("./13") = 0 ./strace-static-x86_64: Process 5278 attached [pid 5277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5278 [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5277 [pid 5278] set_robust_list(0x555571ec36a0, 24 [pid 5277] <... prctl resumed>) = 0 [pid 5277] setpgid(0, 0 [pid 5278] <... set_robust_list resumed>) = 0 [pid 5277] <... setpgid resumed>) = 0 [pid 5278] chdir("./13" [pid 5277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5278] <... chdir resumed>) = 0 [pid 5278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5278] setpgid(0, 0) = 0 [pid 5278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5277] <... openat resumed>) = 3 [pid 5277] write(3, "1000", 4 [pid 5278] <... openat resumed>) = 3 [pid 5277] <... write resumed>) = 4 [pid 5278] write(3, "1000", 4 [pid 5277] close(3 [pid 5278] <... write resumed>) = 4 [pid 5277] <... close resumed>) = 0 [pid 5278] close(3 [pid 5277] symlink("/dev/binderfs", "./binderfs" [pid 5278] <... close resumed>) = 0 [pid 5278] symlink("/dev/binderfs", "./binderfs" [pid 5277] <... symlink resumed>) = 0 [pid 5277] write(1, "executing program\n", 18executing program ) = 18 [pid 5277] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5277] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5277] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5278] <... symlink resumed>) = 0 [pid 5277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5278] write(1, "executing program\n", 18executing program ) = 18 [pid 5277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5278] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... mmap resumed>) = 0x7f8282aa3000 [pid 5278] <... futex resumed>) = 0 [pid 5277] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5278] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5277] <... mprotect resumed>) = 0 [pid 5278] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5278] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5277] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5277] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5278] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5279 attached [pid 5278] <... mprotect resumed>) = 0 [pid 5279] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5277] <... clone3 resumed> => {parent_tid=[5279]}, 88) = 5279 [pid 5278] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5277] rt_sigprocmask(SIG_SETMASK, [], [pid 5279] <... rseq resumed>) = 0 [pid 5278] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5279] set_robust_list(0x7f8282ac39a0, 24 [pid 5278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5277] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5280 attached [pid 5279] <... set_robust_list resumed>) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5280] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5279] rt_sigprocmask(SIG_SETMASK, [], [pid 5280] <... rseq resumed>) = 0 [pid 5279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5277] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5280] set_robust_list(0x7f8282ac39a0, 24 [pid 5278] <... clone3 resumed> => {parent_tid=[5280]}, 88) = 5280 [pid 5280] <... set_robust_list resumed>) = 0 [pid 5278] rt_sigprocmask(SIG_SETMASK, [], [pid 5280] rt_sigprocmask(SIG_SETMASK, [], [pid 5278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5278] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5278] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5279] memfd_create("syzkaller", 0 [pid 5280] memfd_create("syzkaller", 0 [pid 5279] <... memfd_create resumed>) = 3 [pid 5279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5280] <... memfd_create resumed>) = 3 [pid 5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./13/bus", [pid 5082] <... umount2 resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./13/bus", [pid 5085] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] newfstatat(4, "", [pid 5082] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] getdents64(4, [pid 5082] <... openat resumed>) = 4 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, [pid 5082] newfstatat(4, "", [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./13/bus" [pid 5082] getdents64(4, [pid 5085] <... rmdir resumed>) = 0 [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] getdents64(4, [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4 [pid 5085] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5082] <... close resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] rmdir("./13/bus" [pid 5085] unlink("./13/binderfs" [pid 5082] <... rmdir resumed>) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5085] getdents64(3, [pid 5082] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5082] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... close resumed>) = 0 [pid 5082] unlink("./13/binderfs" [pid 5085] rmdir("./13" [pid 5082] <... unlink resumed>) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] mkdir("./14", 0777 [pid 5082] close(3) = 0 [pid 5082] rmdir("./13") = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] mkdir("./14", 0777 [pid 5085] <... openat resumed>) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5082] <... mkdir resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5279] <... write resumed>) = 16777216 [pid 5280] <... write resumed>) = 16777216 [pid 5279] munmap(0x7f827a600000, 138412032 [pid 5280] munmap(0x7f827a600000, 138412032) = 0 [pid 5279] <... munmap resumed>) = 0 [pid 5279] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5279] ioctl(4, LOOP_SET_FD, 3 [pid 5280] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5279] <... ioctl resumed>) = 0 [pid 5280] <... openat resumed>) = 4 [pid 5280] ioctl(4, LOOP_SET_FD, 3 [pid 5279] close(3) = 0 [pid 5279] close(4) = 0 [pid 5279] mkdir("./bus", 0777) = 0 [pid 5279] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5280] <... ioctl resumed>) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5280] close(3 [pid 5082] close(3 [pid 5280] <... close resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5280] close(4) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5280] mkdir("./bus", 0777) = 0 [pid 5280] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5281 ./strace-static-x86_64: Process 5281 attached [pid 5281] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5281] chdir("./14" [pid 5280] <... mount resumed>) = 0 [pid 5279] <... mount resumed>) = 0 [pid 5280] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5085] <... ioctl resumed>) = 0 [pid 5280] <... openat resumed>) = 3 [pid 5279] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5280] chdir("./bus" [pid 5279] chdir("./bus" [pid 5085] close(3 [pid 5279] <... chdir resumed>) = 0 [pid 5279] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5280] <... chdir resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5280] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5280] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5279] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5280] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5279] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5279] <... futex resumed>) = 1 [ 78.904667][ T5279] loop2: detected capacity change from 0 to 32768 [ 78.922823][ T5280] loop3: detected capacity change from 0 to 32768 [pid 5279] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] <... futex resumed>) = 0 [pid 5281] <... chdir resumed>) = 0 [pid 5277] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... futex resumed>) = 0 [pid 5277] <... futex resumed>) = 1 [pid 5279] unlink("./file1" [pid 5278] <... futex resumed>) = 0 [pid 5277] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5278] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5278] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] unlink("./file1"executing program [pid 5281] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5281] setpgid(0, 0) = 0 [pid 5281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5282 attached [pid 5282] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5282] chdir("./14" [pid 5281] write(3, "1000", 4) = 4 [pid 5281] close(3) = 0 [pid 5281] symlink("/dev/binderfs", "./binderfs" [pid 5282] <... chdir resumed>) = 0 [pid 5281] <... symlink resumed>) = 0 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5282] setpgid(0, 0) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5281] write(1, "executing program\n", 18) = 18 [pid 5281] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5281] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5281] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5282] <... openat resumed>) = 3 [pid 5281] <... mmap resumed>) = 0x7f8282aa3000 [pid 5281] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5282 [pid 5282] write(3, "1000", 4 [pid 5281] <... mprotect resumed>) = 0 executing program [pid 5282] <... write resumed>) = 4 [pid 5281] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5282] close(3 [pid 5281] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5282] <... close resumed>) = 0 [pid 5281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5282] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5281] <... clone3 resumed> => {parent_tid=[5283]}, 88) = 5283 [pid 5282] write(1, "executing program\n", 18 [pid 5281] rt_sigprocmask(SIG_SETMASK, [], [pid 5282] <... write resumed>) = 18 [pid 5281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5282] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... futex resumed>) = 0 [pid 5281] <... futex resumed>) = 0 [pid 5282] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5281] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5282] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5282] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 5283 attached NULL, 8) = 0 [pid 5283] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5283] <... rseq resumed>) = 0 [pid 5282] <... mmap resumed>) = 0x7f8282aa3000 [pid 5283] set_robust_list(0x7f8282ac39a0, 24 [pid 5282] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5283] <... set_robust_list resumed>) = 0 [pid 5282] <... mprotect resumed>) = 0 [pid 5283] rt_sigprocmask(SIG_SETMASK, [], [pid 5282] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5282] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5283] memfd_create("syzkaller", 0 [pid 5282] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5283] <... memfd_create resumed>) = 3 [pid 5283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5282] <... clone3 resumed> => {parent_tid=[5284]}, 88) = 5284 ./strace-static-x86_64: Process 5284 attached [pid 5283] <... mmap resumed>) = 0x7f827a600000 [pid 5282] rt_sigprocmask(SIG_SETMASK, [], [pid 5284] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5284] <... rseq resumed>) = 0 [pid 5282] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] set_robust_list(0x7f8282ac39a0, 24 [pid 5282] <... futex resumed>) = 0 [pid 5284] <... set_robust_list resumed>) = 0 [pid 5282] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5284] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5284] memfd_create("syzkaller", 0) = 3 [pid 5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [ 78.966182][ T5279] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 78.966182][ T5279] [ 78.978579][ T5280] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 78.978579][ T5280] [pid 5278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5277] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5280] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5279] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5278] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5278] <... futex resumed>) = 0 [pid 5280] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5280] <... futex resumed>) = 0 [pid 5279] <... futex resumed>) = 0 [pid 5278] <... mmap resumed>) = 0x7f8282a82000 [pid 5277] <... mmap resumed>) = 0x7f8282a82000 [pid 5277] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5279] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] <... mprotect resumed>) = 0 [pid 5280] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5278] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5277] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5278] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5277] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5278] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5286 attached ./strace-static-x86_64: Process 5287 attached [pid 5277] <... clone3 resumed> => {parent_tid=[5286]}, 88) = 5286 [pid 5278] <... clone3 resumed> => {parent_tid=[5287]}, 88) = 5287 [pid 5278] rt_sigprocmask(SIG_SETMASK, [], [pid 5277] rt_sigprocmask(SIG_SETMASK, [], [pid 5278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5287] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5278] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... rseq resumed>) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5278] <... futex resumed>) = 0 [pid 5287] set_robust_list(0x7f8282aa29a0, 24 [pid 5278] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5277] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... set_robust_list resumed>) = 0 [pid 5287] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5286] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5287] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5286] <... rseq resumed>) = 0 [ 79.019064][ T5279] ERROR: (device loop2): remounting filesystem as read-only [ 79.021652][ T5280] ERROR: (device loop3): remounting filesystem as read-only [ 79.026372][ T5279] ERROR: (device loop2): jfs_unlink: [ 79.026372][ T5279] [ 79.036864][ T5280] ERROR: (device loop3): jfs_unlink: [ 79.036864][ T5280] [pid 5286] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5286] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5286] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5287] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5286] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5286] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5277] <... futex resumed>) = 0 [pid 5286] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... futex resumed>) = 0 [pid 5277] <... futex resumed>) = 1 [pid 5287] <... futex resumed>) = 1 [pid 5279] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5278] <... futex resumed>) = 0 [pid 5277] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5279] <... open resumed>) = -1 EFAULT (Bad address) [pid 5278] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... futex resumed>) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5279] <... futex resumed>) = 1 [pid 5277] <... futex resumed>) = 0 [pid 5278] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5280] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5279] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] exit_group(0 [pid 5280] <... open resumed>) = -1 EFAULT (Bad address) [pid 5277] <... exit_group resumed>) = ? [pid 5280] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... futex resumed>) = ? [pid 5287] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5286] <... futex resumed>) = ? [pid 5284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5280] <... futex resumed>) = 1 [pid 5279] +++ exited with 0 +++ [pid 5278] <... futex resumed>) = 0 [pid 5280] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5278] exit_group(0 [pid 5280] <... futex resumed>) = ? [pid 5278] <... exit_group resumed>) = ? [pid 5280] +++ exited with 0 +++ [pid 5287] <... futex resumed>) = ? [pid 5286] +++ exited with 0 +++ [pid 5277] +++ exited with 0 +++ [pid 5287] +++ exited with 0 +++ [pid 5278] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5278, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5084] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5277, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5084] <... openat resumed>) = 3 [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5084] newfstatat(3, "", [pid 5083] <... restart_syscall resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 79.075163][ T5287] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 79.075163][ T5287] [ 79.086549][ T5286] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 79.086549][ T5286] [pid 5083] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5083] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./13/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./13/bus") = 0 [pid 5083] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./13/binderfs") = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./13") = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] mkdir("./14", 0777 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... mkdir resumed>) = 0 [pid 5084] newfstatat(AT_FDCWD, "./13/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./13/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... openat resumed>) = 4 [pid 5084] newfstatat(4, "", [pid 5083] <... openat resumed>) = 3 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./13/bus") = 0 [pid 5084] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./13/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./13") = 0 [pid 5084] mkdir("./14", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5283] <... write resumed>) = 16777216 [pid 5283] munmap(0x7f827a600000, 138412032) = 0 [pid 5283] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5283] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5283] close(3) = 0 [pid 5283] close(4 [pid 5284] <... write resumed>) = 16777216 [pid 5283] <... close resumed>) = 0 [pid 5283] mkdir("./bus", 0777 [pid 5284] munmap(0x7f827a600000, 138412032 [pid 5283] <... mkdir resumed>) = 0 [pid 5283] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5283] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5283] chdir("./bus") = 0 [pid 5283] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5283] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... munmap resumed>) = 0 [pid 5283] <... futex resumed>) = 1 [pid 5281] <... futex resumed>) = 0 [pid 5281] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5281] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 79.317983][ T5283] loop1: detected capacity change from 0 to 32768 [pid 5283] unlink("./file1" [pid 5284] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] <... ioctl resumed>) = 0 [pid 5284] <... openat resumed>) = 4 [pid 5083] close(3 [pid 5284] ioctl(4, LOOP_SET_FD, 3 [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3 [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5288 [pid 5284] <... ioctl resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5284] close(3 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5284] <... close resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5289 ./strace-static-x86_64: Process 5289 attached [pid 5289] set_robust_list(0x555571ec36a0, 24 [pid 5284] close(4 [pid 5289] <... set_robust_list resumed>) = 0 [pid 5284] <... close resumed>) = 0 [pid 5289] chdir("./14"./strace-static-x86_64: Process 5288 attached ) = 0 [pid 5284] mkdir("./bus", 0777 [pid 5288] set_robust_list(0x555571ec36a0, 24 [pid 5289] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5288] <... set_robust_list resumed>) = 0 [pid 5289] <... prctl resumed>) = 0 [pid 5288] chdir("./14") = 0 [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5288] setpgid(0, 0) = 0 [pid 5284] <... mkdir resumed>) = 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5289] setpgid(0, 0) = 0 [pid 5289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5288] <... openat resumed>) = 3 [pid 5284] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5289] <... openat resumed>) = 3 [pid 5288] write(3, "1000", 4) = 4 [pid 5288] close(3) = 0 [pid 5289] write(3, "1000", 4 [pid 5288] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5288] write(1, "executing program\n", 18) = 18 [pid 5288] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5288] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5289] <... write resumed>) = 4 [pid 5288] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5289] close(3 [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5289] <... close resumed>) = 0 [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5289] symlink("/dev/binderfs", "./binderfs" [pid 5288] <... mmap resumed>) = 0x7f8282aa3000 [pid 5289] <... symlink resumed>) = 0 [pid 5288] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5281] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5281] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 79.368645][ T5283] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 79.368645][ T5283] [ 79.383864][ T5284] loop4: detected capacity change from 0 to 32768 [ 79.395598][ T5283] ERROR: (device loop1): remounting filesystem as read-only [pid 5281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5289] write(1, "executing program\n", 18 [pid 5288] <... mprotect resumed>) = 0 [pid 5283] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5281] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5288] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5284] <... mount resumed>) = 0 [pid 5283] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] <... mprotect resumed>) = 0 executing program [pid 5288] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5283] <... futex resumed>) = 0 [pid 5281] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5289] <... write resumed>) = 18 [pid 5288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5283] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5281] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5290 attached [pid 5289] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5291 attached [pid 5290] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5289] <... futex resumed>) = 0 [pid 5288] <... clone3 resumed> => {parent_tid=[5290]}, 88) = 5290 [pid 5284] <... openat resumed>) = 3 [pid 5291] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5290] <... rseq resumed>) = 0 [pid 5289] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5288] rt_sigprocmask(SIG_SETMASK, [], [pid 5284] chdir("./bus" [pid 5281] <... clone3 resumed> => {parent_tid=[5291]}, 88) = 5291 [pid 5291] <... rseq resumed>) = 0 [pid 5290] set_robust_list(0x7f8282ac39a0, 24 [pid 5289] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5281] rt_sigprocmask(SIG_SETMASK, [], [pid 5291] set_robust_list(0x7f8282aa29a0, 24 [pid 5290] <... set_robust_list resumed>) = 0 [pid 5289] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5288] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5291] <... set_robust_list resumed>) = 0 [pid 5290] rt_sigprocmask(SIG_SETMASK, [], [pid 5289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5288] <... futex resumed>) = 0 [pid 5281] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] rt_sigprocmask(SIG_SETMASK, [], [pid 5290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5288] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5281] <... futex resumed>) = 0 [pid 5291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5290] memfd_create("syzkaller", 0 [pid 5289] <... mmap resumed>) = 0x7f8282aa3000 [pid 5284] <... chdir resumed>) = 0 [pid 5281] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5291] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5284] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5290] <... memfd_create resumed>) = 3 [pid 5289] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5284] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5289] <... mprotect resumed>) = 0 [pid 5284] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5290] <... mmap resumed>) = 0x7f827a600000 [pid 5289] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5284] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5282] <... futex resumed>) = 0 [pid 5282] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5292]}, 88) = 5292 [pid 5284] <... futex resumed>) = 0 [pid 5282] <... futex resumed>) = 1 [pid 5284] unlink("./file1"./strace-static-x86_64: Process 5292 attached [pid 5291] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5282] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5291] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... rseq resumed>) = 0 [pid 5291] <... futex resumed>) = 1 [pid 5281] <... futex resumed>) = 0 [pid 5292] set_robust_list(0x7f8282ac39a0, 24 [pid 5289] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5289] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] <... set_robust_list resumed>) = 0 [pid 5289] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5281] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] rt_sigprocmask(SIG_SETMASK, [], [pid 5283] <... futex resumed>) = 0 [pid 5281] <... futex resumed>) = 1 [pid 5292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5291] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5283] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5281] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] memfd_create("syzkaller", 0 [pid 5283] <... open resumed>) = -1 EFAULT (Bad address) [pid 5283] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5281] <... futex resumed>) = 0 [pid 5292] <... memfd_create resumed>) = 3 [pid 5283] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5281] exit_group(0) = ? [pid 5291] <... futex resumed>) = ? [pid 5283] <... futex resumed>) = ? [pid 5283] +++ exited with 0 +++ [ 79.420235][ T5283] ERROR: (device loop1): jfs_unlink: [ 79.420235][ T5283] [ 79.438382][ T5291] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 79.438382][ T5291] [ 79.455559][ T5284] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 79.455559][ T5284] [pid 5292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5291] +++ exited with 0 +++ [pid 5281] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5281, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5082] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", [pid 5292] <... mmap resumed>) = 0x7f827a600000 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5284] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5284] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5282] <... futex resumed>) = 0 [pid 5282] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5282] <... futex resumed>) = 0 [pid 5282] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./14/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5284] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5284] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5284] <... futex resumed>) = 1 [pid 5282] <... futex resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5284] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5282] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... open resumed>) = -1 EFAULT (Bad address) [pid 5282] <... futex resumed>) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5284] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] newfstatat(4, "", [pid 5284] <... futex resumed>) = 0 [pid 5282] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5284] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5282] exit_group(0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5284] <... futex resumed>) = ? [pid 5282] <... exit_group resumed>) = ? [pid 5082] getdents64(4, [pid 5284] +++ exited with 0 +++ [pid 5282] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=14 /* 0.14 s */} --- [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./14/bus") = 0 [pid 5082] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./14/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./14") = 0 [pid 5082] mkdir("./15", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 79.474021][ T5284] ERROR: (device loop4): remounting filesystem as read-only [ 79.481562][ T5284] ERROR: (device loop4): jfs_unlink: [ 79.481562][ T5284] [ 79.500862][ T5284] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 79.500862][ T5284] [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5290] <... write resumed>) = 16777216 [pid 5290] munmap(0x7f827a600000, 138412032) = 0 [pid 5290] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5290] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5290] close(3) = 0 [pid 5290] close(4) = 0 [pid 5290] mkdir("./bus", 0777 [pid 5082] <... ioctl resumed>) = 0 [pid 5290] <... mkdir resumed>) = 0 [pid 5082] close(3 [pid 5290] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5082] <... close resumed>) = 0 [pid 5290] <... mount resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5290] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5290] chdir("./bus" [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5293 [pid 5290] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5293 attached [pid 5290] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5293] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5290] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5293] chdir("./15" [pid 5290] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... chdir resumed>) = 0 [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5290] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5290] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [ 79.700881][ T5290] loop2: detected capacity change from 0 to 32768 [pid 5290] unlink("./file1" [pid 5288] <... futex resumed>) = 0 [pid 5293] <... prctl resumed>) = 0 [pid 5293] setpgid(0, 0) = 0 [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5293] write(3, "1000", 4) = 4 [pid 5293] close(3) = 0 [pid 5293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5293] write(1, "executing program\n", 18 [pid 5288] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}executing program [pid 5293] <... write resumed>) = 18 [pid 5293] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5293] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5293] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5293] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5293] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5294 attached [pid 5294] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5294] set_robust_list(0x7f8282ac39a0, 24) = 0 [ 79.749810][ T5290] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 79.749810][ T5290] [ 79.784246][ T5290] ERROR: (device loop2): remounting filesystem as read-only [ 79.793504][ T5290] ERROR: (device loop2): jfs_unlink: [pid 5294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5293] <... clone3 resumed> => {parent_tid=[5294]}, 88) = 5294 [pid 5292] <... write resumed>) = 16777216 [pid 5294] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5290] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5293] rt_sigprocmask(SIG_SETMASK, [], [pid 5292] munmap(0x7f827a600000, 138412032 [pid 5290] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5293] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] <... futex resumed>) = 0 [pid 5293] <... futex resumed>) = 1 [pid 5294] memfd_create("syzkaller", 0 [pid 5293] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5288] <... futex resumed>) = 0 [pid 5294] <... memfd_create resumed>) = 3 [pid 5288] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5290] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5294] <... mmap resumed>) = 0x7f827a600000 [pid 5290] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5288] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] <... munmap resumed>) = 0 [pid 5292] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5290] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5292] <... openat resumed>) = 4 [pid 5290] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] ioctl(4, LOOP_SET_FD, 3 [pid 5290] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5290] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] newfstatat(AT_FDCWD, "./14/bus", [pid 5288] <... futex resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5288] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5290] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, [pid 5292] <... ioctl resumed>) = 0 [pid 5290] <... open resumed>) = -1 EFAULT (Bad address) [pid 5292] close(3 [pid 5290] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5292] <... close resumed>) = 0 [pid 5290] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5085] close(4 [pid 5292] close(4 [pid 5290] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] exit_group(0 [pid 5290] <... futex resumed>) = ? [pid 5288] <... exit_group resumed>) = ? [pid 5292] <... close resumed>) = 0 [pid 5292] mkdir("./bus", 0777 [pid 5085] <... close resumed>) = 0 [pid 5085] rmdir("./14/bus") = 0 [pid 5085] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5292] <... mkdir resumed>) = 0 [pid 5290] +++ exited with 0 +++ [pid 5288] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5292] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5085] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5083] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5085] unlink("./14/binderfs" [pid 5083] newfstatat(3, "", [pid 5085] <... unlink resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5292] <... mount resumed>) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [ 79.793504][ T5290] [ 79.809931][ T5290] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 79.809931][ T5290] [ 79.835949][ T5292] loop3: detected capacity change from 0 to 32768 [pid 5292] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5085] rmdir("./14" [pid 5292] <... openat resumed>) = 3 [pid 5292] chdir("./bus") = 0 [pid 5292] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5085] <... rmdir resumed>) = 0 [pid 5292] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5292] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = 1 [pid 5292] unlink("./file1" [pid 5289] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] mkdir("./15", 0777 [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... mkdir resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5292] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5292] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5289] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [ 79.883496][ T5292] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 79.883496][ T5292] [ 79.895228][ T5292] ERROR: (device loop3): remounting filesystem as read-only [ 79.904195][ T5292] ERROR: (device loop3): jfs_unlink: [ 79.904195][ T5292] [ 79.924458][ T5292] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [pid 5289] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5292] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5292] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] <... futex resumed>) = 0 [pid 5289] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5292] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5292] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] exit_group(0) = ? [pid 5292] <... futex resumed>) = ? [pid 5292] +++ exited with 0 +++ [pid 5289] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5289, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=18 /* 0.18 s */} --- [pid 5084] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 79.924458][ T5292] [pid 5084] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5084] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./14/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./14/bus") = 0 [pid 5084] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./14/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./14") = 0 [pid 5084] mkdir("./15", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5294] <... write resumed>) = 16777216 [pid 5294] munmap(0x7f827a600000, 138412032 [pid 5085] <... ioctl resumed>) = 0 [pid 5294] <... munmap resumed>) = 0 [pid 5085] close(3 [pid 5294] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5294] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5295 attached [pid 5295] set_robust_list(0x555571ec36a0, 24 [pid 5294] <... ioctl resumed>) = 0 [pid 5294] close(3) = 0 [pid 5294] close(4) = 0 [pid 5294] mkdir("./bus", 0777 [pid 5295] <... set_robust_list resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5295 [pid 5294] <... mkdir resumed>) = 0 [pid 5295] chdir("./15" [pid 5294] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5295] <... chdir resumed>) = 0 [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5295] setpgid(0, 0) = 0 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5295] write(3, "1000", 4) = 4 [pid 5294] <... mount resumed>) = 0 [pid 5294] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5294] chdir("./bus") = 0 [ 80.054476][ T5294] loop1: detected capacity change from 0 to 32768 [pid 5294] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5294] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5293] <... futex resumed>) = 0 [pid 5294] unlink("./file1" [pid 5293] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] close(3 [pid 5293] <... futex resumed>) = 0 [pid 5295] <... close resumed>) = 0 [pid 5295] symlink("/dev/binderfs", "./binderfs" [pid 5293] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... symlink resumed>) = 0 executing program [pid 5295] write(1, "executing program\n", 18) = 18 [pid 5295] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5295] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5294] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5296 attached [pid 5084] close(3 [pid 5083] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5296] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5295] <... clone3 resumed> => {parent_tid=[5296]}, 88) = 5296 [pid 5294] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5296] <... rseq resumed>) = 0 [pid 5295] rt_sigprocmask(SIG_SETMASK, [], [pid 5294] <... futex resumed>) = 1 [pid 5293] <... futex resumed>) = 0 [ 80.106482][ T5294] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 80.106482][ T5294] [ 80.123855][ T5294] ERROR: (device loop1): remounting filesystem as read-only [ 80.133887][ T5294] ERROR: (device loop1): jfs_unlink: [ 80.133887][ T5294] [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5296] set_robust_list(0x7f8282ac39a0, 24 [pid 5295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5294] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5293] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] newfstatat(AT_FDCWD, "./14/bus", [pid 5295] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = 0 [pid 5296] <... set_robust_list resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5293] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] rt_sigprocmask(SIG_SETMASK, [], [pid 5295] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5294] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5297 attached [pid 5296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5294] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5297 [pid 5083] umount2("./14/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5297] set_robust_list(0x555571ec36a0, 24 [pid 5296] memfd_create("syzkaller", 0 [pid 5294] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5297] <... set_robust_list resumed>) = 0 [pid 5296] <... memfd_create resumed>) = 3 [pid 5294] <... futex resumed>) = 1 [pid 5293] <... futex resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5297] chdir("./15" [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5294] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5293] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] newfstatat(4, "", [pid 5294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5293] <... futex resumed>) = 0 [pid 5297] <... chdir resumed>) = 0 [pid 5296] <... mmap resumed>) = 0x7f827a600000 [pid 5294] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5293] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5294] <... open resumed>) = -1 EFAULT (Bad address) [pid 5297] <... prctl resumed>) = 0 [pid 5294] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] getdents64(4, [pid 5297] setpgid(0, 0 [pid 5293] exit_group(0 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5297] <... setpgid resumed>) = 0 [pid 5294] <... futex resumed>) = 0 [pid 5293] <... exit_group resumed>) = ? [pid 5083] getdents64(4, [pid 5297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./14/bus") = 0 [pid 5083] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./14/binderfs") = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./14" [pid 5294] +++ exited with 0 +++ [pid 5293] +++ exited with 0 +++ [pid 5083] <... rmdir resumed>) = 0 [pid 5083] mkdir("./15", 0777 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5297] <... openat resumed>) = 3 [pid 5297] write(3, "1000", 4 [pid 5083] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5297] <... write resumed>) = 4 [pid 5297] close(3) = 0 [pid 5297] symlink("/dev/binderfs", "./binderfs" [pid 5082] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5297] <... symlink resumed>) = 0 [pid 5297] write(1, "executing program\n", 18 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) executing program [pid 5297] <... write resumed>) = 18 [pid 5082] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5297] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] newfstatat(3, "", [pid 5297] <... futex resumed>) = 0 [pid 5297] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5297] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5297] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5297] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5297] <... mmap resumed>) = 0x7f8282aa3000 [pid 5297] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5297] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5297] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5082] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5298 attached ) = -1 EINVAL (Invalid argument) [pid 5298] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5297] <... clone3 resumed> => {parent_tid=[5298]}, 88) = 5298 [pid 5082] newfstatat(AT_FDCWD, "./15/bus", [pid 5298] <... rseq resumed>) = 0 [pid 5298] set_robust_list(0x7f8282ac39a0, 24 [pid 5297] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5298] <... set_robust_list resumed>) = 0 [pid 5297] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5298] rt_sigprocmask(SIG_SETMASK, [], [pid 5297] <... futex resumed>) = 0 [pid 5298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5297] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] <... openat resumed>) = 4 [pid 5298] memfd_create("syzkaller", 0 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, [pid 5298] <... memfd_create resumed>) = 3 [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4 [pid 5298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] <... close resumed>) = 0 [pid 5298] <... mmap resumed>) = 0x7f827a600000 [pid 5082] rmdir("./15/bus") = 0 [pid 5082] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./15/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./15") = 0 [ 80.161721][ T5294] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 80.161721][ T5294] [pid 5082] mkdir("./16", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5299 [pid 5082] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5299 attached [pid 5299] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5299] chdir("./15") = 0 [pid 5299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5299] setpgid(0, 0) = 0 [pid 5299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1000", 4 [pid 5082] close(3 [pid 5299] <... write resumed>) = 4 [pid 5082] <... close resumed>) = 0 [pid 5299] close(3 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5299] <... close resumed>) = 0 [pid 5299] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5300 attached ) = 0 executing program [pid 5300] set_robust_list(0x555571ec36a0, 24 [pid 5299] write(1, "executing program\n", 18 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5300 [pid 5300] <... set_robust_list resumed>) = 0 [pid 5299] <... write resumed>) = 18 [pid 5300] chdir("./16" [pid 5299] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5300] <... chdir resumed>) = 0 [pid 5299] <... futex resumed>) = 0 [pid 5300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5300] setpgid(0, 0 [pid 5299] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5300] <... setpgid resumed>) = 0 [pid 5299] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5299] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5299] <... mprotect resumed>) = 0 [pid 5299] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5301]}, 88) = 5301 [pid 5299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5299] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5299] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5301 attached [pid 5300] <... openat resumed>) = 3 [pid 5301] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5300] write(3, "1000", 4 [pid 5301] <... rseq resumed>) = 0 [pid 5300] <... write resumed>) = 4 [pid 5301] set_robust_list(0x7f8282ac39a0, 24 [pid 5300] close(3 [pid 5301] <... set_robust_list resumed>) = 0 [pid 5300] <... close resumed>) = 0 [pid 5301] rt_sigprocmask(SIG_SETMASK, [], [pid 5300] symlink("/dev/binderfs", "./binderfs" [pid 5301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5301] memfd_create("syzkaller", 0 [pid 5300] <... symlink resumed>) = 0 [pid 5301] <... memfd_create resumed>) = 3 [pid 5300] write(1, "executing program\n", 18executing program [pid 5301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5300] <... write resumed>) = 18 [pid 5300] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... mmap resumed>) = 0x7f827a600000 [pid 5300] <... futex resumed>) = 0 [pid 5300] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5300] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5300] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5300] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5302 attached => {parent_tid=[5302]}, 88) = 5302 [pid 5302] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5302] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5302] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5300] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] <... futex resumed>) = 0 [pid 5300] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5302] memfd_create("syzkaller", 0) = 3 [pid 5296] <... write resumed>) = 16777216 [pid 5302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5296] munmap(0x7f827a600000, 138412032 [pid 5298] <... write resumed>) = 16777216 [pid 5298] munmap(0x7f827a600000, 138412032 [pid 5296] <... munmap resumed>) = 0 [pid 5296] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5296] ioctl(4, LOOP_SET_FD, 3 [pid 5298] <... munmap resumed>) = 0 [pid 5296] <... ioctl resumed>) = 0 [pid 5296] close(3) = 0 [pid 5298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5296] close(4 [pid 5298] ioctl(4, LOOP_SET_FD, 3 [pid 5296] <... close resumed>) = 0 [pid 5296] mkdir("./bus", 0777) = 0 [pid 5296] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5298] <... ioctl resumed>) = 0 [pid 5296] <... mount resumed>) = 0 [pid 5296] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5298] close(3) = 0 [pid 5296] <... openat resumed>) = 3 [pid 5298] close(4) = 0 [pid 5296] chdir("./bus" [pid 5298] mkdir("./bus", 0777 [pid 5296] <... chdir resumed>) = 0 [pid 5296] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5298] <... mkdir resumed>) = 0 [pid 5296] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5296] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5295] <... futex resumed>) = 0 [pid 5295] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 80.552941][ T5296] loop4: detected capacity change from 0 to 32768 [ 80.575715][ T5298] loop3: detected capacity change from 0 to 32768 [pid 5298] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5296] unlink("./file1" [pid 5301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5298] <... mount resumed>) = 0 [pid 5298] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5298] chdir("./bus") = 0 [pid 5298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5298] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5297] <... futex resumed>) = 0 [pid 5298] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5297] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5297] <... futex resumed>) = 0 [pid 5298] unlink("./file1" [pid 5297] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5295] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [ 80.606083][ T5296] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 80.606083][ T5296] [ 80.636775][ T5296] ERROR: (device loop4): remounting filesystem as read-only [ 80.638131][ T5298] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 80.638131][ T5298] [pid 5295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5303]}, 88) = 5303 [pid 5295] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5303 attached [pid 5303] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5303] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5296] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5295] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5303] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5296] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] <... futex resumed>) = 0 [ 80.657261][ T5296] ERROR: (device loop4): jfs_unlink: [ 80.657261][ T5296] [ 80.679339][ T5303] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 80.679339][ T5303] [ 80.686358][ T5298] ERROR: (device loop3): remounting filesystem as read-only [pid 5296] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5303] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5303] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... futex resumed>) = 0 [pid 5303] <... futex resumed>) = 1 [pid 5303] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5295] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5296] <... futex resumed>) = 0 [pid 5296] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5295] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] <... open resumed>) = -1 EFAULT (Bad address) [pid 5297] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5296] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5295] <... futex resumed>) = 0 [pid 5297] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] exit_group(0 [pid 5296] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5297] <... futex resumed>) = 0 [pid 5297] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5297] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5303] <... futex resumed>) = ? [pid 5297] <... mprotect resumed>) = 0 [pid 5296] <... futex resumed>) = ? [pid 5295] <... exit_group resumed>) = ? [pid 5303] +++ exited with 0 +++ [pid 5297] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5297] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5304]}, 88) = 5304 [pid 5297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5297] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5297] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5304 attached [pid 5304] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5304] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5304] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5296] +++ exited with 0 +++ [pid 5295] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5304] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5304] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5297] <... futex resumed>) = 0 [pid 5304] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5297] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5304] <... open resumed>) = -1 EFAULT (Bad address) [pid 5297] <... futex resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 80.703898][ T5298] ERROR: (device loop3): jfs_unlink: [ 80.703898][ T5298] [pid 5304] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5297] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... openat resumed>) = 3 [pid 5304] <... futex resumed>) = 0 [pid 5304] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5298] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5298] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5298] <... futex resumed>) = 0 [pid 5085] newfstatat(AT_FDCWD, "./15/bus", [pid 5298] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5297] exit_group(0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5304] <... futex resumed>) = ? [pid 5298] <... futex resumed>) = ? [pid 5297] <... exit_group resumed>) = ? [pid 5085] <... openat resumed>) = 4 [pid 5304] +++ exited with 0 +++ [pid 5298] +++ exited with 0 +++ [pid 5297] +++ exited with 0 +++ [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5297, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, [pid 5084] <... restart_syscall resumed>) = 0 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5084] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] rmdir("./15/bus" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(3, "", [pid 5085] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./15/binderfs" [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... unlink resumed>) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./15") = 0 [pid 5085] mkdir("./16", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5301] <... write resumed>) = 16777216 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 80.727955][ T5298] ERROR: (device loop3): remounting filesystem as read-only [ 80.762262][ T5084] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 80.762262][ T5084] [pid 5301] munmap(0x7f827a600000, 138412032 [pid 5084] newfstatat(AT_FDCWD, "./15/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./15/bus") = 0 [pid 5084] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./15/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5301] <... munmap resumed>) = 0 [pid 5084] close(3 [pid 5301] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... close resumed>) = 0 [pid 5301] <... openat resumed>) = 4 [pid 5084] rmdir("./15") = 0 [pid 5301] ioctl(4, LOOP_SET_FD, 3 [pid 5084] mkdir("./16", 0777) = 0 [pid 5301] <... ioctl resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5301] close(3) = 0 [pid 5301] close(4) = 0 [pid 5301] mkdir("./bus", 0777) = 0 [pid 5301] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5301] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5301] chdir("./bus") = 0 [pid 5301] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5301] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5299] <... futex resumed>) = 0 [pid 5301] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5299] <... futex resumed>) = 0 [pid 5301] unlink("./file1" [pid 5299] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... write resumed>) = 16777216 [ 80.830658][ T5301] loop2: detected capacity change from 0 to 32768 [ 80.868321][ T5301] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 80.868321][ T5301] [pid 5302] munmap(0x7f827a600000, 138412032) = 0 [pid 5299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5299] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5299] <... futex resumed>) = 0 [pid 5301] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5302] <... openat resumed>) = 4 [pid 5299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5302] ioctl(4, LOOP_SET_FD, 3 [pid 5299] <... mmap resumed>) = 0x7f8282a82000 [ 80.881862][ T5301] ERROR: (device loop2): remounting filesystem as read-only [ 80.916222][ T5301] ERROR: (device loop2): jfs_unlink: [ 80.916222][ T5301] [pid 5301] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5301] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5302] <... ioctl resumed>) = 0 [pid 5299] <... mprotect resumed>) = 0 [pid 5302] close(3 [pid 5299] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... ioctl resumed>) = 0 [pid 5302] <... close resumed>) = 0 [pid 5299] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5302] close(4 [pid 5299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5302] <... close resumed>) = 0 ./strace-static-x86_64: Process 5305 attached [pid 5302] mkdir("./bus", 0777 [pid 5085] close(3 [pid 5305] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5085] <... close resumed>) = 0 [pid 5299] <... clone3 resumed> => {parent_tid=[5305]}, 88) = 5305 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5305] <... rseq resumed>) = 0 [pid 5302] <... mkdir resumed>) = 0 [pid 5299] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5306 attached [pid 5305] set_robust_list(0x7f8282aa29a0, 24 [pid 5302] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5306 [pid 5306] set_robust_list(0x555571ec36a0, 24 [pid 5305] <... set_robust_list resumed>) = 0 [pid 5299] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5305] rt_sigprocmask(SIG_SETMASK, [], [pid 5299] <... futex resumed>) = 0 [pid 5305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5299] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5305] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5306] <... set_robust_list resumed>) = 0 [pid 5306] chdir("./16") = 0 [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5302] <... mount resumed>) = 0 [pid 5306] <... prctl resumed>) = 0 [pid 5306] setpgid(0, 0) = 0 [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5302] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5306] write(3, "1000", 4 [pid 5302] <... openat resumed>) = 3 [pid 5306] <... write resumed>) = 4 [pid 5302] chdir("./bus" [pid 5306] close(3 [pid 5302] <... chdir resumed>) = 0 [pid 5305] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5306] <... close resumed>) = 0 [pid 5302] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5306] symlink("/dev/binderfs", "./binderfs" [pid 5302] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5302] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5302] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULLexecuting program [pid 5306] <... symlink resumed>) = 0 [pid 5306] write(1, "executing program\n", 18 [pid 5305] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5306] <... write resumed>) = 18 [pid 5305] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5299] <... futex resumed>) = 0 [pid 5305] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5306] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] <... futex resumed>) = 0 [pid 5300] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] <... futex resumed>) = 1 [pid 5084] <... ioctl resumed>) = 0 [ 80.948703][ T5302] loop1: detected capacity change from 0 to 32768 [ 80.985072][ T5305] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 80.985072][ T5305] [pid 5306] <... futex resumed>) = 0 [pid 5302] <... futex resumed>) = 0 [pid 5301] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5300] <... futex resumed>) = 1 [pid 5299] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] close(3 [pid 5306] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5302] unlink("./file1" [pid 5301] <... open resumed>) = -1 EFAULT (Bad address) [pid 5300] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5306] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5084] <... close resumed>) = 0 [pid 5306] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5306] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5301] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5307 attached [pid 5306] <... mprotect resumed>) = 0 [pid 5306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5308 attached [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5307 [pid 5306] <... clone3 resumed> => {parent_tid=[5308]}, 88) = 5308 [pid 5308] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5306] rt_sigprocmask(SIG_SETMASK, [], [pid 5308] <... rseq resumed>) = 0 [pid 5306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5306] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] set_robust_list(0x7f8282ac39a0, 24 [pid 5306] <... futex resumed>) = 0 [pid 5308] <... set_robust_list resumed>) = 0 [pid 5308] rt_sigprocmask(SIG_SETMASK, [], [pid 5306] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5308] memfd_create("syzkaller", 0) = 3 [pid 5307] set_robust_list(0x555571ec36a0, 24 [pid 5302] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5301] <... futex resumed>) = 1 [pid 5308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5299] <... futex resumed>) = 0 [pid 5307] <... set_robust_list resumed>) = 0 [pid 5302] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5301] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] exit_group(0 [pid 5308] <... mmap resumed>) = 0x7f827a600000 [pid 5307] chdir("./16" [pid 5305] <... futex resumed>) = ? [pid 5302] <... futex resumed>) = 1 [pid 5301] <... futex resumed>) = ? [pid 5300] <... futex resumed>) = 0 [pid 5299] <... exit_group resumed>) = ? [pid 5307] <... chdir resumed>) = 0 [pid 5305] +++ exited with 0 +++ [pid 5302] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5301] +++ exited with 0 +++ [pid 5300] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5300] <... futex resumed>) = 0 [pid 5307] <... prctl resumed>) = 0 [pid 5302] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5300] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5307] setpgid(0, 0 [pid 5299] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5299, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5307] <... setpgid resumed>) = 0 [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5083] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5307] write(3, "1000", 4 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5307] <... write resumed>) = 4 [pid 5307] close(3) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5083] newfstatat(3, "", [pid 5307] symlink("/dev/binderfs", "./binderfs" [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5307] <... symlink resumed>) = 0 [pid 5083] getdents64(3, [pid 5307] write(1, "executing program\n", 18executing program [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5307] <... write resumed>) = 18 [pid 5307] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5307] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5307] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5309]}, 88) = 5309 [pid 5307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5307] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5309 attached [pid 5309] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5309] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5309] memfd_create("syzkaller", 0) = 3 [pid 5309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5083] <... umount2 resumed>) = 0 [pid 5083] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./15/bus", [pid 5302] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5302] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./15/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5302] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5300] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5300] <... futex resumed>) = 0 [pid 5300] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 4 [pid 5302] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5083] newfstatat(4, "", [pid 5302] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5302] <... futex resumed>) = 1 [pid 5300] <... futex resumed>) = 0 [pid 5083] getdents64(4, [pid 5300] exit_group(0 [pid 5302] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5300] <... exit_group resumed>) = ? [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5302] <... futex resumed>) = ? [pid 5302] +++ exited with 0 +++ [pid 5300] +++ exited with 0 +++ [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5300, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5083] rmdir("./15/bus" [pid 5082] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] <... rmdir resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... openat resumed>) = 3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(3, "", [pid 5083] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] unlink("./15/binderfs" [pid 5082] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... unlink resumed>) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./15") = 0 [pid 5083] mkdir("./16", 0777) = 0 [ 81.021586][ T5302] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 81.021586][ T5302] [ 81.039333][ T5302] ERROR: (device loop1): remounting filesystem as read-only [ 81.046802][ T5302] ERROR: (device loop1): jfs_unlink: [ 81.046802][ T5302] [ 81.057789][ T5302] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 81.057789][ T5302] [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./16/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./16/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./16/bus") = 0 [pid 5082] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./16/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./16") = 0 [pid 5082] mkdir("./17", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(3 [pid 5082] <... ioctl resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5310 attached , child_tidptr=0x555571ec3690) = 5310 [pid 5310] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5310] chdir("./16") = 0 [pid 5310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5310] setpgid(0, 0) = 0 [pid 5310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5310] write(3, "1000", 4) = 4 [pid 5310] close(3) = 0 [pid 5310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5310] write(1, "executing program\n", 18) = 18 [pid 5082] close(3) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5310] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5310] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5310] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5311 executing program ./strace-static-x86_64: Process 5311 attached [pid 5310] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5311] set_robust_list(0x555571ec36a0, 24 [pid 5310] <... mprotect resumed>) = 0 [pid 5311] <... set_robust_list resumed>) = 0 [pid 5310] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5311] chdir("./17" [pid 5310] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5311] <... chdir resumed>) = 0 [pid 5310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5310] <... clone3 resumed> => {parent_tid=[5312]}, 88) = 5312 [pid 5311] setpgid(0, 0 [pid 5310] rt_sigprocmask(SIG_SETMASK, [], [pid 5311] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5312 attached [pid 5312] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5312] <... rseq resumed>) = 0 [pid 5311] <... openat resumed>) = 3 [pid 5310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5312] set_robust_list(0x7f8282ac39a0, 24 [pid 5311] write(3, "1000", 4 [pid 5310] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... set_robust_list resumed>) = 0 [pid 5312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5312] memfd_create("syzkaller", 0 [pid 5311] <... write resumed>) = 4 [pid 5310] <... futex resumed>) = 0 [pid 5312] <... memfd_create resumed>) = 3 [pid 5311] close(3 [pid 5310] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5311] <... close resumed>) = 0 [pid 5312] <... mmap resumed>) = 0x7f827a600000 [pid 5311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5311] write(1, "executing program\n", 18executing program ) = 18 [pid 5311] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5308] <... write resumed>) = 16777216 [pid 5311] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5308] munmap(0x7f827a600000, 138412032 [pid 5311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5311] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5313 attached [pid 5313] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5313] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5313] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] <... clone3 resumed> => {parent_tid=[5313]}, 88) = 5313 [pid 5311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5311] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] <... futex resumed>) = 0 [pid 5311] <... futex resumed>) = 1 [pid 5313] memfd_create("syzkaller", 0 [pid 5308] <... munmap resumed>) = 0 [pid 5311] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5308] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5313] <... memfd_create resumed>) = 3 [pid 5308] <... openat resumed>) = 4 [pid 5313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5308] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5308] close(3) = 0 [pid 5308] close(4) = 0 [pid 5308] mkdir("./bus", 0777) = 0 [pid 5308] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5308] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5308] chdir("./bus") = 0 [pid 5308] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5308] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5306] <... futex resumed>) = 0 [pid 5308] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5306] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... write resumed>) = 16777216 [pid 5308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5306] <... futex resumed>) = 0 [pid 5306] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] munmap(0x7f827a600000, 138412032 [pid 5308] unlink("./file1" [pid 5309] <... munmap resumed>) = 0 [pid 5309] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 81.430594][ T5308] loop4: detected capacity change from 0 to 32768 [ 81.467099][ T5308] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 81.467099][ T5308] [pid 5309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5309] close(3) = 0 [pid 5309] close(4) = 0 [pid 5306] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5309] mkdir("./bus", 0777 [pid 5306] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... mkdir resumed>) = 0 [pid 5306] <... futex resumed>) = 0 [pid 5306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5309] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5308] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5306] <... mmap resumed>) = 0x7f8282a82000 [pid 5308] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5306] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5308] <... futex resumed>) = 0 [pid 5306] <... mprotect resumed>) = 0 [pid 5308] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5306] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5314 attached [pid 5314] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5306] <... clone3 resumed> => {parent_tid=[5314]}, 88) = 5314 [pid 5314] <... rseq resumed>) = 0 [pid 5314] set_robust_list(0x7f8282aa29a0, 24 [pid 5306] rt_sigprocmask(SIG_SETMASK, [], [pid 5314] <... set_robust_list resumed>) = 0 [pid 5306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5314] rt_sigprocmask(SIG_SETMASK, [], [pid 5306] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5309] <... mount resumed>) = 0 [ 81.487598][ T5309] loop3: detected capacity change from 0 to 32768 [ 81.495982][ T5308] ERROR: (device loop4): remounting filesystem as read-only [ 81.514036][ T5308] ERROR: (device loop4): jfs_unlink: [ 81.514036][ T5308] [pid 5306] <... futex resumed>) = 0 [pid 5314] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5309] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5306] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... openat resumed>) = 3 [pid 5309] chdir("./bus") = 0 [pid 5309] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5309] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5307] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] unlink("./file1" [pid 5312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5314] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5314] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5306] <... futex resumed>) = 0 [pid 5306] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5306] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] <... futex resumed>) = 0 [pid 5309] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5308] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5308] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5308] <... futex resumed>) = 1 [pid 5306] <... futex resumed>) = 0 [pid 5306] exit_group(0 [pid 5308] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5306] <... exit_group resumed>) = ? [pid 5314] <... futex resumed>) = ? [pid 5308] +++ exited with 0 +++ [pid 5314] +++ exited with 0 +++ [pid 5306] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5306, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} --- [ 81.531789][ T5314] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 81.531789][ T5314] [ 81.551661][ T5309] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 81.551661][ T5309] [ 81.572190][ T5309] ERROR: (device loop3): remounting filesystem as read-only [ 81.580200][ T5309] ERROR: (device loop3): jfs_unlink: [ 81.580200][ T5309] [pid 5309] <... futex resumed>) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5085] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5309] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5309] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5307] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5309] <... open resumed>) = -1 EFAULT (Bad address) [pid 5307] <... futex resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5307] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] newfstatat(3, "", [pid 5309] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5309] <... futex resumed>) = 0 [pid 5307] exit_group(0 [pid 5085] getdents64(3, [pid 5307] <... exit_group resumed>) = ? [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5309] +++ exited with 0 +++ [pid 5307] +++ exited with 0 +++ [pid 5085] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... umount2 resumed>) = 0 [pid 5085] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./16/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./16/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./16/bus") = 0 [pid 5085] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./16/binderfs") = 0 [ 81.594489][ T5309] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 81.594489][ T5309] [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./16") = 0 [pid 5085] mkdir("./17", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5312] <... write resumed>) = 16777216 [pid 5312] munmap(0x7f827a600000, 138412032) = 0 [pid 5312] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5312] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5313] <... write resumed>) = 16777216 [pid 5313] munmap(0x7f827a600000, 138412032 [pid 5312] close(3 [pid 5313] <... munmap resumed>) = 0 [pid 5312] <... close resumed>) = 0 [pid 5313] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5312] close(4) = 0 [pid 5312] mkdir("./bus", 0777 [pid 5313] <... openat resumed>) = 4 [pid 5312] <... mkdir resumed>) = 0 [pid 5313] ioctl(4, LOOP_SET_FD, 3 [pid 5312] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5313] <... ioctl resumed>) = 0 [pid 5313] close(3) = 0 [pid 5313] close(4) = 0 [pid 5313] mkdir("./bus", 0777 [pid 5312] <... mount resumed>) = 0 [pid 5313] <... mkdir resumed>) = 0 [pid 5312] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5313] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5312] chdir("./bus") = 0 [pid 5312] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5312] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] <... futex resumed>) = 0 [pid 5312] <... futex resumed>) = 1 [pid 5310] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] unlink("./file1" [pid 5310] <... futex resumed>) = 0 [ 81.756098][ T5312] loop2: detected capacity change from 0 to 32768 [ 81.790058][ T5313] loop1: detected capacity change from 0 to 32768 [pid 5310] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5312] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5312] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] <... futex resumed>) = 0 [pid 5312] <... futex resumed>) = 1 [pid 5312] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5310] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5310] <... futex resumed>) = 0 [pid 5313] <... mount resumed>) = 0 [pid 5310] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5312] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] <... openat resumed>) = 3 [pid 5312] <... futex resumed>) = 0 [pid 5310] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5310] <... futex resumed>) = 0 [pid 5312] <... open resumed>) = -1 EFAULT (Bad address) [pid 5310] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] chdir("./bus" [pid 5312] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] <... chdir resumed>) = 0 [pid 5312] <... futex resumed>) = 0 [pid 5313] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5310] exit_group(0 [pid 5085] <... ioctl resumed>) = 0 [pid 5313] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5310] <... exit_group resumed>) = ? [pid 5085] close(3 [pid 5313] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... close resumed>) = 0 [ 81.814562][ T5312] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 81.814562][ T5312] [ 81.831036][ T5312] ERROR: (device loop2): remounting filesystem as read-only [ 81.838517][ T5312] ERROR: (device loop2): jfs_unlink: [ 81.838517][ T5312] [ 81.847251][ T5312] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 81.847251][ T5312] [pid 5313] <... futex resumed>) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5313] unlink("./file1" [pid 5311] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5311] <... futex resumed>) = 0 [pid 5311] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5315 attached [pid 5312] +++ exited with 0 +++ [pid 5310] +++ exited with 0 +++ [pid 5315] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5315 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5310, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5315] chdir("./17" [pid 5084] <... umount2 resumed>) = 0 [pid 5315] <... chdir resumed>) = 0 [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5083] <... restart_syscall resumed>) = 0 [pid 5315] setpgid(0, 0) = 0 [pid 5084] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5315] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5315] write(3, "1000", 4 [pid 5083] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5315] <... write resumed>) = 4 [pid 5315] close(3 [pid 5084] newfstatat(AT_FDCWD, "./16/bus", [pid 5083] <... openat resumed>) = 3 [pid 5315] <... close resumed>) = 0 [pid 5315] symlink("/dev/binderfs", "./binderfs" [pid 5083] newfstatat(3, "", [pid 5315] <... symlink resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5315] write(1, "executing program\n", 18 [pid 5084] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5315] <... write resumed>) = 18 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] getdents64(3, [pid 5315] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./16/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5315] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5315] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5084] newfstatat(4, "", [pid 5083] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5315] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5315] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] getdents64(4, [pid 5315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] getdents64(4, [pid 5315] <... mmap resumed>) = 0x7f8282aa3000 [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5315] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5084] close(4 [pid 5315] <... mprotect resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5315] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] rmdir("./16/bus" [pid 5315] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5084] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5316 attached [pid 5084] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5316] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5315] <... clone3 resumed> => {parent_tid=[5316]}, 88) = 5316 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5316] <... rseq resumed>) = 0 [pid 5315] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] unlink("./16/binderfs" [pid 5316] set_robust_list(0x7f8282ac39a0, 24 [pid 5315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5316] <... set_robust_list resumed>) = 0 [pid 5315] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, [pid 5316] rt_sigprocmask(SIG_SETMASK, [], [pid 5315] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5315] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] close(3) = 0 [pid 5316] memfd_create("syzkaller", 0 [pid 5084] rmdir("./16" [pid 5316] <... memfd_create resumed>) = 3 [pid 5084] <... rmdir resumed>) = 0 [pid 5316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5084] mkdir("./17", 0777 [pid 5316] <... mmap resumed>) = 0x7f827a600000 [pid 5084] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 81.885434][ T5313] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 81.885434][ T5313] [ 81.905554][ T5313] ERROR: (device loop1): remounting filesystem as read-only [ 81.929170][ T5313] ERROR: (device loop1): jfs_unlink: [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5311] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5311] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5313] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5311] <... mmap resumed>) = 0x7f8282a82000 [pid 5313] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5313] <... futex resumed>) = 0 [ 81.929170][ T5313] [pid 5313] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] <... mprotect resumed>) = 0 [pid 5311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5317]}, 88) = 5317 ./strace-static-x86_64: Process 5317 attached [pid 5317] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053) = 0 [pid 5317] set_robust_list(0x7f8282aa29a0, 24 [pid 5311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5311] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5317] <... set_robust_list resumed>) = 0 [pid 5317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5317] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5317] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5317] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5317] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5313] <... futex resumed>) = 0 [pid 5311] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5313] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5311] <... futex resumed>) = 0 [pid 5311] exit_group(0 [pid 5317] <... futex resumed>) = ? [pid 5311] <... exit_group resumed>) = ? [pid 5317] +++ exited with 0 +++ [pid 5313] +++ exited with 0 +++ [pid 5311] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5311, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} --- [pid 5082] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 81.994774][ T5317] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 81.994774][ T5317] [pid 5082] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5316] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5318 attached [pid 5316] munmap(0x7f827a600000, 138412032 [pid 5318] set_robust_list(0x555571ec36a0, 24 [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5318 [pid 5318] <... set_robust_list resumed>) = 0 [pid 5316] <... munmap resumed>) = 0 [pid 5318] chdir("./17") = 0 [pid 5318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5316] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5318] <... prctl resumed>) = 0 [pid 5316] <... openat resumed>) = 4 [pid 5318] setpgid(0, 0) = 0 [pid 5318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5316] ioctl(4, LOOP_SET_FD, 3 [pid 5318] <... openat resumed>) = 3 [pid 5318] write(3, "1000", 4) = 4 [pid 5318] close(3) = 0 [pid 5318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5318] write(1, "executing program\n", 18executing program ) = 18 [pid 5318] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5318] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5318] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5318] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5319]}, 88) = 5319 ./strace-static-x86_64: Process 5319 attached [pid 5319] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5318] rt_sigprocmask(SIG_SETMASK, [], [pid 5319] <... rseq resumed>) = 0 [pid 5319] set_robust_list(0x7f8282ac39a0, 24 [pid 5318] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5319] <... set_robust_list resumed>) = 0 [pid 5319] rt_sigprocmask(SIG_SETMASK, [], [pid 5318] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5318] <... futex resumed>) = 0 [pid 5318] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5316] <... ioctl resumed>) = 0 [pid 5319] memfd_create("syzkaller", 0 [pid 5316] close(3) = 0 [pid 5316] close(4) = 0 [pid 5319] <... memfd_create resumed>) = 3 [pid 5316] mkdir("./bus", 0777 [pid 5319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5316] <... mkdir resumed>) = 0 [pid 5319] <... mmap resumed>) = 0x7f827a600000 [ 82.121968][ T5316] loop4: detected capacity change from 0 to 32768 [pid 5316] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5316] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5316] chdir("./bus") = 0 [pid 5316] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] <... umount2 resumed>) = 0 [pid 5083] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5316] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5083] newfstatat(AT_FDCWD, "./16/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5316] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./16/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5316] <... futex resumed>) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5316] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5315] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "./16/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5316] unlink("./file1" [pid 5315] <... futex resumed>) = 0 [pid 5315] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./16/bus") = 0 [pid 5083] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./16/binderfs") = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./16") = 0 [pid 5083] mkdir("./17", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5316] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5316] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5315] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] <... futex resumed>) = 1 [pid 5315] <... futex resumed>) = 0 [ 82.198381][ T5316] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 82.198381][ T5316] [ 82.221494][ T5316] ERROR: (device loop4): remounting filesystem as read-only [ 82.229875][ T5316] ERROR: (device loop4): jfs_unlink: [ 82.229875][ T5316] [pid 5315] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [pid 5316] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5316] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5315] <... futex resumed>) = 0 [pid 5315] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5315] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5316] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5315] <... futex resumed>) = 0 [pid 5315] exit_group(0) = ? [pid 5316] <... futex resumed>) = ? [pid 5316] +++ exited with 0 +++ [pid 5315] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5315, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5085] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5085] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./17/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./17/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [ 82.261659][ T5316] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 82.261659][ T5316] [pid 5085] rmdir("./17/bus" [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./17/bus", [pid 5085] <... rmdir resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./17/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... openat resumed>) = 4 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(4, "", [pid 5085] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] getdents64(4, [pid 5085] unlink("./17/binderfs" [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] <... unlink resumed>) = 0 [pid 5082] getdents64(4, [pid 5085] getdents64(3, [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5082] close(4 [pid 5085] <... close resumed>) = 0 [pid 5085] rmdir("./17" [pid 5082] <... close resumed>) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5085] mkdir("./18", 0777 [pid 5082] rmdir("./17/bus" [pid 5085] <... mkdir resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] <... rmdir resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5082] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./17/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./17") = 0 [pid 5082] mkdir("./18", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5319] <... write resumed>) = 16777216 [pid 5319] munmap(0x7f827a600000, 138412032) = 0 [pid 5319] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5319] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5319] close(3) = 0 [pid 5319] close(4) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5319] mkdir("./bus", 0777 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5319] <... mkdir resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5320 ./strace-static-x86_64: Process 5320 attached [pid 5320] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5320] chdir("./17") = 0 [pid 5320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5320] setpgid(0, 0) = 0 [pid 5320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5320] write(3, "1000", 4) = 4 [pid 5320] close(3) = 0 [ 82.359276][ T5319] loop3: detected capacity change from 0 to 32768 executing program [pid 5319] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5320] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5320] write(1, "executing program\n", 18) = 18 [pid 5320] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5320] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5320] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5320] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5320] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5321 attached [pid 5321] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5321] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5321] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] <... clone3 resumed> => {parent_tid=[5321]}, 88) = 5321 [pid 5320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5320] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5321] <... futex resumed>) = 0 [pid 5321] memfd_create("syzkaller", 0 [pid 5320] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5321] <... memfd_create resumed>) = 3 [pid 5321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5319] <... mount resumed>) = 0 [pid 5319] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5319] chdir("./bus") = 0 [pid 5319] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5319] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5318] <... futex resumed>) = 0 [pid 5319] unlink("./file1" [pid 5318] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5318] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5319] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] <... futex resumed>) = 0 [pid 5319] <... futex resumed>) = 1 [pid 5318] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 82.459701][ T5319] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 82.459701][ T5319] [ 82.474719][ T5319] ERROR: (device loop3): remounting filesystem as read-only [ 82.499194][ T5319] ERROR: (device loop3): jfs_unlink: [ 82.499194][ T5319] [pid 5318] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5082] <... ioctl resumed>) = 0 [pid 5319] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5318] <... futex resumed>) = 0 [pid 5319] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] close(3 [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5318] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5318] <... futex resumed>) = 0 [pid 5319] <... open resumed>) = -1 EFAULT (Bad address) [pid 5318] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5319] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... close resumed>) = 0 [pid 5319] <... futex resumed>) = 0 [pid 5318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5318] exit_group(0 [pid 5085] <... ioctl resumed>) = 0 [pid 5319] <... futex resumed>) = ? [pid 5318] <... exit_group resumed>) = ? [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5319] +++ exited with 0 +++ [pid 5318] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5318, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=14 /* 0.14 s */} --- [pid 5084] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5323 attached [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5322 [pid 5084] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5323 [ 82.511345][ T5319] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 82.511345][ T5319] [pid 5084] newfstatat(3, "", ./strace-static-x86_64: Process 5322 attached [pid 5323] set_robust_list(0x555571ec36a0, 24 [pid 5321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5323] <... set_robust_list resumed>) = 0 [pid 5322] set_robust_list(0x555571ec36a0, 24 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5322] <... set_robust_list resumed>) = 0 [pid 5323] chdir("./18" [pid 5322] chdir("./18" [pid 5084] getdents64(3, [pid 5322] <... chdir resumed>) = 0 [pid 5322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5322] setpgid(0, 0) = 0 [pid 5322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5322] <... openat resumed>) = 3 [pid 5322] write(3, "1000", 4) = 4 [pid 5322] close(3) = 0 [pid 5322] symlink("/dev/binderfs", "./binderfs" [pid 5323] <... chdir resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5322] <... symlink resumed>) = 0 [pid 5084] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./17/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 executing program [pid 5322] write(1, "executing program\n", 18 [pid 5084] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5322] <... write resumed>) = 18 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5322] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./17/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5322] <... futex resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5322] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5084] newfstatat(4, "", [pid 5322] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5322] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] getdents64(4, [pid 5323] <... prctl resumed>) = 0 [pid 5322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5323] setpgid(0, 0 [pid 5322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] getdents64(4, [pid 5323] <... setpgid resumed>) = 0 [pid 5322] <... mmap resumed>) = 0x7f8282aa3000 [pid 5084] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4 [pid 5322] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... close resumed>) = 0 [pid 5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5322] <... mprotect resumed>) = 0 [pid 5084] rmdir("./17/bus" [pid 5323] <... openat resumed>) = 3 [pid 5084] <... rmdir resumed>) = 0 [pid 5323] write(3, "1000", 4 [pid 5322] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5323] <... write resumed>) = 4 [pid 5084] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5323] close(3 [pid 5322] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5322] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5084] unlink("./17/binderfs") = 0 ./strace-static-x86_64: Process 5324 attached [pid 5323] <... close resumed>) = 0 [pid 5322] <... clone3 resumed> => {parent_tid=[5324]}, 88) = 5324 [pid 5084] getdents64(3, [pid 5324] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5322] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5323] symlink("/dev/binderfs", "./binderfs" [pid 5324] <... rseq resumed>) = 0 [pid 5322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] close(3 [pid 5324] set_robust_list(0x7f8282ac39a0, 24 [pid 5322] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5324] <... set_robust_list resumed>) = 0 [pid 5322] <... futex resumed>) = 0 [pid 5084] rmdir("./17" [pid 5324] rt_sigprocmask(SIG_SETMASK, [], [pid 5323] <... symlink resumed>) = 0 [pid 5322] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5084] <... rmdir resumed>) = 0 [pid 5324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] mkdir("./18", 0777 [pid 5324] memfd_create("syzkaller", 0 [pid 5323] write(1, "executing program\n", 18 [pid 5084] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FDexecuting program [pid 5324] <... memfd_create resumed>) = 3 [pid 5323] <... write resumed>) = 18 [pid 5324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5323] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... mmap resumed>) = 0x7f827a600000 [pid 5323] <... futex resumed>) = 0 [pid 5323] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5323] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5323] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5323] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5323] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5325 attached [pid 5325] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5323] <... clone3 resumed> => {parent_tid=[5325]}, 88) = 5325 [pid 5325] <... rseq resumed>) = 0 [pid 5323] rt_sigprocmask(SIG_SETMASK, [], [pid 5325] set_robust_list(0x7f8282ac39a0, 24 [pid 5323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5325] <... set_robust_list resumed>) = 0 [pid 5323] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] rt_sigprocmask(SIG_SETMASK, [], [pid 5323] <... futex resumed>) = 0 [pid 5325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5323] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5325] memfd_create("syzkaller", 0) = 3 [pid 5325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5321] <... write resumed>) = 16777216 [pid 5321] munmap(0x7f827a600000, 138412032) = 0 [pid 5321] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5321] ioctl(4, LOOP_SET_FD, 3 [pid 5325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5321] <... ioctl resumed>) = 0 [pid 5321] close(3) = 0 [pid 5321] close(4 [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5326 ./strace-static-x86_64: Process 5326 attached [pid 5326] set_robust_list(0x555571ec36a0, 24 [pid 5321] <... close resumed>) = 0 [pid 5321] mkdir("./bus", 0777 [pid 5326] <... set_robust_list resumed>) = 0 [pid 5326] chdir("./18" [pid 5321] <... mkdir resumed>) = 0 [pid 5321] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5326] <... chdir resumed>) = 0 [pid 5326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5326] setpgid(0, 0) = 0 [pid 5326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5326] write(3, "1000", 4) = 4 [pid 5326] close(3) = 0 [pid 5326] symlink("/dev/binderfs", "./binderfs") = 0 [ 82.767902][ T5321] loop2: detected capacity change from 0 to 32768 [pid 5326] write(1, "executing program\n", 18executing program ) = 18 [pid 5326] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5321] <... mount resumed>) = 0 [pid 5326] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5321] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5321] <... openat resumed>) = 3 [pid 5326] <... mmap resumed>) = 0x7f8282aa3000 [pid 5321] chdir("./bus" [pid 5326] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5321] <... chdir resumed>) = 0 [pid 5326] <... mprotect resumed>) = 0 [pid 5321] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5321] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5321] <... futex resumed>) = 1 [pid 5320] <... futex resumed>) = 0 [pid 5320] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5326] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5321] unlink("./file1" [pid 5320] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5327 attached [pid 5327] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5326] <... clone3 resumed> => {parent_tid=[5327]}, 88) = 5327 [pid 5327] <... rseq resumed>) = 0 [pid 5327] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5327] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5326] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5326] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5327] <... futex resumed>) = 0 [pid 5327] memfd_create("syzkaller", 0) = 3 [pid 5327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5320] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5320] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5320] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0}./strace-static-x86_64: Process 5328 attached [pid 5321] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5320] <... clone3 resumed> => {parent_tid=[5328]}, 88) = 5328 [pid 5328] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5321] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] <... rseq resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5328] set_robust_list(0x7f8282aa29a0, 24 [pid 5321] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5328] <... set_robust_list resumed>) = 0 [pid 5328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5328] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5320] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5328] <... futex resumed>) = 0 [pid 5320] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 82.847941][ T5321] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 82.847941][ T5321] [ 82.879919][ T5321] ERROR: (device loop2): remounting filesystem as read-only [ 82.887579][ T5321] ERROR: (device loop2): jfs_unlink: [ 82.887579][ T5321] [pid 5328] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5328] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] <... futex resumed>) = 0 [pid 5328] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... futex resumed>) = 0 [pid 5320] <... futex resumed>) = 1 [pid 5321] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5320] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5321] <... open resumed>) = -1 EFAULT (Bad address) [pid 5321] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5320] <... futex resumed>) = 0 [pid 5321] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] exit_group(0 [pid 5328] <... futex resumed>) = ? [pid 5321] <... futex resumed>) = ? [pid 5320] <... exit_group resumed>) = ? [pid 5321] +++ exited with 0 +++ [pid 5328] +++ exited with 0 +++ [pid 5320] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5320, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=14 /* 0.14 s */} --- [pid 5083] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [ 82.922481][ T5328] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 82.922481][ T5328] [pid 5083] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5325] <... write resumed>) = 16777216 [pid 5324] <... write resumed>) = 16777216 [pid 5325] munmap(0x7f827a600000, 138412032 [pid 5324] munmap(0x7f827a600000, 138412032 [pid 5327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5325] <... munmap resumed>) = 0 [pid 5325] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5324] <... munmap resumed>) = 0 [pid 5324] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5324] ioctl(4, LOOP_SET_FD, 3 [pid 5325] <... openat resumed>) = 4 [pid 5325] ioctl(4, LOOP_SET_FD, 3 [pid 5324] <... ioctl resumed>) = 0 [pid 5324] close(3) = 0 [pid 5324] close(4) = 0 [pid 5324] mkdir("./bus", 0777) = 0 [pid 5324] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5325] <... ioctl resumed>) = 0 [pid 5325] close(3) = 0 [pid 5325] close(4) = 0 [pid 5324] <... mount resumed>) = 0 [pid 5324] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5324] chdir("./bus") = 0 [pid 5324] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5325] mkdir("./bus", 0777 [pid 5324] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5325] <... mkdir resumed>) = 0 [pid 5324] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5324] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5325] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5322] <... futex resumed>) = 0 [ 83.048764][ T5324] loop4: detected capacity change from 0 to 32768 [ 83.056643][ T5325] loop1: detected capacity change from 0 to 32768 [pid 5322] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... futex resumed>) = 0 [pid 5322] <... futex resumed>) = 1 [pid 5324] unlink("./file1" [pid 5322] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] <... mount resumed>) = 0 [pid 5325] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5325] chdir("./bus") = 0 [pid 5325] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5324] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5327] <... write resumed>) = 16777216 [pid 5325] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] munmap(0x7f827a600000, 138412032 [pid 5325] <... futex resumed>) = 1 [pid 5324] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 0 [ 83.102543][ T5324] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 83.102543][ T5324] [ 83.129297][ T5324] ERROR: (device loop4): remounting filesystem as read-only [ 83.136623][ T5324] ERROR: (device loop4): jfs_unlink: [ 83.136623][ T5324] [pid 5325] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] <... futex resumed>) = 0 [pid 5325] unlink("./file1" [pid 5323] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5327] <... munmap resumed>) = 0 [pid 5324] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 0 [pid 5327] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5324] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] <... openat resumed>) = 4 [pid 5325] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [pid 5327] ioctl(4, LOOP_SET_FD, 3 [pid 5325] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5322] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] <... futex resumed>) = 1 [pid 5324] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5323] <... futex resumed>) = 0 [pid 5325] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5324] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5324] <... futex resumed>) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5322] <... futex resumed>) = 0 [pid 5325] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5324] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5322] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] <... ioctl resumed>) = 0 [pid 5327] close(3) = 0 [ 83.159937][ T5325] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 83.159937][ T5325] [ 83.170888][ T5325] ERROR: (device loop1): remounting filesystem as read-only [ 83.179596][ T5325] ERROR: (device loop1): jfs_unlink: [ 83.179596][ T5325] [ 83.190785][ T5324] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 83.190785][ T5324] [ 83.191102][ T5327] loop3: detected capacity change from 0 to 32768 [pid 5327] close(4 [pid 5325] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 0 [pid 5327] <... close resumed>) = 0 [pid 5324] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5327] mkdir("./bus", 0777 [pid 5322] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5327] <... mkdir resumed>) = 0 [pid 5324] <... open resumed>) = -1 EFAULT (Bad address) [pid 5324] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5324] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] <... futex resumed>) = 0 [pid 5322] exit_group(0 [pid 5324] <... futex resumed>) = ? [pid 5322] <... exit_group resumed>) = ? [pid 5324] +++ exited with 0 +++ [pid 5327] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5325] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5322, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=22 /* 0.22 s */} --- [pid 5085] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5325] <... futex resumed>) = 1 [pid 5325] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] <... futex resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5323] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5325] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5323] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5325] <... open resumed>) = -1 EFAULT (Bad address) [pid 5325] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = 0 [pid 5325] <... futex resumed>) = 1 [pid 5323] <... futex resumed>) = 0 [pid 5325] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] exit_group(0 [pid 5083] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5325] <... futex resumed>) = ? [pid 5323] <... exit_group resumed>) = ? [pid 5325] +++ exited with 0 +++ [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./17/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./17/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./17/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./17/bus") = 0 [pid 5083] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5327] <... mount resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5327] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5083] unlink("./17/binderfs" [pid 5327] <... openat resumed>) = 3 [pid 5323] +++ exited with 0 +++ [pid 5083] <... unlink resumed>) = 0 [pid 5083] getdents64(3, [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5323, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=18 /* 0.18 s */} --- [pid 5327] chdir("./bus" [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] restart_syscall(<... resuming interrupted clone ...> [pid 5327] <... chdir resumed>) = 0 [pid 5083] close(3 [pid 5082] <... restart_syscall resumed>) = 0 [pid 5327] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... close resumed>) = 0 [pid 5327] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5082] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5327] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", [pid 5327] <... futex resumed>) = 1 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5327] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5326] <... futex resumed>) = 0 [pid 5083] rmdir("./17" [pid 5326] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5326] <... futex resumed>) = 1 [ 83.202553][ T5325] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 83.202553][ T5325] [pid 5327] <... futex resumed>) = 0 [pid 5326] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] mkdir("./18", 0777 [pid 5082] <... umount2 resumed>) = 0 [pid 5327] unlink("./file1" [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... mkdir resumed>) = 0 [pid 5082] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] newfstatat(AT_FDCWD, "./18/bus", [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5082] newfstatat(AT_FDCWD, "./18/bus", [pid 5085] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] openat(AT_FDCWD, "./18/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... openat resumed>) = 4 [pid 5082] openat(AT_FDCWD, "./18/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] newfstatat(4, "", [pid 5082] <... openat resumed>) = 4 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] newfstatat(4, "", [pid 5085] getdents64(4, [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, [pid 5085] getdents64(4, [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] getdents64(4, [pid 5085] close(4 [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] <... close resumed>) = 0 [pid 5082] close(4 [pid 5085] rmdir("./18/bus" [pid 5082] <... close resumed>) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5082] rmdir("./18/bus" [pid 5085] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... rmdir resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5085] unlink("./18/binderfs" [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5082] unlink("./18/binderfs" [pid 5085] getdents64(3, [pid 5082] <... unlink resumed>) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3 [pid 5085] close(3 [pid 5082] <... close resumed>) = 0 [pid 5082] rmdir("./18" [pid 5085] <... close resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5085] rmdir("./18" [pid 5082] mkdir("./19", 0777) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5085] mkdir("./19", 0777 [pid 5327] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5327] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5326] <... futex resumed>) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5326] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 83.268745][ T5327] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 83.268745][ T5327] [ 83.280110][ T5327] ERROR: (device loop3): remounting filesystem as read-only [ 83.287416][ T5327] ERROR: (device loop3): jfs_unlink: [ 83.287416][ T5327] [pid 5326] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5327] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5327] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5327] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] <... futex resumed>) = 0 [pid 5326] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5326] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5327] <... futex resumed>) = 1 [pid 5327] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5327] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] <... futex resumed>) = 0 [pid 5326] exit_group(0) = ? [pid 5327] <... futex resumed>) = ? [pid 5327] +++ exited with 0 +++ [pid 5326] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5326, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=17 /* 0.17 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5084] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./18/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./18/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./18/bus") = 0 [pid 5084] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./18/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./18") = 0 [ 83.320157][ T5327] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 83.320157][ T5327] [pid 5084] mkdir("./19", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5329 attached [pid 5329] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5329 [pid 5329] chdir("./18") = 0 [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5329] setpgid(0, 0) = 0 [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5329] write(3, "1000", 4) = 4 [pid 5329] close(3) = 0 [pid 5329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5329] write(1, "executing program\n", 18executing program ) = 18 [pid 5329] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... ioctl resumed>) = 0 [pid 5329] <... futex resumed>) = 0 [pid 5329] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5082] close(3 [pid 5329] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5082] <... close resumed>) = 0 [pid 5329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5329] <... mmap resumed>) = 0x7f8282aa3000 ./strace-static-x86_64: Process 5330 attached [pid 5329] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5330] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5329] <... mprotect resumed>) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5330 [pid 5330] chdir("./19" [pid 5329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5330] <... chdir resumed>) = 0 [pid 5329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5330] <... prctl resumed>) = 0 [pid 5330] setpgid(0, 0./strace-static-x86_64: Process 5331 attached [pid 5331] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5330] <... setpgid resumed>) = 0 [pid 5329] <... clone3 resumed> => {parent_tid=[5331]}, 88) = 5331 [pid 5331] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5331] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5329] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... futex resumed>) = 0 [pid 5329] <... futex resumed>) = 1 [pid 5330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5331] memfd_create("syzkaller", 0 [pid 5329] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5331] <... memfd_create resumed>) = 3 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5330] <... openat resumed>) = 3 [pid 5330] write(3, "1000", 4) = 4 [pid 5330] close(3) = 0 [pid 5330] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5330] write(1, "executing program\n", 18) = 18 [pid 5330] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5330] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5330] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5330] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5330] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5330] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5332]}, 88) = 5332 ./strace-static-x86_64: Process 5332 attached [pid 5330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5332] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5332] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5332] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = 0 [pid 5330] <... futex resumed>) = 1 [pid 5332] memfd_create("syzkaller", 0) = 3 [pid 5330] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5085] <... ioctl resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5333 attached [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5333 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5334 [pid 5333] set_robust_list(0x555571ec36a0, 24) = 0 ./strace-static-x86_64: Process 5334 attached [pid 5333] chdir("./19" [pid 5334] set_robust_list(0x555571ec36a0, 24 [pid 5333] <... chdir resumed>) = 0 [pid 5333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5333] setpgid(0, 0) = 0 [pid 5334] <... set_robust_list resumed>) = 0 [pid 5333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5334] chdir("./19") = 0 [pid 5334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5333] <... openat resumed>) = 3 [pid 5334] <... prctl resumed>) = 0 [pid 5333] write(3, "1000", 4 [pid 5334] setpgid(0, 0 [pid 5333] <... write resumed>) = 4 [pid 5334] <... setpgid resumed>) = 0 [pid 5333] close(3 [pid 5334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5333] <... close resumed>) = 0 [pid 5334] <... openat resumed>) = 3 [pid 5333] symlink("/dev/binderfs", "./binderfs" [pid 5334] write(3, "1000", 4) = 4 [pid 5333] <... symlink resumed>) = 0 [pid 5334] close(3) = 0 [pid 5334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5334] write(1, "executing program\n", 18executing program executing program ) = 18 [pid 5333] write(1, "executing program\n", 18) = 18 [pid 5334] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5334] <... futex resumed>) = 0 [pid 5334] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5333] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5334] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5334] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5334] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5333] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5334] <... mprotect resumed>) = 0 [pid 5333] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5334] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5334] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5333] <... mmap resumed>) = 0x7f8282aa3000 [pid 5334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5333] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5335 attached ) = 0 [pid 5333] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5335] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5334] <... clone3 resumed> => {parent_tid=[5335]}, 88) = 5335 [pid 5333] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5335] set_robust_list(0x7f8282ac39a0, 24 [pid 5334] rt_sigprocmask(SIG_SETMASK, [], [pid 5333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5335] <... set_robust_list resumed>) = 0 [pid 5334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5335] rt_sigprocmask(SIG_SETMASK, [], [pid 5334] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5336 attached [pid 5336] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5336] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5335] memfd_create("syzkaller", 0 [pid 5336] rt_sigprocmask(SIG_SETMASK, [], [pid 5334] <... futex resumed>) = 0 [pid 5333] <... clone3 resumed> => {parent_tid=[5336]}, 88) = 5336 [pid 5334] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], [pid 5336] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5335] <... memfd_create resumed>) = 3 [pid 5333] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5333] <... futex resumed>) = 1 [pid 5336] <... futex resumed>) = 0 [pid 5336] memfd_create("syzkaller", 0) = 3 [pid 5336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5333] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5332] <... write resumed>) = 16777216 [pid 5332] munmap(0x7f827a600000, 138412032) = 0 [pid 5331] <... write resumed>) = 16777216 [pid 5332] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5331] munmap(0x7f827a600000, 138412032 [pid 5332] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5332] close(3 [pid 5331] <... munmap resumed>) = 0 [pid 5332] <... close resumed>) = 0 [pid 5332] close(4) = 0 [pid 5332] mkdir("./bus", 0777) = 0 [pid 5332] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5331] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5332] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5331] <... openat resumed>) = 4 [pid 5332] chdir("./bus" [pid 5331] ioctl(4, LOOP_SET_FD, 3 [pid 5332] <... chdir resumed>) = 0 [pid 5332] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5332] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5330] <... futex resumed>) = 0 [pid 5332] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5330] <... futex resumed>) = 0 [ 83.909708][ T5332] loop1: detected capacity change from 0 to 32768 [ 83.947967][ T5331] loop2: detected capacity change from 0 to 32768 [pid 5332] unlink("./file1" [pid 5330] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] <... ioctl resumed>) = 0 [pid 5335] <... write resumed>) = 16777216 [pid 5331] close(3) = 0 [pid 5331] close(4 [pid 5336] <... write resumed>) = 16777216 [pid 5335] munmap(0x7f827a600000, 138412032 [ 83.948487][ T5332] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 83.948487][ T5332] [pid 5331] <... close resumed>) = 0 [pid 5336] munmap(0x7f827a600000, 138412032 [pid 5335] <... munmap resumed>) = 0 [pid 5331] mkdir("./bus", 0777) = 0 [pid 5331] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5331] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5331] chdir("./bus") = 0 [pid 5331] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5331] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5329] <... futex resumed>) = 0 [pid 5331] unlink("./file1" [pid 5329] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5329] <... futex resumed>) = 0 [pid 5336] <... munmap resumed>) = 0 [pid 5336] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5336] ioctl(4, LOOP_SET_FD, 3 [pid 5335] <... openat resumed>) = 4 [pid 5332] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5330] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 83.986949][ T5332] ERROR: (device loop1): remounting filesystem as read-only [ 84.010193][ T5331] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 84.010193][ T5331] [ 84.014300][ T5332] ERROR: (device loop1): jfs_unlink: [ 84.014300][ T5332] [ 84.024558][ T5336] loop3: detected capacity change from 0 to 32768 [pid 5329] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] <... ioctl resumed>) = 0 [pid 5335] ioctl(4, LOOP_SET_FD, 3 [pid 5332] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] close(3 [pid 5331] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5336] <... close resumed>) = 0 [pid 5335] <... ioctl resumed>) = 0 [pid 5332] <... futex resumed>) = 0 [pid 5330] <... futex resumed>) = 0 [pid 5336] close(4 [pid 5335] close(3 [pid 5332] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5331] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] <... close resumed>) = 0 [pid 5336] mkdir("./bus", 0777 [pid 5331] <... futex resumed>) = 1 [pid 5335] <... close resumed>) = 0 [pid 5335] close(4 [pid 5329] <... futex resumed>) = 0 [pid 5329] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5329] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] <... mkdir resumed>) = 0 [pid 5335] <... close resumed>) = 0 [ 84.029358][ T5331] ERROR: (device loop2): remounting filesystem as read-only [ 84.042287][ T5331] ERROR: (device loop2): jfs_unlink: [ 84.042287][ T5331] [ 84.046973][ T5335] loop4: detected capacity change from 0 to 32768 [ 84.069209][ T5332] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 84.069209][ T5332] [pid 5331] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5336] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5335] mkdir("./bus", 0777) = 0 [pid 5335] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5336] <... mount resumed>) = 0 [pid 5332] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5336] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5332] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5336] <... openat resumed>) = 3 [pid 5332] <... futex resumed>) = 1 [pid 5331] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... futex resumed>) = 0 [pid 5336] chdir("./bus" [pid 5332] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5331] <... futex resumed>) = 1 [pid 5330] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] <... chdir resumed>) = 0 [pid 5332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5331] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] <... futex resumed>) = 0 [pid 5336] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5332] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5330] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] <... futex resumed>) = 0 [pid 5335] <... mount resumed>) = 0 [pid 5332] <... open resumed>) = -1 EFAULT (Bad address) [pid 5329] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5332] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] <... futex resumed>) = 0 [pid 5329] <... futex resumed>) = 1 [pid 5329] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5335] <... openat resumed>) = 3 [pid 5332] <... futex resumed>) = 1 [pid 5331] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5330] <... futex resumed>) = 0 [pid 5335] chdir("./bus" [pid 5332] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5331] <... open resumed>) = -1 EFAULT (Bad address) [pid 5330] exit_group(0 [pid 5335] <... chdir resumed>) = 0 [pid 5331] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... exit_group resumed>) = ? [pid 5336] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5335] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5332] <... futex resumed>) = ? [pid 5331] <... futex resumed>) = 1 [pid 5329] <... futex resumed>) = 0 [pid 5329] exit_group(0) = ? [pid 5336] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5332] +++ exited with 0 +++ [pid 5330] +++ exited with 0 +++ [pid 5333] <... futex resumed>) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5330, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=17 /* 0.17 s */} --- [ 84.082539][ T5331] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 84.082539][ T5331] [pid 5082] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5336] <... futex resumed>) = 1 [pid 5335] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] +++ exited with 0 +++ [pid 5329] +++ exited with 0 +++ [pid 5336] unlink("./file1" [pid 5335] <... futex resumed>) = 1 [pid 5334] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5329, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5335] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5334] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5334] <... futex resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5083] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] newfstatat(3, "", [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", [pid 5082] getdents64(3, [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5335] unlink("./file1" [ 84.136121][ T5336] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 84.136121][ T5336] [ 84.139906][ T5335] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 84.139906][ T5335] [ 84.147961][ T5336] ERROR: (device loop3): remounting filesystem as read-only [ 84.158127][ T5335] ERROR: (device loop4): remounting filesystem as read-only [ 84.172872][ T5335] ERROR: (device loop4): jfs_unlink: [ 84.172872][ T5335] [ 84.173266][ T5336] ERROR: (device loop3): jfs_unlink: [pid 5334] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5335] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5336] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = 0 [pid 5336] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5335] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5334] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5334] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5335] <... futex resumed>) = 1 [pid 5334] <... futex resumed>) = 0 [pid 5334] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [pid 5336] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5335] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5336] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5333] <... futex resumed>) = 0 [pid 5336] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5333] <... futex resumed>) = 0 [pid 5336] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5333] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5336] <... open resumed>) = -1 EFAULT (Bad address) [pid 5336] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5333] <... futex resumed>) = 0 [pid 5336] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] exit_group(0 [pid 5336] <... futex resumed>) = ? [pid 5335] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5336] +++ exited with 0 +++ [pid 5333] <... exit_group resumed>) = ? [pid 5335] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5335] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5334] <... futex resumed>) = 0 [pid 5333] +++ exited with 0 +++ [pid 5334] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5333, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [pid 5335] <... futex resumed>) = 0 [pid 5334] <... futex resumed>) = 1 [pid 5335] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5334] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5335] <... open resumed>) = -1 EFAULT (Bad address) [pid 5335] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5334] <... futex resumed>) = 0 [pid 5335] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5334] exit_group(0 [pid 5335] <... futex resumed>) = ? [pid 5334] <... exit_group resumed>) = ? [pid 5335] +++ exited with 0 +++ [pid 5334] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5334, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=20 /* 0.20 s */} --- [pid 5084] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, [pid 5085] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [ 84.173266][ T5336] [ 84.192685][ T5336] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 84.192685][ T5336] [ 84.214860][ T5335] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 84.214860][ T5335] [pid 5084] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5085] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./19/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./19/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./19/bus") = 0 [pid 5085] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./19/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./19") = 0 [pid 5085] mkdir("./20", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD) = 0 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5337 attached [pid 5337] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5337] chdir("./20") = 0 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5337 [pid 5337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5337] setpgid(0, 0) = 0 [pid 5337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5337] write(3, "1000", 4) = 4 [pid 5337] close(3) = 0 [pid 5337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5337] write(1, "executing program\n", 18 [pid 5083] <... umount2 resumed>) = 0 executing program [pid 5337] <... write resumed>) = 18 [pid 5337] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5083] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] newfstatat(AT_FDCWD, "./18/bus", [pid 5337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5337] <... mmap resumed>) = 0x7f8282aa3000 [pid 5083] umount2("./18/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5337] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5337] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] openat(AT_FDCWD, "./18/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5337] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] newfstatat(4, "", [pid 5337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5338 attached [pid 5083] getdents64(4, [pid 5338] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5337] <... clone3 resumed> => {parent_tid=[5338]}, 88) = 5338 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5338] set_robust_list(0x7f8282ac39a0, 24 [pid 5337] rt_sigprocmask(SIG_SETMASK, [], [pid 5338] <... set_robust_list resumed>) = 0 [pid 5337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] getdents64(4, [pid 5338] rt_sigprocmask(SIG_SETMASK, [], [pid 5337] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5337] <... futex resumed>) = 0 [pid 5338] memfd_create("syzkaller", 0 [pid 5337] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] close(4 [pid 5338] <... memfd_create resumed>) = 3 [pid 5083] <... close resumed>) = 0 [pid 5338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5083] rmdir("./18/bus") = 0 [pid 5083] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./18/binderfs") = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./18") = 0 [pid 5083] mkdir("./19", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./19/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./19/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./19/bus") = 0 [pid 5084] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./19/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./19") = 0 [pid 5084] mkdir("./20", 0777) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5338] <... write resumed>) = 16777216 [pid 5338] munmap(0x7f827a600000, 138412032) = 0 [pid 5338] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5338] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5338] close(3) = 0 [pid 5338] close(4) = 0 [pid 5338] mkdir("./bus", 0777) = 0 [pid 5338] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(3) = 0 [pid 5338] <... mount resumed>) = 0 [pid 5338] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5338] chdir("./bus") = 0 [pid 5338] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5338] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5338] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5338] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 84.659972][ T5338] loop4: detected capacity change from 0 to 32768 [pid 5338] unlink("./file1" [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5339 [pid 5337] <... futex resumed>) = 0 [pid 5337] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5339 attached [pid 5339] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5339] chdir("./19") = 0 [pid 5339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5339] setpgid(0, 0) = 0 [pid 5339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5339] write(3, "1000", 4) = 4 [pid 5339] close(3) = 0 [pid 5339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 executing program [pid 5339] write(1, "executing program\n", 18 [pid 5084] close(3 [pid 5082] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5339] <... write resumed>) = 18 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5339] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] newfstatat(AT_FDCWD, "./19/bus", [pid 5339] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... close resumed>) = 0 [pid 5339] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5339] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5339] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5339] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5339] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5340 attached [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5340] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5339] <... clone3 resumed> => {parent_tid=[5340]}, 88) = 5340 [pid 5340] <... rseq resumed>) = 0 [pid 5339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5339] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5339] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5340] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./19/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5341 attached [pid 5340] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... clone resumed>, child_tidptr=0x555571ec3690) = 5341 [pid 5340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5341] set_robust_list(0x555571ec36a0, 24 [pid 5340] memfd_create("syzkaller", 0 [pid 5082] newfstatat(4, "", [pid 5341] <... set_robust_list resumed>) = 0 [pid 5340] <... memfd_create resumed>) = 3 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] getdents64(4, [pid 5341] chdir("./20" [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5341] <... chdir resumed>) = 0 [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5340] <... mmap resumed>) = 0x7f827a600000 [pid 5082] getdents64(4, [pid 5341] <... prctl resumed>) = 0 [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5341] setpgid(0, 0 [pid 5082] close(4 [pid 5341] <... setpgid resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5082] rmdir("./19/bus" [pid 5341] <... openat resumed>) = 3 [pid 5082] <... rmdir resumed>) = 0 [pid 5338] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5341] write(3, "1000", 4 [pid 5082] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5341] <... write resumed>) = 4 [pid 5338] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] close(3 [pid 5338] <... futex resumed>) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] <... close resumed>) = 0 [pid 5338] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5341] symlink("/dev/binderfs", "./binderfs" [pid 5338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5337] <... futex resumed>) = 0 [pid 5341] <... symlink resumed>) = 0 [pid 5338] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5337] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 84.720626][ T5338] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 84.720626][ T5338] [ 84.745063][ T5338] ERROR: (device loop4): remounting filesystem as read-only [ 84.755846][ T5338] ERROR: (device loop4): jfs_unlink: [ 84.755846][ T5338] executing program [pid 5082] unlink("./19/binderfs" [pid 5341] write(1, "executing program\n", 18) = 18 [pid 5341] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... unlink resumed>) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./19") = 0 [pid 5341] <... futex resumed>) = 0 [pid 5082] mkdir("./20", 0777) = 0 [pid 5341] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5341] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5341] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5341] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5342]}, 88) = 5342 [pid 5341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5341] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5342 attached [pid 5338] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5342] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5342] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5342] rt_sigprocmask(SIG_SETMASK, [], [pid 5338] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5338] <... futex resumed>) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5338] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5337] <... futex resumed>) = 0 [pid 5337] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5342] memfd_create("syzkaller", 0 [pid 5338] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5342] <... memfd_create resumed>) = 3 [pid 5338] <... open resumed>) = -1 EFAULT (Bad address) [pid 5338] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5338] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] exit_group(0 [pid 5338] <... futex resumed>) = ? [pid 5337] <... exit_group resumed>) = ? [pid 5338] +++ exited with 0 +++ [pid 5337] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5337, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} --- [pid 5342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5085] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5085] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./20/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./20/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./20/bus") = 0 [pid 5085] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 84.786691][ T5338] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 84.786691][ T5338] [pid 5085] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./20/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./20") = 0 [pid 5085] mkdir("./21", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5082] <... ioctl resumed>) = 0 [pid 5082] close(3) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5343 attached [pid 5343] set_robust_list(0x555571ec36a0, 24 [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5343 [pid 5340] <... write resumed>) = 16777216 [pid 5340] munmap(0x7f827a600000, 138412032 [pid 5343] <... set_robust_list resumed>) = 0 [pid 5340] <... munmap resumed>) = 0 [pid 5343] chdir("./20" [pid 5340] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5343] <... chdir resumed>) = 0 [pid 5340] <... openat resumed>) = 4 [pid 5340] ioctl(4, LOOP_SET_FD, 3 [pid 5343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5343] setpgid(0, 0 [pid 5340] <... ioctl resumed>) = 0 [pid 5343] <... setpgid resumed>) = 0 [pid 5340] close(3 [pid 5085] <... ioctl resumed>) = 0 [pid 5340] <... close resumed>) = 0 [pid 5085] close(3 [pid 5343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5340] close(4 [pid 5085] <... close resumed>) = 0 [pid 5340] <... close resumed>) = 0 [pid 5340] mkdir("./bus", 0777 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5340] <... mkdir resumed>) = 0 [pid 5343] <... openat resumed>) = 3 [pid 5340] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity"./strace-static-x86_64: Process 5344 attached [pid 5343] write(3, "1000", 4) = 4 [pid 5344] set_robust_list(0x555571ec36a0, 24 [pid 5340] <... mount resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5344 [pid 5344] <... set_robust_list resumed>) = 0 [pid 5340] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5344] chdir("./21" [pid 5343] close(3 [pid 5340] <... openat resumed>) = 3 [pid 5344] <... chdir resumed>) = 0 [pid 5340] chdir("./bus" [pid 5344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5340] <... chdir resumed>) = 0 [pid 5344] <... prctl resumed>) = 0 [pid 5340] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5344] setpgid(0, 0 [pid 5340] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5344] <... setpgid resumed>) = 0 [pid 5344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5340] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5344] <... openat resumed>) = 3 [pid 5343] <... close resumed>) = 0 [pid 5340] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] <... futex resumed>) = 0 [pid 5339] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] symlink("/dev/binderfs", "./binderfs" [pid 5339] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5343] <... symlink resumed>) = 0 [pid 5343] write(1, "executing program\n", 18executing program ) = 18 [ 85.060036][ T5340] loop2: detected capacity change from 0 to 32768 [pid 5340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5340] unlink("./file1" [pid 5343] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5344] write(3, "1000", 4 [pid 5343] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5342] <... write resumed>) = 16777216 [pid 5343] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5342] munmap(0x7f827a600000, 138412032 [pid 5343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5343] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5345 attached => {parent_tid=[5345]}, 88) = 5345 [pid 5345] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5343] rt_sigprocmask(SIG_SETMASK, [], [pid 5345] set_robust_list(0x7f8282ac39a0, 24 [pid 5343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5345] <... set_robust_list resumed>) = 0 [pid 5344] <... write resumed>) = 4 [pid 5344] close(3) = 0 [pid 5344] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5344] write(1, "executing program\n", 18) = 18 [pid 5344] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5344] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5344] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5345] rt_sigprocmask(SIG_SETMASK, [], [pid 5343] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... munmap resumed>) = 0 [pid 5345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5345] memfd_create("syzkaller", 0 [pid 5344] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5342] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5340] <... unlink resumed>) = -1 EIO (Input/output error) [ 85.104949][ T5340] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 85.104949][ T5340] [ 85.129684][ T5340] ERROR: (device loop2): remounting filesystem as read-only [ 85.137964][ T5340] ERROR: (device loop2): jfs_unlink: [ 85.137964][ T5340] [pid 5345] <... memfd_create resumed>) = 3 [pid 5344] <... mprotect resumed>) = 0 [pid 5342] <... openat resumed>) = 4 [pid 5340] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5342] ioctl(4, LOOP_SET_FD, 3 [pid 5345] <... mmap resumed>) = 0x7f827a600000 [pid 5344] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5340] <... futex resumed>) = 1 [pid 5339] <... futex resumed>) = 0 [pid 5340] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5339] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5339] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5346 attached => {parent_tid=[5346]}, 88) = 5346 [pid 5346] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5344] rt_sigprocmask(SIG_SETMASK, [], [pid 5342] <... ioctl resumed>) = 0 [pid 5340] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5346] <... rseq resumed>) = 0 [pid 5344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5342] close(3 [pid 5340] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] set_robust_list(0x7f8282ac39a0, 24 [pid 5344] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... close resumed>) = 0 [pid 5340] <... futex resumed>) = 1 [pid 5339] <... futex resumed>) = 0 [pid 5346] <... set_robust_list resumed>) = 0 [pid 5344] <... futex resumed>) = 0 [pid 5342] close(4 [pid 5340] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] rt_sigprocmask(SIG_SETMASK, [], [pid 5344] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5342] <... close resumed>) = 0 [pid 5340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5339] <... futex resumed>) = 0 [pid 5346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5342] mkdir("./bus", 0777 [pid 5340] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5342] <... mkdir resumed>) = 0 [pid 5340] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5340] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] memfd_create("syzkaller", 0 [pid 5342] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5339] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5346] <... memfd_create resumed>) = 3 [pid 5342] <... mount resumed>) = 0 [pid 5339] exit_group(0) = ? [pid 5346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5340] <... futex resumed>) = ? [pid 5342] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5340] +++ exited with 0 +++ [pid 5346] <... mmap resumed>) = 0x7f827a600000 [pid 5342] <... openat resumed>) = 3 [pid 5342] chdir("./bus") = 0 [pid 5342] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5342] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5342] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] <... futex resumed>) = 0 [pid 5341] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... futex resumed>) = 0 [pid 5341] <... futex resumed>) = 1 [pid 5341] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 85.150479][ T5342] loop3: detected capacity change from 0 to 32768 [ 85.157232][ T5340] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 85.157232][ T5340] [pid 5342] unlink("./file1" [pid 5339] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5339, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=15 /* 0.15 s */} --- [pid 5083] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5342] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5341] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5341] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5083] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5347 attached [pid 5083] newfstatat(AT_FDCWD, "./19/bus", [pid 5341] <... clone3 resumed> => {parent_tid=[5347]}, 88) = 5347 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5341] rt_sigprocmask(SIG_SETMASK, [], [pid 5347] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] umount2("./19/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5347] <... rseq resumed>) = 0 [pid 5342] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] set_robust_list(0x7f8282aa29a0, 24 [pid 5341] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5347] <... set_robust_list resumed>) = 0 [pid 5342] <... futex resumed>) = 0 [pid 5341] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] openat(AT_FDCWD, "./19/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5347] rt_sigprocmask(SIG_SETMASK, [], [pid 5345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5342] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... openat resumed>) = 4 [pid 5347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] newfstatat(4, "", [ 85.201453][ T5342] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 85.201453][ T5342] [ 85.230223][ T5342] ERROR: (device loop3): remounting filesystem as read-only [ 85.238086][ T5342] ERROR: (device loop3): jfs_unlink: [ 85.238086][ T5342] [pid 5347] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./19/bus") = 0 [pid 5083] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./19/binderfs") = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./19") = 0 [pid 5083] mkdir("./20", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5347] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5347] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... futex resumed>) = 0 [pid 5342] <... futex resumed>) = 0 [pid 5347] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5342] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5341] <... futex resumed>) = 1 [pid 5342] <... open resumed>) = -1 EFAULT (Bad address) [pid 5341] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5342] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5342] <... futex resumed>) = 0 [pid 5342] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] exit_group(0 [pid 5347] <... futex resumed>) = ? [pid 5347] +++ exited with 0 +++ [pid 5342] <... futex resumed>) = ? [pid 5341] <... exit_group resumed>) = ? [pid 5342] +++ exited with 0 +++ [pid 5341] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 85.269707][ T5347] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 85.269707][ T5347] [pid 5084] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5345] <... write resumed>) = 16777216 [pid 5345] munmap(0x7f827a600000, 138412032) = 0 [pid 5345] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5345] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5345] close(3) = 0 [pid 5345] close(4) = 0 [pid 5345] mkdir("./bus", 0777) = 0 [pid 5345] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5345] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5345] chdir("./bus") = 0 [pid 5345] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5345] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5343] <... futex resumed>) = 0 [pid 5343] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5345] unlink("./file1" [ 85.430561][ T5345] loop1: detected capacity change from 0 to 32768 [pid 5343] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5346] <... write resumed>) = 16777216 [pid 5083] <... ioctl resumed>) = 0 [pid 5346] munmap(0x7f827a600000, 138412032 [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5348 attached [pid 5346] <... munmap resumed>) = 0 [pid 5345] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5348] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5346] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5345] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5348 [pid 5348] chdir("./20" [pid 5346] <... openat resumed>) = 4 [pid 5345] <... futex resumed>) = 0 [pid 5343] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... chdir resumed>) = 0 [pid 5346] ioctl(4, LOOP_SET_FD, 3 [ 85.477220][ T5345] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 85.477220][ T5345] [ 85.493372][ T5345] ERROR: (device loop1): remounting filesystem as read-only [ 85.501121][ T5345] ERROR: (device loop1): jfs_unlink: [ 85.501121][ T5345] [pid 5345] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULLexecuting program [pid 5343] <... futex resumed>) = 0 [pid 5348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5348] setpgid(0, 0) = 0 [pid 5348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5348] write(3, "1000", 4) = 4 [pid 5348] close(3) = 0 [pid 5348] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5348] write(1, "executing program\n", 18) = 18 [pid 5348] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5348] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5348] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5349]}, 88) = 5349 [pid 5348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5348] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5343] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5348] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5345] <... mount resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5349 attached [pid 5346] <... ioctl resumed>) = 0 [pid 5349] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5345] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... rseq resumed>) = 0 [pid 5346] close(3 [pid 5345] <... futex resumed>) = 1 [pid 5343] <... futex resumed>) = 0 [pid 5349] set_robust_list(0x7f8282ac39a0, 24 [pid 5345] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5343] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... set_robust_list resumed>) = 0 [pid 5345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5343] <... futex resumed>) = 0 [pid 5349] rt_sigprocmask(SIG_SETMASK, [], [pid 5345] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5343] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5345] <... open resumed>) = -1 EFAULT (Bad address) [pid 5346] <... close resumed>) = 0 [pid 5345] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] close(4 [pid 5349] memfd_create("syzkaller", 0 [pid 5346] <... close resumed>) = 0 [pid 5345] <... futex resumed>) = 0 [pid 5343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5349] <... memfd_create resumed>) = 3 [pid 5346] mkdir("./bus", 0777 [pid 5345] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5343] exit_group(0 [pid 5349] <... mmap resumed>) = 0x7f827a600000 [pid 5346] <... mkdir resumed>) = 0 [pid 5345] <... futex resumed>) = ? [pid 5343] <... exit_group resumed>) = ? [pid 5346] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5345] +++ exited with 0 +++ [pid 5343] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5343, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5082] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5082] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5082] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./20/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./20/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./20/bus") = 0 [pid 5082] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./20/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./20") = 0 [pid 5082] mkdir("./21", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 85.528383][ T5345] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 85.528383][ T5345] [ 85.528726][ T5346] loop4: detected capacity change from 0 to 32768 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5346] <... mount resumed>) = 0 [pid 5346] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5346] chdir("./bus") = 0 [pid 5346] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5346] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5344] <... futex resumed>) = 0 [pid 5346] unlink("./file1" [pid 5344] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.606722][ T5346] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 85.606722][ T5346] [ 85.628686][ T5346] ERROR: (device loop4): remounting filesystem as read-only [ 85.636625][ T5346] ERROR: (device loop4): jfs_unlink: [ 85.636625][ T5346] [pid 5344] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... umount2 resumed>) = 0 [pid 5346] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5084] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5346] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... futex resumed>) = 0 [pid 5346] <... futex resumed>) = 1 [pid 5344] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5344] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./20/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./20/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./20/bus") = 0 [pid 5084] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./20/binderfs" [pid 5344] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... unlink resumed>) = 0 [pid 5346] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(3, [pid 5346] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5344] <... futex resumed>) = 0 [pid 5349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5346] <... futex resumed>) = 1 [pid 5084] close(3 [pid 5344] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5344] <... futex resumed>) = 0 [pid 5346] <... open resumed>) = -1 EFAULT (Bad address) [pid 5344] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./20" [pid 5346] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] <... rmdir resumed>) = 0 [pid 5346] <... futex resumed>) = 0 [pid 5344] exit_group(0 [pid 5084] mkdir("./21", 0777 [pid 5344] <... exit_group resumed>) = ? [pid 5084] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5082] <... ioctl resumed>) = 0 [ 85.663789][ T5346] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 85.663789][ T5346] [pid 5082] close(3 [pid 5346] +++ exited with 0 +++ [pid 5344] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5344, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5082] <... close resumed>) = 0 [pid 5085] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, [pid 5082] <... clone resumed>, child_tidptr=0x555571ec3690) = 5350 [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5085] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5350 attached [pid 5350] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5350] chdir("./21") = 0 [pid 5350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5350] setpgid(0, 0) = 0 [pid 5350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5350] write(3, "1000", 4 [pid 5085] <... umount2 resumed>) = 0 [pid 5350] <... write resumed>) = 4 [pid 5350] close(3 [pid 5085] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5350] <... close resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./21/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./21/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5350] symlink("/dev/binderfs", "./binderfs" [pid 5085] getdents64(4, [pid 5350] <... symlink resumed>) = 0 [pid 5085] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 executing program [pid 5085] close(4) = 0 [pid 5350] write(1, "executing program\n", 18 [pid 5085] rmdir("./21/bus" [pid 5350] <... write resumed>) = 18 [pid 5085] <... rmdir resumed>) = 0 [pid 5350] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5350] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5085] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] unlink("./21/binderfs" [pid 5350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... unlink resumed>) = 0 [pid 5350] <... mmap resumed>) = 0x7f8282aa3000 [pid 5085] getdents64(3, [pid 5350] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5350] <... mprotect resumed>) = 0 [pid 5085] close(3 [pid 5350] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... close resumed>) = 0 [pid 5085] rmdir("./21" [pid 5350] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5085] mkdir("./22", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5350] <... clone3 resumed> => {parent_tid=[5351]}, 88) = 5351 [pid 5350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5350] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5350] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5351 attached [pid 5351] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5351] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5351] memfd_create("syzkaller", 0) = 3 [pid 5351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5349] <... write resumed>) = 16777216 [pid 5349] munmap(0x7f827a600000, 138412032 [pid 5084] <... ioctl resumed>) = 0 [pid 5349] <... munmap resumed>) = 0 [pid 5349] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] close(3 [pid 5349] <... openat resumed>) = 4 [pid 5349] ioctl(4, LOOP_SET_FD, 3 [pid 5084] <... close resumed>) = 0 [pid 5349] <... ioctl resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5352 [pid 5349] close(3) = 0 [pid 5349] close(4) = 0 [pid 5349] mkdir("./bus", 0777./strace-static-x86_64: Process 5352 attached ) = 0 [pid 5349] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5352] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5352] chdir("./21") = 0 [pid 5352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5352] setpgid(0, 0) = 0 [pid 5352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5352] write(3, "1000", 4) = 4 [pid 5352] close(3) = 0 [pid 5352] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5352] write(1, "executing program\n", 18) = 18 [pid 5352] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5352] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5349] <... mount resumed>) = 0 [pid 5352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5352] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5353 attached => {parent_tid=[5353]}, 88) = 5353 [pid 5353] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5352] rt_sigprocmask(SIG_SETMASK, [], [pid 5349] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [ 85.891768][ T5349] loop2: detected capacity change from 0 to 32768 [pid 5349] chdir("./bus" [pid 5353] <... rseq resumed>) = 0 [pid 5349] <... chdir resumed>) = 0 [pid 5353] set_robust_list(0x7f8282ac39a0, 24 [pid 5352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5349] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5353] <... set_robust_list resumed>) = 0 [pid 5352] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5353] rt_sigprocmask(SIG_SETMASK, [], [pid 5352] <... futex resumed>) = 0 [pid 5349] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5352] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5349] <... futex resumed>) = 1 [pid 5348] <... futex resumed>) = 0 [pid 5348] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5348] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] memfd_create("syzkaller", 0 [pid 5349] unlink("./file1" [pid 5353] <... memfd_create resumed>) = 3 [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5354 attached [pid 5354] set_robust_list(0x555571ec36a0, 24 [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5354 [pid 5354] <... set_robust_list resumed>) = 0 [pid 5351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5354] chdir("./22") = 0 [ 85.956328][ T5349] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 85.956328][ T5349] [ 85.983257][ T5349] ERROR: (device loop2): remounting filesystem as read-only [ 85.999913][ T5349] ERROR: (device loop2): jfs_unlink: [pid 5354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5354] setpgid(0, 0 [pid 5348] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... setpgid resumed>) = 0 [pid 5348] <... futex resumed>) = 0 [pid 5354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282a82000 [pid 5354] <... openat resumed>) = 3 [pid 5348] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5354] write(3, "1000", 4) = 4 [pid 5349] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5348] <... mprotect resumed>) = 0 [pid 5354] close(3) = 0 [pid 5349] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 executing program [pid 5348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5354] symlink("/dev/binderfs", "./binderfs" [pid 5349] <... futex resumed>) = 0 [pid 5349] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5348] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} [pid 5354] <... symlink resumed>) = 0 [pid 5354] write(1, "executing program\n", 18./strace-static-x86_64: Process 5355 attached ) = 18 [pid 5355] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5354] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... rseq resumed>) = 0 [pid 5348] <... clone3 resumed> => {parent_tid=[5355]}, 88) = 5355 [pid 5355] set_robust_list(0x7f8282aa29a0, 24 [pid 5354] <... futex resumed>) = 0 [pid 5348] rt_sigprocmask(SIG_SETMASK, [], [pid 5355] <... set_robust_list resumed>) = 0 [pid 5354] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, [pid 5348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5355] rt_sigprocmask(SIG_SETMASK, [], [pid 5354] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5348] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5354] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5348] <... futex resumed>) = 0 [pid 5355] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5348] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5354] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [ 85.999913][ T5349] [pid 5354] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5356 attached [pid 5356] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5354] <... clone3 resumed> => {parent_tid=[5356]}, 88) = 5356 [pid 5354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5355] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5354] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... futex resumed>) = 0 [pid 5355] <... futex resumed>) = 1 [pid 5348] <... futex resumed>) = 0 [pid 5355] futex(0x7f8282b9a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5354] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5348] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... futex resumed>) = 0 [pid 5348] <... futex resumed>) = 1 [pid 5356] <... rseq resumed>) = 0 [pid 5349] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5348] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] set_robust_list(0x7f8282ac39a0, 24 [pid 5349] <... open resumed>) = -1 EFAULT (Bad address) [pid 5356] <... set_robust_list resumed>) = 0 [pid 5349] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] rt_sigprocmask(SIG_SETMASK, [], [pid 5349] <... futex resumed>) = 1 [pid 5348] <... futex resumed>) = 0 [pid 5356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5349] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5348] exit_group(0 [pid 5356] memfd_create("syzkaller", 0 [pid 5349] <... futex resumed>) = ? [pid 5348] <... exit_group resumed>) = ? [pid 5356] <... memfd_create resumed>) = 3 [pid 5349] +++ exited with 0 +++ [pid 5356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5355] <... futex resumed>) = ? [pid 5356] <... mmap resumed>) = 0x7f827a600000 [pid 5355] +++ exited with 0 +++ [pid 5348] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5348, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=17 /* 0.17 s */} --- [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 86.032464][ T5355] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 86.032464][ T5355] [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5083] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./20/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./20/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./20/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./20/bus") = 0 [pid 5083] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./20/binderfs") = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./20") = 0 [pid 5083] mkdir("./21", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5351] <... write resumed>) = 16777216 [pid 5351] munmap(0x7f827a600000, 138412032 [pid 5356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5351] <... munmap resumed>) = 0 [pid 5351] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5351] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5351] close(3) = 0 [pid 5351] close(4) = 0 [pid 5351] mkdir("./bus", 0777) = 0 [pid 5351] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5353] <... write resumed>) = 16777216 [pid 5353] munmap(0x7f827a600000, 138412032 [pid 5351] <... mount resumed>) = 0 [pid 5351] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5351] chdir("./bus") = 0 [pid 5351] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5351] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] <... futex resumed>) = 0 [pid 5351] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 86.233244][ T5351] loop1: detected capacity change from 0 to 32768 [pid 5351] unlink("./file1" [pid 5350] <... futex resumed>) = 0 [pid 5350] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] <... munmap resumed>) = 0 [pid 5353] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 86.292243][ T5351] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 86.292243][ T5351] [ 86.311590][ T5351] ERROR: (device loop1): remounting filesystem as read-only [ 86.322244][ T5353] loop3: detected capacity change from 0 to 32768 [pid 5353] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5353] close(3) = 0 [pid 5353] close(4) = 0 [pid 5353] mkdir("./bus", 0777) = 0 [pid 5351] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5083] <... ioctl resumed>) = 0 [pid 5353] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5351] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(3 [pid 5351] <... futex resumed>) = 1 [pid 5350] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5350] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [ 86.338946][ T5351] ERROR: (device loop1): jfs_unlink: [ 86.338946][ T5351] [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program [pid 5351] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5350] <... futex resumed>) = 0 [pid 5350] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... clone resumed>, child_tidptr=0x555571ec3690) = 5357 ./strace-static-x86_64: Process 5357 attached [pid 5357] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5357] chdir("./21") = 0 [pid 5357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5357] setpgid(0, 0) = 0 [pid 5357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5357] write(3, "1000", 4) = 4 [pid 5357] close(3) = 0 [pid 5357] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5357] write(1, "executing program\n", 18) = 18 [pid 5357] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5357] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5357] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5357] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5357] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} => {parent_tid=[5358]}, 88) = 5358 [pid 5357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5357] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5357] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5358 attached [pid 5358] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053) = 0 [pid 5358] set_robust_list(0x7f8282ac39a0, 24) = 0 [pid 5358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5358] memfd_create("syzkaller", 0) = 3 [pid 5353] <... mount resumed>) = 0 [pid 5351] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5353] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5353] chdir("./bus") = 0 [pid 5353] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5353] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5353] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5352] <... futex resumed>) = 0 [pid 5352] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... futex resumed>) = 0 [pid 5352] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 1 [pid 5350] <... futex resumed>) = 0 [ 86.364365][ T5351] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 86.364365][ T5351] [ 86.400056][ T5353] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 86.400056][ T5353] [pid 5353] unlink("./file1" [pid 5352] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5351] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... mmap resumed>) = 0x7f827a600000 [pid 5356] <... write resumed>) = 16777216 [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5350] <... futex resumed>) = 0 [pid 5351] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5350] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5351] <... open resumed>) = -1 EFAULT (Bad address) [pid 5351] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] <... futex resumed>) = 0 [pid 5351] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] exit_group(0 [pid 5351] <... futex resumed>) = ? [pid 5350] <... exit_group resumed>) = ? [pid 5351] +++ exited with 0 +++ [pid 5350] +++ exited with 0 +++ [pid 5356] munmap(0x7f827a600000, 138412032) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5350, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5082] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, [pid 5356] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5356] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5082] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5356] <... ioctl resumed>) = 0 [pid 5353] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5353] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] close(3 [pid 5353] <... futex resumed>) = 1 [pid 5352] <... futex resumed>) = 0 [pid 5356] <... close resumed>) = 0 [pid 5353] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5352] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] close(4 [pid 5352] <... futex resumed>) = 0 [pid 5356] <... close resumed>) = 0 [pid 5352] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] mkdir("./bus", 0777) = 0 [pid 5356] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5082] <... umount2 resumed>) = 0 [pid 5356] <... mount resumed>) = 0 [pid 5356] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5082] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./21/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./21/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, [pid 5356] <... openat resumed>) = 3 [pid 5356] chdir("./bus") = 0 [pid 5356] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5353] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5356] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] <... futex resumed>) = 1 [pid 5354] <... futex resumed>) = 0 [pid 5353] <... futex resumed>) = 1 [pid 5356] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5352] <... futex resumed>) = 0 [pid 5082] getdents64(4, [pid 5354] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5352] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... getdents64 resumed>0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5356] <... futex resumed>) = 0 [pid 5354] <... futex resumed>) = 1 [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5352] <... futex resumed>) = 0 [pid 5082] close(4 [pid 5356] unlink("./file1" [pid 5354] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 86.411960][ T5353] ERROR: (device loop3): remounting filesystem as read-only [ 86.429286][ T5353] ERROR: (device loop3): jfs_unlink: [ 86.429286][ T5353] [ 86.433889][ T5356] loop4: detected capacity change from 0 to 32768 [ 86.447557][ T5353] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 86.447557][ T5353] [pid 5352] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... close resumed>) = 0 [pid 5082] rmdir("./21/bus") = 0 [pid 5082] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./21/binderfs") = 0 [pid 5082] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./21") = 0 [pid 5082] mkdir("./22", 0777 [pid 5353] <... open resumed>) = -1 EFAULT (Bad address) [pid 5082] <... mkdir resumed>) = 0 [pid 5353] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5353] <... futex resumed>) = 1 [pid 5353] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5352] <... futex resumed>) = 0 [pid 5356] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5352] exit_group(0 [pid 5356] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... futex resumed>) = ? [pid 5352] <... exit_group resumed>) = ? [pid 5356] <... futex resumed>) = 1 [pid 5354] <... futex resumed>) = 0 [pid 5353] +++ exited with 0 +++ [pid 5352] +++ exited with 0 +++ [pid 5354] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5354] <... futex resumed>) = 0 [pid 5354] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5352, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=12 /* 0.12 s */} --- [pid 5356] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5356] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5354] <... futex resumed>) = 0 [pid 5356] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5354] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5354] <... futex resumed>) = 0 [pid 5356] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5354] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5356] <... open resumed>) = -1 EFAULT (Bad address) [pid 5084] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5356] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5356] <... futex resumed>) = 1 [pid 5354] <... futex resumed>) = 0 [pid 5356] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5354] exit_group(0 [pid 5356] <... futex resumed>) = ? [pid 5354] <... exit_group resumed>) = ? [pid 5084] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5356] +++ exited with 0 +++ [pid 5354] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5354, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=21 /* 0.21 s */} --- [pid 5085] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", [pid 5084] <... openat resumed>) = 3 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, [pid 5084] newfstatat(3, "", [pid 5085] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] umount2("./22/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] getdents64(3, [pid 5358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] <... getdents64 resumed>0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5084] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5084] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./21/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./21/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./21/bus") = 0 [ 86.482374][ T5356] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 86.482374][ T5356] [ 86.494874][ T5356] ERROR: (device loop4): remounting filesystem as read-only [ 86.502658][ T5356] ERROR: (device loop4): jfs_unlink: [ 86.502658][ T5356] [ 86.514193][ T5356] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 86.514193][ T5356] [pid 5085] <... umount2 resumed>) = 0 [pid 5084] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./21/binderfs") = 0 [pid 5084] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./21") = 0 [pid 5085] umount2("./22/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] mkdir("./22", 0777 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... mkdir resumed>) = 0 [pid 5085] newfstatat(AT_FDCWD, "./22/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./22/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./22/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... openat resumed>) = 3 [pid 5085] <... openat resumed>) = 4 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./22/bus") = 0 [pid 5085] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./22/binderfs") = 0 [pid 5085] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./22") = 0 [pid 5085] mkdir("./23", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5358] <... write resumed>) = 16777216 [pid 5358] munmap(0x7f827a600000, 138412032) = 0 [pid 5358] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5358] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... ioctl resumed>) = 0 [pid 5358] <... ioctl resumed>) = 0 [pid 5082] close(3) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5359 [pid 5358] close(3./strace-static-x86_64: Process 5359 attached ) = 0 [pid 5358] close(4 [pid 5359] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5358] <... close resumed>) = 0 [pid 5358] mkdir("./bus", 0777 [pid 5359] chdir("./22") = 0 [pid 5358] <... mkdir resumed>) = 0 [pid 5359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5358] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity" [pid 5359] setpgid(0, 0) = 0 [pid 5359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5359] write(3, "1000", 4) = 4 [pid 5359] close(3) = 0 [pid 5359] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5359] write(1, "executing program\n", 18) = 18 [ 86.694699][ T5358] loop2: detected capacity change from 0 to 32768 [pid 5359] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] <... mount resumed>) = 0 [pid 5358] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5359] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5359] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5359] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5359] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5359] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0}./strace-static-x86_64: Process 5360 attached [pid 5358] chdir("./bus") = 0 [pid 5358] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5359] <... clone3 resumed> => {parent_tid=[5360]}, 88) = 5360 [pid 5358] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5358] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5360] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5359] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... rseq resumed>) = 0 [pid 5359] <... futex resumed>) = 0 [pid 5360] set_robust_list(0x7f8282ac39a0, 24 [pid 5359] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5360] <... set_robust_list resumed>) = 0 [pid 5360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5360] memfd_create("syzkaller", 0) = 3 [pid 5360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5358] <... futex resumed>) = 1 [pid 5357] <... futex resumed>) = 0 [pid 5358] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5357] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5358] unlink("./file1" [pid 5357] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5358] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571ec3690) = 5361 ./strace-static-x86_64: Process 5361 attached [pid 5361] set_robust_list(0x555571ec36a0, 24) = 0 [pid 5358] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] chdir("./22") = 0 [pid 5357] <... futex resumed>) = 0 [pid 5361] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5357] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... prctl resumed>) = 0 [pid 5357] <... futex resumed>) = 0 [pid 5357] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5361] setpgid(0, 0 [pid 5358] <... futex resumed>) = 1 [pid 5361] <... setpgid resumed>) = 0 [ 86.779829][ T5358] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 86.779829][ T5358] [ 86.802029][ T5358] ERROR: (device loop2): remounting filesystem as read-only [ 86.819063][ T5358] ERROR: (device loop2): jfs_unlink: [ 86.819063][ T5358] [pid 5358] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] <... ioctl resumed>) = 0 [pid 5361] write(3, "1000", 4 [pid 5085] close(3 [pid 5361] <... write resumed>) = 4 [pid 5085] <... close resumed>) = 0 [pid 5361] close(3 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5362 attached [pid 5361] <... close resumed>) = 0 [pid 5361] symlink("/dev/binderfs", "./binderfs" [pid 5085] <... clone resumed>, child_tidptr=0x555571ec3690) = 5362 [pid 5362] set_robust_list(0x555571ec36a0, 24) = 0 executing program [pid 5362] chdir("./23" [pid 5361] <... symlink resumed>) = 0 [pid 5362] <... chdir resumed>) = 0 [pid 5361] write(1, "executing program\n", 18 [pid 5362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5361] <... write resumed>) = 18 [pid 5361] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] setpgid(0, 0 [pid 5361] <... futex resumed>) = 0 [pid 5362] <... setpgid resumed>) = 0 [pid 5361] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5361] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5362] <... openat resumed>) = 3 [pid 5361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8282aa3000 [pid 5362] write(3, "1000", 4 [pid 5361] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE [pid 5362] <... write resumed>) = 4 [pid 5361] <... mprotect resumed>) = 0 [pid 5362] close(3) = 0 [pid 5361] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5362] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5361] <... rt_sigprocmask resumed>[], 8) = 0 executing program [pid 5362] write(1, "executing program\n", 18 [pid 5361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5362] <... write resumed>) = 18 [pid 5362] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5363 attached ) = 0 [pid 5362] rt_sigaction(SIGRT_1, {sa_handler=0x7f8282b32fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8282b24190}, NULL, 8) = 0 [pid 5363] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5361] <... clone3 resumed> => {parent_tid=[5363]}, 88) = 5363 [pid 5363] <... rseq resumed>) = 0 [pid 5362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5361] rt_sigprocmask(SIG_SETMASK, [], [pid 5363] set_robust_list(0x7f8282ac39a0, 24 [pid 5362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5362] <... mmap resumed>) = 0x7f8282aa3000 [pid 5362] mprotect(0x7f8282aa4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5362] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5363] <... set_robust_list resumed>) = 0 [pid 5362] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5363] rt_sigprocmask(SIG_SETMASK, [], [pid 5362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282ac3990, parent_tid=0x7f8282ac3990, exit_signal=0, stack=0x7f8282aa3000, stack_size=0x20300, tls=0x7f8282ac36c0} [pid 5363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5362] <... clone3 resumed> => {parent_tid=[5364]}, 88) = 5364 ./strace-static-x86_64: Process 5364 attached [pid 5363] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5362] rt_sigprocmask(SIG_SETMASK, [], [pid 5364] rseq(0x7f8282ac3fe0, 0x20, 0, 0x53053053 [pid 5363] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5361] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... rseq resumed>) = 0 [pid 5364] set_robust_list(0x7f8282ac39a0, 24 [pid 5363] memfd_create("syzkaller", 0 [pid 5362] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... futex resumed>) = 0 [pid 5358] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5364] <... set_robust_list resumed>) = 0 [pid 5357] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5357] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5358] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5364] rt_sigprocmask(SIG_SETMASK, [], [pid 5363] <... memfd_create resumed>) = 3 [pid 5362] <... futex resumed>) = 0 [pid 5361] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5358] <... futex resumed>) = 0 [pid 5357] <... mmap resumed>) = 0x7f8282a82000 [pid 5364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5362] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5358] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5357] mprotect(0x7f8282a83000, 131072, PROT_READ|PROT_WRITE [pid 5364] memfd_create("syzkaller", 0 [pid 5357] <... mprotect resumed>) = 0 [ 86.836311][ T5358] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 86.836311][ T5358] [pid 5363] <... mmap resumed>) = 0x7f827a600000 [pid 5357] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8282aa2990, parent_tid=0x7f8282aa2990, exit_signal=0, stack=0x7f8282a82000, stack_size=0x20300, tls=0x7f8282aa26c0} => {parent_tid=[5365]}, 88) = 5365 [pid 5357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5357] futex(0x7f8282b9a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5357] futex(0x7f8282b9a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5365 attached [pid 5365] rseq(0x7f8282aa2fe0, 0x20, 0, 0x53053053 [pid 5364] <... memfd_create resumed>) = 3 [pid 5364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f827a600000 [pid 5365] <... rseq resumed>) = 0 [pid 5365] set_robust_list(0x7f8282aa29a0, 24) = 0 [pid 5365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5365] open(NULL, O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EFAULT (Bad address) [pid 5365] futex(0x7f8282b9a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5357] <... futex resumed>) = 0 [pid 5357] exit_group(0) = ? [pid 5358] <... futex resumed>) = ? [pid 5365] +++ exited with 0 +++ [pid 5358] +++ exited with 0 +++ [pid 5357] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5357, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} --- [pid 5083] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 4 entries */, 32768) = 104 [pid 5083] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5360] <... write resumed>) = 16777216 [pid 5360] munmap(0x7f827a600000, 138412032) = 0 [pid 5360] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5360] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5360] close(3) = 0 [pid 5360] close(4) = 0 [pid 5360] mkdir("./bus", 0777) = 0 [pid 5360] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_I_VERSION|MS_LAZYTIME, "discard,iocharset=cp874,errors=remount-ro,usrquota,iocharset=cp861,iocharset=cp1250,integrity") = 0 [pid 5360] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5360] chdir("./bus") = 0 [pid 5360] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5360] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 87.131814][ T5360] loop1: detected capacity change from 0 to 32768 [pid 5360] futex(0x7f8282b9a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] <... futex resumed>) = 0 [pid 5359] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5360] <... futex resumed>) = 0 [pid 5360] unlink("./file1" [pid 5359] futex(0x7f8282b9a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... umount2 resumed>) = 0 [pid 5083] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./21/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./21/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./21/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x555571ecc770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x555571ecc770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./21/bus") = 0 [pid 5083] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./21/binderfs") = 0 [pid 5083] getdents64(3, 0x555571ec4730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./21") = 0 [pid 5363] <... write resumed>) = 16777216 [pid 5083] mkdir("./22", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5363] munmap(0x7f827a600000, 138412032 [pid 5364] <... write resumed>) = 16777216 [pid 5360] <... unlink resumed>) = -1 EIO (Input/output error) [pid 5364] munmap(0x7f827a600000, 138412032 [pid 5360] futex(0x7f8282b9a6ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5359] <... futex resumed>) = 0 [pid 5360] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NOATIME|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL [pid 5359] futex(0x7f8282b9a6a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 87.173617][ T5360] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 87.173617][ T5360] [ 87.193906][ T5360] ERROR: (device loop1): remounting filesystem as read-only [ 87.208013][ T5360] ERROR: (device loop1): jfs_unlink: [ 87.208013][ T5360]