./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2865434 <...> Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. execve("./syz-executor2865434", ["./syz-executor2865434"], 0x7ffe5a747c30 /* 10 vars */) = 0 brk(NULL) = 0x555571745000 brk(0x555571745d00) = 0x555571745d00 arch_prctl(ARCH_SET_FS, 0x555571745380) = 0 set_tid_address(0x555571745650) = 5847 set_robust_list(0x555571745660, 24) = 0 rseq(0x555571745ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2865434", 4096) = 25 getrandom("\x74\x07\xdb\x97\x09\xde\xca\x85", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555571745d00 brk(0x555571766d00) = 0x555571766d00 brk(0x555571767000) = 0x555571767000 mprotect(0x7f7f0fe96000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5848 attached , child_tidptr=0x555571745650) = 5848 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5848] set_robust_list(0x555571745660, 24) = 0 ./strace-static-x86_64: Process 5849 attached [pid 5847] <... clone resumed>, child_tidptr=0x555571745650) = 5849 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5849] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5848] mkdir("./syzkaller.2xZ0gM", 0700 <unfinished ...> [pid 5849] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5850 attached [pid 5848] <... mkdir resumed>) = 0 [pid 5848] chmod("./syzkaller.2xZ0gM", 0777 <unfinished ...> [pid 5847] <... clone resumed>, child_tidptr=0x555571745650) = 5850 [pid 5850] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5849] mkdir("./syzkaller.75qPLL", 0700 <unfinished ...> [pid 5850] <... set_robust_list resumed>) = 0 [pid 5848] <... chmod resumed>) = 0 [pid 5848] chdir("./syzkaller.2xZ0gM" <unfinished ...> [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5850] mkdir("./syzkaller.Fj56eA", 0700 <unfinished ...> [pid 5849] <... mkdir resumed>) = 0 [pid 5848] <... chdir resumed>) = 0 [pid 5850] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5851 attached [pid 5847] <... clone resumed>, child_tidptr=0x555571745650) = 5851 [pid 5849] chmod("./syzkaller.75qPLL", 0777 <unfinished ...> [pid 5848] mkdir("./0", 0777 <unfinished ...> [pid 5851] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5849] <... chmod resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5851] <... set_robust_list resumed>) = 0 [pid 5850] chmod("./syzkaller.Fj56eA", 0777 <unfinished ...> [pid 5849] chdir("./syzkaller.75qPLL" <unfinished ...> [pid 5848] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5852 attached [pid 5850] <... chmod resumed>) = 0 [pid 5849] <... chdir resumed>) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5850] chdir("./syzkaller.Fj56eA") = 0 [pid 5852] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5850] mkdir("./0", 0777 <unfinished ...> [pid 5849] mkdir("./0", 0777 <unfinished ...> [pid 5848] <... openat resumed>) = 3 [pid 5852] <... set_robust_list resumed>) = 0 [pid 5852] mkdir("./syzkaller.Ymna4g", 0700 <unfinished ...> [pid 5851] mkdir("./syzkaller.SpwQpI", 0700 <unfinished ...> [pid 5847] <... clone resumed>, child_tidptr=0x555571745650) = 5852 [pid 5850] <... mkdir resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5848] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5851] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...> [pid 5848] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5852] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5853 attached [pid 5850] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...> [pid 5852] chmod("./syzkaller.Ymna4g", 0777 <unfinished ...> [pid 5847] <... clone resumed>, child_tidptr=0x555571745650) = 5853 [pid 5853] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5852] <... chmod resumed>) = 0 [pid 5851] chmod("./syzkaller.SpwQpI", 0777 <unfinished ...> [pid 5850] <... openat resumed>) = 3 [pid 5849] <... openat resumed>) = 3 [pid 5848] close(3 <unfinished ...> [pid 5852] chdir("./syzkaller.Ymna4g" <unfinished ...> [pid 5853] <... set_robust_list resumed>) = 0 [pid 5851] <... chmod resumed>) = 0 [pid 5850] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5849] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5848] <... close resumed>) = 0 [pid 5849] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5853] mkdir("./syzkaller.KDhqFQ", 0700 <unfinished ...> [pid 5849] close(3) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached ./strace-static-x86_64: Process 5854 attached <unfinished ...> [pid 5852] <... chdir resumed>) = 0 [pid 5851] chdir("./syzkaller.SpwQpI" <unfinished ...> [pid 5850] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5855] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5854] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5853] <... mkdir resumed>) = 0 [pid 5851] <... chdir resumed>) = 0 [pid 5850] close(3 <unfinished ...> [pid 5849] <... clone resumed>, child_tidptr=0x555571745650) = 5854 [pid 5852] mkdir("./0", 0777 <unfinished ...> [pid 5850] <... close resumed>) = 0 [pid 5855] <... set_robust_list resumed>) = 0 [pid 5854] <... set_robust_list resumed>) = 0 [pid 5851] mkdir("./0", 0777 <unfinished ...> [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5855] chdir("./0" <unfinished ...> [pid 5854] chdir("./0" <unfinished ...> [pid 5852] <... mkdir resumed>) = 0 [pid 5855] <... chdir resumed>) = 0 [pid 5854] <... chdir resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555571745650) = 5855 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5856 attached <unfinished ...> [pid 5855] <... prctl resumed>) = 0 [pid 5854] <... prctl resumed>) = 0 [pid 5856] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5855] setpgid(0, 0 <unfinished ...> [pid 5854] setpgid(0, 0 <unfinished ...> [pid 5853] chmod("./syzkaller.KDhqFQ", 0777 <unfinished ...> [pid 5852] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...> [pid 5851] <... mkdir resumed>) = 0 [pid 5850] <... clone resumed>, child_tidptr=0x555571745650) = 5856 [pid 5856] <... set_robust_list resumed>) = 0 [pid 5855] <... setpgid resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5854] <... setpgid resumed>) = 0 [pid 5853] <... chmod resumed>) = 0 [pid 5852] <... openat resumed>) = 3 [pid 5856] chdir("./0" <unfinished ...> [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5855] <... openat resumed>) = 3 [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] <... chdir resumed>) = 0 [pid 5855] write(3, "1000", 4 <unfinished ...> [pid 5853] chdir("./syzkaller.KDhqFQ" <unfinished ...> [pid 5852] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5851] <... openat resumed>) = 3 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5855] <... write resumed>) = 4 [pid 5854] write(3, "1000", 4 <unfinished ...> [pid 5853] <... chdir resumed>) = 0 [pid 5852] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5856] <... prctl resumed>) = 0 [pid 5855] close(3 <unfinished ...> [pid 5851] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5856] setpgid(0, 0 <unfinished ...> [pid 5855] <... close resumed>) = 0 [pid 5854] <... write resumed>) = 4 [pid 5853] mkdir("./0", 0777 <unfinished ...> [pid 5852] close(3 <unfinished ...> [pid 5851] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5856] <... setpgid resumed>) = 0 [pid 5855] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5854] close(3 <unfinished ...> [pid 5851] close(3 <unfinished ...> [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5855] <... symlink resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5853] <... mkdir resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5854] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5857 attached ) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5858 attached executing program <unfinished ...> [pid 5857] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5856] <... openat resumed>) = 3 [pid 5855] write(1, "executing program\n", 18 <unfinished ...> [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5858] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5857] <... set_robust_list resumed>) = 0 [pid 5856] write(3, "1000", 4 <unfinished ...> [pid 5855] <... write resumed>) = 18 [pid 5853] <... openat resumed>) = 3 executing program [pid 5858] <... set_robust_list resumed>) = 0 [pid 5857] chdir("./0" <unfinished ...> [pid 5856] <... write resumed>) = 4 [pid 5855] memfd_create("syzkaller", 0 <unfinished ...> [pid 5854] write(1, "executing program\n", 18 <unfinished ...> [pid 5853] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5852] <... clone resumed>, child_tidptr=0x555571745650) = 5858 [pid 5851] <... clone resumed>, child_tidptr=0x555571745650) = 5857 [pid 5854] <... write resumed>) = 18 [pid 5853] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5856] close(3 <unfinished ...> [pid 5858] chdir("./0" <unfinished ...> [pid 5857] <... chdir resumed>) = 0 [pid 5854] memfd_create("syzkaller", 0 <unfinished ...> [pid 5858] <... chdir resumed>) = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5856] <... close resumed>) = 0 [pid 5855] <... memfd_create resumed>) = 3 [pid 5854] <... memfd_create resumed>) = 3 [pid 5853] close(3 <unfinished ...> [pid 5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5855] <... mmap resumed>) = 0x7f7f07800000 [pid 5854] <... mmap resumed>) = 0x7f7f07800000 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5860 attached <unfinished ...> [pid 5857] <... prctl resumed>) = 0 [pid 5856] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] setpgid(0, 0 <unfinished ...> [pid 5856] <... symlink resumed>) = 0 [pid 5858] setpgid(0, 0 <unfinished ...> [pid 5857] <... setpgid resumed>) = 0 [pid 5858] <... setpgid resumed>) = 0 [pid 5860] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5856] write(1, "executing program\n", 18 <unfinished ...> [pid 5860] <... set_robust_list resumed>) = 0 [pid 5858] <... openat resumed>) = 3 [pid 5860] chdir("./0") = 0 [pid 5860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5860] setpgid(0, 0) = 0 [pid 5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 5856] <... write resumed>) = 18 [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5860 [pid 5857] <... openat resumed>) = 3 [pid 5860] write(3, "1000", 4) = 4 [pid 5860] close(3 <unfinished ...> [pid 5856] memfd_create("syzkaller", 0 <unfinished ...> [pid 5860] <... close resumed>) = 0 [pid 5860] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5858] write(3, "1000", 4 <unfinished ...> [pid 5857] write(3, "1000", 4 <unfinished ...> [pid 5856] <... memfd_create resumed>) = 3 [pid 5856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5857] <... write resumed>) = 4 executing program [pid 5860] write(1, "executing program\n", 18 <unfinished ...> [pid 5858] <... write resumed>) = 4 [pid 5857] close(3 <unfinished ...> [pid 5856] <... mmap resumed>) = 0x7f7f07800000 [pid 5857] <... close resumed>) = 0 [pid 5857] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5858] close(3) = 0 [pid 5857] <... symlink resumed>) = 0 [pid 5860] <... write resumed>) = 18 [pid 5860] memfd_create("syzkaller", 0executing program ) = 3 [pid 5858] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5857] write(1, "executing program\n", 18 <unfinished ...> [pid 5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5857] <... write resumed>) = 18 [pid 5858] <... symlink resumed>) = 0 [pid 5858] write(1, "executing program\n", 18 <unfinished ...> [pid 5857] memfd_create("syzkaller", 0executing program <unfinished ...> [pid 5858] <... write resumed>) = 18 [pid 5857] <... memfd_create resumed>) = 3 [pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5858] memfd_create("syzkaller", 0 <unfinished ...> [pid 5857] <... mmap resumed>) = 0x7f7f07800000 [pid 5858] <... memfd_create resumed>) = 3 [pid 5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5856] <... write resumed>) = 16777216 [pid 5857] <... write resumed>) = 16777216 [pid 5856] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5857] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5855] <... write resumed>) = 16777216 [pid 5855] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5854] <... write resumed>) = 16777216 [pid 5854] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5860] <... write resumed>) = 16777216 [pid 5856] <... munmap resumed>) = 0 [pid 5860] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5856] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5856] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5858] <... write resumed>) = 16777216 [pid 5855] <... munmap resumed>) = 0 [pid 5857] <... munmap resumed>) = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5857] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5860] <... munmap resumed>) = 0 [pid 5858] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5856] <... ioctl resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5857] <... ioctl resumed>) = 0 [pid 5860] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5856] close(3 <unfinished ...> [pid 5855] <... openat resumed>) = 4 [pid 5854] <... munmap resumed>) = 0 [pid 5860] <... openat resumed>) = 4 [pid 5857] close(3 <unfinished ...> [pid 5856] <... close resumed>) = 0 [pid 5855] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5854] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...> [pid 5860] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5857] <... close resumed>) = 0 [pid 5856] close(4 <unfinished ...> [ 197.199612][ T5856] loop2: detected capacity change from 0 to 32768 [ 197.217401][ T5857] loop3: detected capacity change from 0 to 32768 [ 197.239844][ T5855] loop0: detected capacity change from 0 to 32768 [pid 5857] close(4 <unfinished ...> [pid 5856] <... close resumed>) = 0 [pid 5857] <... close resumed>) = 0 [pid 5860] <... ioctl resumed>) = 0 [pid 5858] <... munmap resumed>) = 0 [pid 5857] mkdir("./file0", 0777 <unfinished ...> [pid 5856] mkdir("./file0", 0777 <unfinished ...> [pid 5855] <... ioctl resumed>) = 0 [pid 5854] <... openat resumed>) = 4 [pid 5860] close(3 <unfinished ...> [pid 5858] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...> [pid 5857] <... mkdir resumed>) = 0 [pid 5856] <... mkdir resumed>) = 0 [pid 5855] close(3 <unfinished ...> [ 197.248243][ T5860] loop5: detected capacity change from 0 to 32768 [pid 5854] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5860] <... close resumed>) = 0 [pid 5858] <... openat resumed>) = 4 [pid 5857] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5856] mount("/dev/loop2", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5855] <... close resumed>) = 0 [pid 5860] close(4 <unfinished ...> [pid 5858] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5855] close(4 <unfinished ...> [pid 5860] <... close resumed>) = 0 [pid 5854] <... ioctl resumed>) = 0 [pid 5854] close(3) = 0 [pid 5860] mkdir("./file0", 0777 <unfinished ...> [pid 5854] close(4) = 0 [pid 5854] mkdir("./file0", 0777 <unfinished ...> [pid 5860] <... mkdir resumed>) = 0 [pid 5854] <... mkdir resumed>) = 0 [pid 5860] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5854] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5858] <... ioctl resumed>) = 0 [pid 5857] <... mount resumed>) = 0 [pid 5856] <... mount resumed>) = 0 [pid 5855] <... close resumed>) = 0 [pid 5855] mkdir("./file0", 0777) = 0 [pid 5858] close(3) = 0 [pid 5858] close(4) = 0 [pid 5857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5858] mkdir("./file0", 0777 <unfinished ...> [pid 5857] <... openat resumed>) = 3 [pid 5857] chdir("./file0" <unfinished ...> [pid 5856] <... openat resumed>) = 3 [pid 5857] <... chdir resumed>) = 0 [pid 5856] chdir("./file0" <unfinished ...> [pid 5857] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5856] <... chdir resumed>) = 0 [pid 5857] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5856] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...> [pid 5858] <... mkdir resumed>) = 0 [pid 5857] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5855] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5858] mount("/dev/loop4", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5856] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5856] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5854] <... mount resumed>) = 0 [pid 5856] <... symlink resumed>) = 0 [pid 5854] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5854] chdir("./file0") = 0 [ 197.272037][ T5854] loop1: detected capacity change from 0 to 32768 [ 197.284438][ T5858] loop4: detected capacity change from 0 to 32768 [pid 5854] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5860] <... mount resumed>) = 0 [pid 5856] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5854] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5857] <... symlink resumed>) = 0 [pid 5856] <... mount resumed>) = 0 [pid 5854] <... symlink resumed>) = 0 [pid 5858] <... mount resumed>) = 0 [pid 5860] <... openat resumed>) = 3 [pid 5858] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5857] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5856] exit_group(0 <unfinished ...> [pid 5855] <... mount resumed>) = 0 [pid 5854] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5860] chdir("./file0" <unfinished ...> [pid 5855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5860] <... chdir resumed>) = 0 [pid 5860] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5857] <... mount resumed>) = 0 [pid 5854] <... mount resumed>) = 0 [pid 5860] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5857] exit_group(0 <unfinished ...> [pid 5860] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5857] <... exit_group resumed>) = ? [pid 5858] <... openat resumed>) = 3 [pid 5857] +++ exited with 0 +++ [pid 5856] <... exit_group resumed>) = ? [pid 5855] chdir("./file0" <unfinished ...> [pid 5854] exit_group(0 <unfinished ...> [pid 5858] chdir("./file0" <unfinished ...> [pid 5856] +++ exited with 0 +++ [pid 5855] <... chdir resumed>) = 0 [pid 5854] <... exit_group resumed>) = ? [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5860] <... symlink resumed>) = 0 [pid 5858] <... chdir resumed>) = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5854] +++ exited with 0 +++ [pid 5850] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5860] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 197.338927][ T114] blkno = 5002c, nblocks = 1 [ 197.348918][ T114] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 197.348918][ T114] [ 197.362435][ T113] blkno = 5002c, nblocks = 1 [ 197.368582][ T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 197.368582][ T113] [pid 5850] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5854, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} --- [pid 5850] <... openat resumed>) = 3 [pid 5849] restart_syscall(<... resuming interrupted clone ...> <unfinished ...> [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...> [pid 5855] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5850] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] <... restart_syscall resumed>) = 0 [pid 5858] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5855] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5851] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5850] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./0/binderfs", <unfinished ...> [pid 5849] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] unlink("./0/binderfs") = 0 [pid 5849] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, <unfinished ...> [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5858] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5855] <... symlink resumed>) = 0 [pid 5851] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./0/binderfs") = 0 [pid 5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5855] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5851] <... openat resumed>) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5858] <... symlink resumed>) = 0 [pid 5851] getdents64(3, <unfinished ...> [pid 5858] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5851] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5855] <... mount resumed>) = 0 [pid 5851] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5855] exit_group(0 <unfinished ...> [pid 5851] unlink("./0/binderfs" <unfinished ...> [pid 5855] <... exit_group resumed>) = ? [ 197.385813][ T114] ERROR: (device loop2): remounting filesystem as read-only [ 197.395458][ T113] ERROR: (device loop3): remounting filesystem as read-only [ 197.403892][ T113] blkno = 5002c, nblocks = 1 [ 197.410128][ T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 197.410128][ T113] [ 197.425556][ T114] blkno = 5002c, nblocks = 1 [ 197.430801][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [pid 5855] +++ exited with 0 +++ [pid 5851] <... unlink resumed>) = 0 [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] <... openat resumed>) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./0/binderfs") = 0 [ 197.430801][ T114] [ 197.445310][ T113] ERROR: (device loop1): remounting filesystem as read-only [ 197.453069][ T114] ERROR: (device loop5): remounting filesystem as read-only [ 197.462185][ T5851] JFS: metapage_get_blocks failed [ 197.468808][ T114] blkno = 5002c, nblocks = 1 [ 197.474826][ T5860] JFS: metapage_get_blocks failed [pid 5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5860] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5860] exit_group(0) = ? [pid 5860] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5860, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} --- [pid 5853] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./0/binderfs", <unfinished ...> [pid 5858] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5858] exit_group(0 <unfinished ...> [pid 5853] unlink("./0/binderfs" <unfinished ...> [pid 5858] <... exit_group resumed>) = ? [pid 5853] <... unlink resumed>) = 0 [pid 5858] +++ exited with 0 +++ [pid 5853] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./0/binderfs") = 0 [ 197.493069][ T113] blkno = 5002c, nblocks = 1 [ 197.497760][ T113] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 197.497760][ T113] [ 197.508951][ T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 197.508951][ T114] [ 197.520899][ T114] ERROR: (device loop0): remounting filesystem as read-only [ 197.528988][ T113] ERROR: (device loop4): remounting filesystem as read-only [pid 5852] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] <... umount2 resumed>) = 0 [pid 5853] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./0/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./0") = 0 [pid 5853] mkdir("./1", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5864 attached , child_tidptr=0x555571745650) = 5864 [pid 5864] set_robust_list(0x555571745660, 24) = 0 [pid 5864] chdir("./1") = 0 [ 197.674912][ T5849] JFS: metapage_get_blocks failed [ 197.682210][ T5850] JFS: metapage_get_blocks failed [pid 5864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5864] setpgid(0, 0) = 0 [pid 5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5864] write(3, "1000", 4) = 4 [pid 5864] close(3) = 0 [pid 5864] symlink("/dev/binderfs", "./binderfs") = 0 executing program [ 197.723568][ T5848] JFS: metapage_get_blocks failed [pid 5864] write(1, "executing program\n", 18) = 18 [pid 5864] memfd_create("syzkaller", 0) = 3 [pid 5851] <... umount2 resumed>) = 0 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./0/file0") = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./0") = 0 [pid 5851] mkdir("./1", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 <unfinished ...> [pid 5850] <... umount2 resumed>) = 0 [pid 5849] <... umount2 resumed>) = 0 [pid 5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5850] newfstatat(AT_FDCWD, "./0/file0", <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] newfstatat(AT_FDCWD, "./0/file0", <unfinished ...> [pid 5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5850] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] <... openat resumed>) = 4 [pid 5849] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5850] newfstatat(4, "", <unfinished ...> [pid 5849] <... openat resumed>) = 4 [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] newfstatat(4, "", <unfinished ...> [pid 5850] getdents64(4, <unfinished ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, <unfinished ...> [pid 5850] getdents64(4, <unfinished ...> [pid 5849] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5850] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5850] close(4 <unfinished ...> [pid 5849] rmdir("./0/file0" <unfinished ...> [pid 5850] <... close resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5850] rmdir("./0/file0") = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5850] getdents64(3, <unfinished ...> [pid 5849] close(3 <unfinished ...> [pid 5850] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5849] <... close resumed>) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./0" <unfinished ...> [pid 5849] rmdir("./0" <unfinished ...> [pid 5850] <... rmdir resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] mkdir("./1", 0777) = 0 [pid 5850] mkdir("./1", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...> [pid 5848] <... umount2 resumed>) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...> [pid 5849] <... openat resumed>) = 3 [pid 5850] <... openat resumed>) = 3 [pid 5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5850] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5849] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5850] <... ioctl resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5850] close(3 <unfinished ...> [pid 5849] close(3 <unfinished ...> [pid 5848] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./0/file0") = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./0") = 0 [pid 5851] <... close resumed>) = 0 [pid 5848] mkdir("./1", 0777 <unfinished ...> [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5848] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5865 attached [pid 5851] <... clone resumed>, child_tidptr=0x555571745650) = 5865 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 <unfinished ...> [pid 5865] set_robust_list(0x555571745660, 24) = 0 [pid 5865] chdir("./1") = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5865] write(1, "executing program\n", 18) = 18 [pid 5865] memfd_create("syzkaller", 0) = 3 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5864] <... write resumed>) = 16777216 [pid 5864] munmap(0x7f7f07800000, 138412032) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5864] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5850] <... close resumed>) = 0 [pid 5864] <... ioctl resumed>) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5866 attached <unfinished ...> [pid 5866] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5864] close(3 <unfinished ...> [pid 5850] <... clone resumed>, child_tidptr=0x555571745650) = 5866 [pid 5849] <... close resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5866] <... set_robust_list resumed>) = 0 [pid 5864] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5866] chdir("./1" <unfinished ...> [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5867 attached <unfinished ...> [pid 5866] <... chdir resumed>) = 0 [pid 5864] close(4./strace-static-x86_64: Process 5868 attached <unfinished ...> [pid 5867] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5864] <... close resumed>) = 0 [pid 5866] <... prctl resumed>) = 0 [pid 5866] setpgid(0, 0 <unfinished ...> [pid 5864] mkdir("./file0", 0777 <unfinished ...> [pid 5867] <... set_robust_list resumed>) = 0 [pid 5866] <... setpgid resumed>) = 0 [pid 5864] <... mkdir resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555571745650) = 5867 [pid 5848] <... clone resumed>, child_tidptr=0x555571745650) = 5868 [pid 5868] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5868] <... set_robust_list resumed>) = 0 [pid 5867] chdir("./1" <unfinished ...> [pid 5868] chdir("./1" <unfinished ...> [pid 5867] <... chdir resumed>) = 0 [pid 5868] <... chdir resumed>) = 0 [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5866] <... openat resumed>) = 3 [pid 5864] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5867] <... prctl resumed>) = 0 [pid 5868] <... prctl resumed>) = 0 [pid 5868] setpgid(0, 0 <unfinished ...> [pid 5867] setpgid(0, 0 <unfinished ...> [pid 5868] <... setpgid resumed>) = 0 [pid 5866] write(3, "1000", 4 <unfinished ...> [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5867] <... setpgid resumed>) = 0 [pid 5866] <... write resumed>) = 4 [pid 5866] close(3 <unfinished ...> [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5866] <... close resumed>) = 0 [pid 5868] <... openat resumed>) = 3 [pid 5867] <... openat resumed>) = 3 [pid 5866] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5866] write(1, "executing program\n", 18executing program ) = 18 [pid 5866] memfd_create("syzkaller", 0 <unfinished ...> [pid 5864] <... mount resumed>) = 0 [pid 5864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5864] chdir("./file0") = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5864] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5868] write(3, "1000", 4 <unfinished ...> [pid 5867] write(3, "1000", 4 <unfinished ...> [ 198.354639][ T5864] loop5: detected capacity change from 0 to 32768 [pid 5868] <... write resumed>) = 4 [pid 5867] <... write resumed>) = 4 [pid 5866] <... memfd_create resumed>) = 3 [pid 5864] <... symlink resumed>) = 0 [pid 5868] close(3 <unfinished ...> [pid 5867] close(3 <unfinished ...> [pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5868] <... close resumed>) = 0 [pid 5867] <... close resumed>) = 0 [pid 5866] <... mmap resumed>) = 0x7f7f07800000 [pid 5864] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5868] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5867] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216executing program executing program <unfinished ...> [pid 5868] <... symlink resumed>) = 0 [pid 5867] <... symlink resumed>) = 0 [pid 5864] <... mount resumed>) = 0 [pid 5868] write(1, "executing program\n", 18 <unfinished ...> [pid 5867] write(1, "executing program\n", 18 <unfinished ...> [pid 5868] <... write resumed>) = 18 [pid 5867] <... write resumed>) = 18 [pid 5868] memfd_create("syzkaller", 0 <unfinished ...> [pid 5867] memfd_create("syzkaller", 0 <unfinished ...> [pid 5868] <... memfd_create resumed>) = 3 [pid 5867] <... memfd_create resumed>) = 3 [pid 5864] exit_group(0 <unfinished ...> [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5864] <... exit_group resumed>) = ? [pid 5868] <... mmap resumed>) = 0x7f7f07800000 [pid 5867] <... mmap resumed>) = 0x7f7f07800000 [pid 5864] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5864, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 198.420018][ T114] blkno = 5002c, nblocks = 1 [ 198.434578][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 198.434578][ T114] [pid 5853] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./1/binderfs") = 0 [ 198.465368][ T114] ERROR: (device loop5): remounting filesystem as read-only [ 198.503824][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5853] <... umount2 resumed>) = 0 [pid 5853] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./1/file0", <unfinished ...> [pid 5865] <... write resumed>) = 16777216 [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5865] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5853] <... openat resumed>) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./1/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./1") = 0 [pid 5853] mkdir("./2", 0777 <unfinished ...> [pid 5865] <... munmap resumed>) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5853] <... mkdir resumed>) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5865] <... openat resumed>) = 4 [pid 5865] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5853] <... openat resumed>) = 3 [pid 5865] <... ioctl resumed>) = 0 [pid 5853] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5866] <... write resumed>) = 16777216 [pid 5865] close(3 <unfinished ...> [pid 5853] <... ioctl resumed>) = 0 [pid 5853] close(3 <unfinished ...> [pid 5865] <... close resumed>) = 0 [pid 5865] close(4 <unfinished ...> [pid 5866] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5865] <... close resumed>) = 0 [ 198.934141][ T5865] loop3: detected capacity change from 0 to 32768 [pid 5865] mkdir("./file0", 0777 <unfinished ...> [pid 5866] <... munmap resumed>) = 0 [pid 5865] <... mkdir resumed>) = 0 [pid 5865] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5866] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5865] <... mount resumed>) = 0 [pid 5866] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5867] <... write resumed>) = 16777216 [pid 5867] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5866] <... ioctl resumed>) = 0 [pid 5865] <... openat resumed>) = 3 [pid 5866] close(3 <unfinished ...> [pid 5865] chdir("./file0" <unfinished ...> [pid 5866] <... close resumed>) = 0 [pid 5866] close(4 <unfinished ...> [pid 5865] <... chdir resumed>) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5866] <... close resumed>) = 0 [pid 5865] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5865] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5866] mkdir("./file0", 0777) = 0 [pid 5866] mount("/dev/loop2", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5865] <... symlink resumed>) = 0 [ 199.075507][ T5866] loop2: detected capacity change from 0 to 32768 [pid 5865] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5865] exit_group(0 <unfinished ...> [pid 5867] <... munmap resumed>) = 0 [pid 5865] <... exit_group resumed>) = ? [pid 5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 199.116005][ T113] blkno = 5002c, nblocks = 1 [ 199.131321][ T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 199.131321][ T113] [ 199.155473][ T5867] loop1: detected capacity change from 0 to 32768 [pid 5867] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5865] +++ exited with 0 +++ [pid 5867] close(3 <unfinished ...> [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5867] <... close resumed>) = 0 [pid 5867] close(4 <unfinished ...> [pid 5866] <... mount resumed>) = 0 [pid 5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5867] <... close resumed>) = 0 [pid 5866] <... openat resumed>) = 3 [pid 5851] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5866] chdir("./file0" <unfinished ...> [pid 5867] mkdir("./file0", 0777 <unfinished ...> [pid 5866] <... chdir resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5866] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...> [pid 5867] <... mkdir resumed>) = 0 [pid 5866] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5866] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5851] <... openat resumed>) = 3 [pid 5867] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5867] <... mount resumed>) = 0 [pid 5867] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5867] chdir("./file0") = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5868] <... write resumed>) = 16777216 [pid 5867] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 199.173415][ T113] ERROR: (device loop3): remounting filesystem as read-only [pid 5867] <... symlink resumed>) = 0 [pid 5866] <... symlink resumed>) = 0 [pid 5867] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5866] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5851] unlink("./1/binderfs" <unfinished ...> [pid 5868] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5851] <... unlink resumed>) = 0 [pid 5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5867] <... mount resumed>) = 0 [pid 5867] exit_group(0) = ? [pid 5867] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5867, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 199.214010][ T114] blkno = 5002c, nblocks = 1 [ 199.218694][ T114] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 199.218694][ T114] [ 199.232755][ T113] blkno = 5002c, nblocks = 1 [ 199.250020][ T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 199.250020][ T113] [pid 5868] <... munmap resumed>) = 0 [pid 5849] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5868] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5849] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5869 attached [pid 5869] set_robust_list(0x555571745660, 24) = 0 [pid 5869] chdir("./2") = 0 [pid 5849] newfstatat(3, "", <unfinished ...> [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5868] <... openat resumed>) = 4 [pid 5849] unlink("./1/binderfs" <unfinished ...> [pid 5868] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5869 [pid 5849] <... unlink resumed>) = 0 [pid 5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5869] <... openat resumed>) = 3 [pid 5869] write(3, "1000", 4 <unfinished ...> [pid 5868] <... ioctl resumed>) = 0 [pid 5866] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5869] <... write resumed>) = 4 [pid 5868] close(3 <unfinished ...> [pid 5866] exit_group(0 <unfinished ...> [pid 5869] close(3 <unfinished ...> [pid 5868] <... close resumed>) = 0 [pid 5866] <... exit_group resumed>) = ? [pid 5869] <... close resumed>) = 0 [pid 5868] close(4 <unfinished ...> [pid 5866] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5866, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5850] restart_syscall(<... resuming interrupted clone ...> <unfinished ...> [pid 5869] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5868] <... close resumed>) = 0 [pid 5850] <... restart_syscall resumed>) = 0 executing program [pid 5869] <... symlink resumed>) = 0 [pid 5868] mkdir("./file0", 0777 <unfinished ...> [pid 5869] write(1, "executing program\n", 18 <unfinished ...> [pid 5850] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5869] <... write resumed>) = 18 [pid 5850] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5868] <... mkdir resumed>) = 0 [pid 5850] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5869] memfd_create("syzkaller", 0 <unfinished ...> [pid 5850] <... openat resumed>) = 3 [pid 5869] <... memfd_create resumed>) = 3 [pid 5850] newfstatat(3, "", <unfinished ...> [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5869] <... mmap resumed>) = 0x7f7f07800000 [pid 5850] getdents64(3, <unfinished ...> [pid 5868] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5850] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./1/binderfs") = 0 [pid 5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5868] <... mount resumed>) = 0 [pid 5868] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 199.260245][ T5851] JFS: metapage_get_blocks failed [ 199.269459][ T114] ERROR: (device loop2): remounting filesystem as read-only [ 199.277004][ T113] ERROR: (device loop1): remounting filesystem as read-only [ 199.286777][ T5868] loop0: detected capacity change from 0 to 32768 [ 199.303771][ T5849] JFS: metapage_get_blocks failed [pid 5868] chdir("./file0") = 0 [pid 5868] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5868] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5868] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5868] exit_group(0) = ? [pid 5868] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./1/binderfs") = 0 [pid 5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [ 199.365822][ T114] blkno = 5002c, nblocks = 1 [ 199.370966][ T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 199.370966][ T114] [ 199.388299][ T114] ERROR: (device loop0): remounting filesystem as read-only [ 199.402189][ T5848] JFS: metapage_get_blocks failed [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5869] <... write resumed>) = 16777216 [pid 5869] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5849] <... umount2 resumed>) = 0 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5869] <... munmap resumed>) = 0 [pid 5851] close(4 <unfinished ...> [pid 5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5869] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5869] <... ioctl resumed>) = 0 [pid 5851] rmdir("./1/file0" <unfinished ...> [pid 5849] newfstatat(AT_FDCWD, "./1/file0", <unfinished ...> [pid 5869] close(3) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5869] close(4) = 0 [pid 5851] <... rmdir resumed>) = 0 [pid 5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5869] mkdir("./file0", 0777 <unfinished ...> [pid 5851] getdents64(3, <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5869] <... mkdir resumed>) = 0 [pid 5851] close(3 <unfinished ...> [pid 5849] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5849] <... openat resumed>) = 4 [pid 5851] rmdir("./1" <unfinished ...> [pid 5869] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5851] <... rmdir resumed>) = 0 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5851] mkdir("./2", 0777) = 0 [pid 5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./1/file0") = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 <unfinished ...> [pid 5869] <... mount resumed>) = 0 [pid 5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5849] getdents64(3, <unfinished ...> [pid 5869] <... openat resumed>) = 3 [pid 5849] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5869] chdir("./file0") = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./1" <unfinished ...> [pid 5869] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5849] <... rmdir resumed>) = 0 [pid 5869] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] mkdir("./2", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 199.594956][ T5869] loop5: detected capacity change from 0 to 32768 [pid 5849] close(3 <unfinished ...> [pid 5869] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5869] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5869] exit_group(0) = ? [pid 5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5869] +++ exited with 0 +++ [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5848] newfstatat(AT_FDCWD, "./1/file0", <unfinished ...> [pid 5853] restart_syscall(<... resuming interrupted clone ...> <unfinished ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5853] <... restart_syscall resumed>) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", <unfinished ...> [pid 5853] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(4, <unfinished ...> [pid 5853] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5848] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, <unfinished ...> [pid 5853] <... openat resumed>) = 3 [pid 5853] newfstatat(3, "", <unfinished ...> [pid 5848] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] close(4) = 0 [pid 5853] getdents64(3, <unfinished ...> [pid 5848] rmdir("./1/file0" <unfinished ...> [pid 5853] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] <... rmdir resumed>) = 0 [pid 5853] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(3, <unfinished ...> [pid 5853] newfstatat(AT_FDCWD, "./2/binderfs", <unfinished ...> [pid 5848] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] close(3) = 0 [pid 5853] unlink("./2/binderfs") = 0 [ 199.683201][ T114] blkno = 5002c, nblocks = 1 [ 199.687870][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 199.687870][ T114] [pid 5848] rmdir("./1" <unfinished ...> [pid 5853] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] <... rmdir resumed>) = 0 [pid 5848] mkdir("./2", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [ 199.734862][ T114] ERROR: (device loop5): remounting filesystem as read-only [ 199.766292][ T5853] JFS: metapage_get_blocks failed [pid 5848] close(3 <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5870 ./strace-static-x86_64: Process 5870 attached [pid 5870] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5849] <... close resumed>) = 0 [pid 5870] <... set_robust_list resumed>) = 0 [pid 5870] chdir("./2" <unfinished ...> [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5871 attached <unfinished ...> [pid 5870] <... chdir resumed>) = 0 [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5871] set_robust_list(0x555571745660, 24) = 0 [pid 5870] setpgid(0, 0 <unfinished ...> [pid 5871] chdir("./2" <unfinished ...> [pid 5849] <... clone resumed>, child_tidptr=0x555571745650) = 5871 [pid 5870] <... setpgid resumed>) = 0 [pid 5871] <... chdir resumed>) = 0 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5871] setpgid(0, 0 <unfinished ...> [pid 5870] <... openat resumed>) = 3 [pid 5870] write(3, "1000", 4 <unfinished ...> [pid 5871] <... setpgid resumed>) = 0 [pid 5870] <... write resumed>) = 4 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5870] close(3) = 0 [pid 5848] <... close resumed>) = 0 [pid 5870] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5871] <... openat resumed>) = 3 [pid 5870] <... symlink resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5871] write(3, "1000", 4executing program <unfinished ...> [pid 5870] write(1, "executing program\n", 18 <unfinished ...> [pid 5871] <... write resumed>) = 4 [pid 5870] <... write resumed>) = 18 ./strace-static-x86_64: Process 5872 attached [pid 5871] close(3) = 0 [pid 5872] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5870] memfd_create("syzkaller", 0 <unfinished ...> [pid 5848] <... clone resumed>, child_tidptr=0x555571745650) = 5872 [pid 5872] <... set_robust_list resumed>) = 0 [pid 5871] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5870] <... memfd_create resumed>) = 3 [pid 5872] chdir("./2" <unfinished ...> [pid 5871] <... symlink resumed>) = 0 [pid 5870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5872] <... chdir resumed>) = 0 [pid 5870] <... mmap resumed>) = 0x7f7f07800000 executing program [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5871] write(1, "executing program\n", 18) = 18 [pid 5871] memfd_create("syzkaller", 0) = 3 [pid 5872] <... prctl resumed>) = 0 [pid 5872] setpgid(0, 0 <unfinished ...> [pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5872] <... setpgid resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5872] write(3, "1000", 4) = 4 [pid 5872] close(3) = 0 [pid 5872] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5872] write(1, "executing program\n", 18) = 18 [pid 5872] memfd_create("syzkaller", 0) = 3 [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5853] <... umount2 resumed>) = 0 [pid 5853] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./2/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./2") = 0 [pid 5853] mkdir("./3", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3 <unfinished ...> [pid 5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5873 attached , child_tidptr=0x555571745650) = 5873 [pid 5873] set_robust_list(0x555571745660, 24) = 0 [pid 5873] chdir("./3") = 0 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5873] setpgid(0, 0) = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5873] write(3, "1000", 4) = 4 [pid 5873] close(3) = 0 [pid 5873] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5873] write(1, "executing program\n", 18) = 18 [pid 5873] memfd_create("syzkaller", 0) = 3 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5870] <... write resumed>) = 16777216 [pid 5870] munmap(0x7f7f07800000, 138412032) = 0 [pid 5870] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5870] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5870] close(3) = 0 [pid 5870] close(4) = 0 [pid 5870] mkdir("./file0", 0777) = 0 [pid 5870] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5870] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5870] chdir("./file0") = 0 [pid 5870] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 200.424795][ T5870] loop3: detected capacity change from 0 to 32768 [pid 5870] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5870] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5870] exit_group(0) = ? [pid 5870] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5851] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./2/binderfs") = 0 [pid 5851] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5871] <... write resumed>) = 16777216 [pid 5871] munmap(0x7f7f07800000, 138412032) = 0 [pid 5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [ 200.515458][ T113] blkno = 5002c, nblocks = 1 [ 200.520145][ T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 200.520145][ T113] [ 200.555532][ T113] ERROR: (device loop3): remounting filesystem as read-only [pid 5871] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5871] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5872] <... write resumed>) = 16777216 [pid 5871] <... ioctl resumed>) = 0 [pid 5872] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5871] close(3 <unfinished ...> [pid 5872] <... munmap resumed>) = 0 [pid 5871] <... close resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5871] close(4 <unfinished ...> [pid 5872] <... openat resumed>) = 4 [pid 5871] <... close resumed>) = 0 [ 200.605184][ T5871] loop1: detected capacity change from 0 to 32768 [pid 5871] mkdir("./file0", 0777) = 0 [pid 5872] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5871] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5872] close(3 <unfinished ...> [pid 5871] <... mount resumed>) = 0 [pid 5872] <... close resumed>) = 0 [pid 5871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5872] close(4 <unfinished ...> [pid 5871] <... openat resumed>) = 3 [pid 5872] <... close resumed>) = 0 [pid 5872] mkdir("./file0", 0777 <unfinished ...> [pid 5871] chdir("./file0" <unfinished ...> [pid 5872] <... mkdir resumed>) = 0 [pid 5871] <... chdir resumed>) = 0 [pid 5872] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5871] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5871] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5871] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [ 200.656221][ T5872] loop0: detected capacity change from 0 to 32768 [ 200.691601][ T114] blkno = 5002c, nblocks = 1 [pid 5872] <... mount resumed>) = 0 [pid 5871] exit_group(0) = ? [pid 5872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5871] +++ exited with 0 +++ [pid 5872] <... openat resumed>) = 3 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5872] chdir("./file0" <unfinished ...> [pid 5849] restart_syscall(<... resuming interrupted clone ...> <unfinished ...> [pid 5872] <... chdir resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5872] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5849] <... restart_syscall resumed>) = 0 [pid 5872] <... symlink resumed>) = 0 [pid 5849] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5872] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5872] <... mount resumed>) = 0 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5872] exit_group(0 <unfinished ...> [pid 5849] getdents64(3, <unfinished ...> [pid 5872] <... exit_group resumed>) = ? [pid 5872] +++ exited with 0 +++ [pid 5849] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=20 /* 0.20 s */} --- [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 200.699984][ T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 200.699984][ T114] [ 200.711120][ T114] ERROR: (device loop1): remounting filesystem as read-only [ 200.732138][ T113] blkno = 5002c, nblocks = 1 [ 200.745148][ T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 200.745148][ T113] [pid 5849] newfstatat(AT_FDCWD, "./2/binderfs", <unfinished ...> [pid 5848] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5849] unlink("./2/binderfs" <unfinished ...> [pid 5848] <... openat resumed>) = 3 [pid 5849] <... unlink resumed>) = 0 [pid 5848] newfstatat(3, "", <unfinished ...> [pid 5849] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./2/binderfs") = 0 [pid 5848] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./2/file0") = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] close(3) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] rmdir("./2") = 0 [pid 5848] newfstatat(AT_FDCWD, "./2/file0", <unfinished ...> [pid 5849] mkdir("./3", 0777 <unfinished ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 200.757892][ T113] ERROR: (device loop0): remounting filesystem as read-only [ 200.771713][ T5849] JFS: metapage_get_blocks failed [ 200.789116][ T5848] JFS: metapage_get_blocks failed [pid 5849] <... mkdir resumed>) = 0 [pid 5848] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", <unfinished ...> [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5849] <... openat resumed>) = 3 [pid 5848] getdents64(4, <unfinished ...> [pid 5849] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5848] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [ 200.813867][ T5851] JFS: metapage_get_blocks failed [pid 5849] close(3 <unfinished ...> [pid 5848] close(4 <unfinished ...> [pid 5851] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] <... close resumed>) = 0 [pid 5848] rmdir("./2/file0") = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./2") = 0 [pid 5873] <... write resumed>) = 16777216 [pid 5851] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] mkdir("./3", 0777 <unfinished ...> [pid 5851] newfstatat(4, "", <unfinished ...> [pid 5848] <... mkdir resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5851] getdents64(4, <unfinished ...> [pid 5848] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5851] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] <... ioctl resumed>) = 0 [pid 5851] close(4 <unfinished ...> [pid 5848] close(3 <unfinished ...> [pid 5873] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5851] rmdir("./2/file0") = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./2") = 0 [pid 5851] mkdir("./3", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 <unfinished ...> [pid 5873] <... munmap resumed>) = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5873] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5873] close(3) = 0 [pid 5873] close(4) = 0 [pid 5873] mkdir("./file0", 0777) = 0 [ 200.946569][ T5873] loop5: detected capacity change from 0 to 32768 [pid 5873] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5873] chdir("./file0") = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5873] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5873] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5873] exit_group(0) = ? [pid 5873] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=33 /* 0.33 s */} --- [ 201.034092][ T114] blkno = 5002c, nblocks = 1 [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5853] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./3/binderfs", ./strace-static-x86_64: Process 5874 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5874] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5853] unlink("./3/binderfs" <unfinished ...> [pid 5849] <... clone resumed>, child_tidptr=0x555571745650) = 5874 [pid 5874] <... set_robust_list resumed>) = 0 [pid 5853] <... unlink resumed>) = 0 [pid 5874] chdir("./3" <unfinished ...> [pid 5853] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5874] <... chdir resumed>) = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5874] write(3, "1000", 4) = 4 [pid 5874] close(3) = 0 [pid 5874] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5874] write(1, "executing program\n", 18) = 18 [pid 5874] memfd_create("syzkaller", 0) = 3 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5851] <... close resumed>) = 0 [ 201.064094][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 201.064094][ T114] [ 201.091598][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5875 ./strace-static-x86_64: Process 5875 attached [pid 5848] <... close resumed>) = 0 [pid 5875] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5875] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5876 attached [pid 5875] chdir("./3") = 0 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5875] setpgid(0, 0) = 0 [pid 5876] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5876] <... set_robust_list resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555571745650) = 5876 [pid 5876] chdir("./3") = 0 [pid 5875] <... openat resumed>) = 3 [pid 5876] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5875] write(3, "1000", 4 <unfinished ...> [pid 5876] <... prctl resumed>) = 0 [pid 5876] setpgid(0, 0 <unfinished ...> [pid 5875] <... write resumed>) = 4 [pid 5876] <... setpgid resumed>) = 0 [pid 5875] close(3) = 0 [pid 5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5876] <... openat resumed>) = 3 [pid 5876] write(3, "1000", 4executing program <unfinished ...> [pid 5875] write(1, "executing program\n", 18 <unfinished ...> [pid 5876] <... write resumed>) = 4 [pid 5875] <... write resumed>) = 18 [pid 5876] close(3 <unfinished ...> [pid 5875] memfd_create("syzkaller", 0 <unfinished ...> [pid 5876] <... close resumed>) = 0 [pid 5876] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5876] write(1, "executing program\n", 18 <unfinished ...> [pid 5875] <... memfd_create resumed>) = 3 [pid 5876] <... write resumed>) = 18 [pid 5876] memfd_create("syzkaller", 0 <unfinished ...> [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5876] <... memfd_create resumed>) = 3 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5853] <... umount2 resumed>) = 0 [ 201.363634][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./3/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./3") = 0 [pid 5853] mkdir("./4", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3 <unfinished ...> [pid 5874] <... write resumed>) = 16777216 [pid 5874] munmap(0x7f7f07800000, 138412032) = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5874] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5853] <... close resumed>) = 0 [pid 5874] close(3) = 0 [pid 5874] close(4 <unfinished ...> [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5874] <... close resumed>) = 0 ./strace-static-x86_64: Process 5877 attached [pid 5874] mkdir("./file0", 0777 <unfinished ...> [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5877 [pid 5877] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5874] <... mkdir resumed>) = 0 [pid 5877] <... set_robust_list resumed>) = 0 [pid 5874] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5877] chdir("./4") = 0 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5877] setpgid(0, 0) = 0 [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5877] write(3, "1000", 4) = 4 [pid 5877] close(3) = 0 [pid 5877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5874] <... mount resumed>) = 0 [ 201.643453][ T5874] loop1: detected capacity change from 0 to 32768 [pid 5874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5874] chdir("./file0") = 0 [pid 5877] write(1, "executing program\n", 18 <unfinished ...> [pid 5874] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program <unfinished ...> [pid 5877] <... write resumed>) = 18 [pid 5874] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5877] memfd_create("syzkaller", 0 <unfinished ...> [pid 5875] <... write resumed>) = 16777216 [pid 5874] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5877] <... memfd_create resumed>) = 3 [pid 5877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5875] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5874] <... symlink resumed>) = 0 [pid 5874] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5874] exit_group(0) = ? [pid 5874] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./3/binderfs") = 0 [ 201.716938][ T114] blkno = 5002c, nblocks = 1 [ 201.721604][ T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 201.721604][ T114] [pid 5849] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5876] <... write resumed>) = 16777216 [pid 5875] <... munmap resumed>) = 0 [pid 5876] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5875] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5875] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5875] close(3) = 0 [pid 5875] close(4) = 0 [pid 5875] mkdir("./file0", 0777) = 0 [pid 5875] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5875] chdir("./file0") = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 201.763414][ T114] ERROR: (device loop1): remounting filesystem as read-only [ 201.777416][ T5875] loop3: detected capacity change from 0 to 32768 [pid 5875] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5875] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5876] <... munmap resumed>) = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5876] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5875] <... mount resumed>) = 0 [pid 5875] exit_group(0) = ? [pid 5875] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...> <unfinished ...> [pid 5876] <... ioctl resumed>) = 0 [pid 5876] close(3) = 0 [pid 5876] close(4) = 0 [pid 5876] mkdir("./file0", 0777) = 0 [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./3/binderfs") = 0 [pid 5851] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [ 201.824006][ T113] blkno = 5002c, nblocks = 1 [ 201.828721][ T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 201.828721][ T113] [ 201.838443][ T5876] loop0: detected capacity change from 0 to 32768 [pid 5876] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5876] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5876] chdir("./file0") = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5876] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5876] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5876] exit_group(0) = ? [pid 5876] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5876, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./3/binderfs") = 0 [pid 5848] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [ 201.864977][ T113] ERROR: (device loop3): remounting filesystem as read-only [ 201.876495][ T114] blkno = 5002c, nblocks = 1 [ 201.881241][ T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 201.881241][ T114] [ 201.905839][ T114] ERROR: (device loop0): remounting filesystem as read-only [pid 5877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 202.013988][ T5849] JFS: metapage_get_blocks failed [pid 5849] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5877] <... write resumed>) = 16777216 [pid 5849] newfstatat(4, "", <unfinished ...> [pid 5877] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5849] close(4 <unfinished ...> [pid 5877] <... munmap resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5877] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5849] rmdir("./3/file0" <unfinished ...> [pid 5877] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./3") = 0 [pid 5849] mkdir("./4", 0777 <unfinished ...> [pid 5877] <... ioctl resumed>) = 0 [pid 5877] close(3) = 0 [pid 5877] close(4 <unfinished ...> [pid 5849] <... mkdir resumed>) = 0 [pid 5877] <... close resumed>) = 0 [pid 5877] mkdir("./file0", 0777 <unfinished ...> [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5877] <... mkdir resumed>) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5877] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5849] close(3 <unfinished ...> [pid 5877] <... mount resumed>) = 0 [pid 5877] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5877] chdir("./file0") = 0 [pid 5877] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 202.097593][ T5877] loop5: detected capacity change from 0 to 32768 [ 202.133924][ T5851] JFS: metapage_get_blocks failed [pid 5877] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5877] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5877] exit_group(0) = ? [pid 5877] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5853] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./3/file0", <unfinished ...> [pid 5853] newfstatat(AT_FDCWD, "./4/binderfs", <unfinished ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] unlink("./4/binderfs" <unfinished ...> [pid 5848] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5853] <... unlink resumed>) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./3/file0") = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./3") = 0 [ 202.153618][ T5848] JFS: metapage_get_blocks failed [ 202.161879][ T113] blkno = 5002c, nblocks = 1 [ 202.178002][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 202.178002][ T113] [pid 5848] mkdir("./4", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [ 202.220179][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5848] close(3 <unfinished ...> [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5878 attached , child_tidptr=0x555571745650) = 5878 [pid 5878] set_robust_list(0x555571745660, 24) = 0 [pid 5878] chdir("./4" <unfinished ...> [pid 5848] <... close resumed>) = 0 [pid 5878] <... chdir resumed>) = 0 [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5878] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5879 attached [pid 5848] <... clone resumed>, child_tidptr=0x555571745650) = 5879 [pid 5879] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5879] <... set_robust_list resumed>) = 0 [pid 5878] <... openat resumed>) = 3 [pid 5879] chdir("./4" <unfinished ...> [pid 5878] write(3, "1000", 4) = 4 [pid 5879] <... chdir resumed>) = 0 [pid 5878] close(3 <unfinished ...> [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5878] <... close resumed>) = 0 [pid 5878] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5879] setpgid(0, 0) = 0 [pid 5878] <... symlink resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 executing program [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5878] write(1, "executing program\n", 18 <unfinished ...> [pid 5851] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5878] <... write resumed>) = 18 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5879] <... openat resumed>) = 3 [pid 5851] newfstatat(AT_FDCWD, "./3/file0", <unfinished ...> [pid 5878] memfd_create("syzkaller", 0 <unfinished ...> [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5879] write(3, "1000", 4 <unfinished ...> [pid 5878] <... memfd_create resumed>) = 3 [pid 5851] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5879] <... write resumed>) = 4 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5879] close(3 <unfinished ...> [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5879] <... close resumed>) = 0 [pid 5878] <... mmap resumed>) = 0x7f7f07800000 [pid 5851] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5879] write(1, "executing program\n", 18 <unfinished ...> [pid 5851] <... openat resumed>) = 4 executing program [pid 5879] <... write resumed>) = 18 [pid 5851] newfstatat(4, "", <unfinished ...> [pid 5879] memfd_create("syzkaller", 0 <unfinished ...> [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5879] <... memfd_create resumed>) = 3 [pid 5851] getdents64(4, <unfinished ...> [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5851] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5879] <... mmap resumed>) = 0x7f7f07800000 [pid 5851] close(4) = 0 [pid 5851] rmdir("./3/file0") = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./3") = 0 [pid 5851] mkdir("./4", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 202.463509][ T5853] JFS: metapage_get_blocks failed [pid 5851] close(3 <unfinished ...> [pid 5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5880 attached , child_tidptr=0x555571745650) = 5880 [pid 5880] set_robust_list(0x555571745660, 24) = 0 [pid 5880] chdir("./4") = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5880] write(3, "1000", 4) = 4 [pid 5880] close(3) = 0 [pid 5880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5880] write(1, "executing program\n", 18executing program ) = 18 [pid 5880] memfd_create("syzkaller", 0) = 3 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5853] <... umount2 resumed>) = 0 [pid 5853] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./4/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./4") = 0 [pid 5853] mkdir("./5", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3 <unfinished ...> [pid 5878] <... write resumed>) = 16777216 [pid 5878] munmap(0x7f7f07800000, 138412032) = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5878] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5878] close(3 <unfinished ...> [pid 5879] <... write resumed>) = 16777216 [pid 5878] <... close resumed>) = 0 [pid 5879] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5878] close(4) = 0 [ 202.924445][ T5878] loop1: detected capacity change from 0 to 32768 [pid 5878] mkdir("./file0", 0777 <unfinished ...> [pid 5879] <... munmap resumed>) = 0 [pid 5878] <... mkdir resumed>) = 0 [pid 5878] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5879] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5878] <... mount resumed>) = 0 [pid 5879] <... openat resumed>) = 4 [pid 5878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5879] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5878] <... openat resumed>) = 3 [pid 5878] chdir("./file0") = 0 [pid 5878] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5879] <... ioctl resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5879] close(3 <unfinished ...> [pid 5878] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5879] <... close resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5879] close(4 <unfinished ...> [pid 5878] <... symlink resumed>) = 0 [pid 5879] <... close resumed>) = 0 [pid 5878] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5879] mkdir("./file0", 0777) = 0 [pid 5879] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5881 ./strace-static-x86_64: Process 5881 attached [pid 5878] <... mount resumed>) = 0 [pid 5881] set_robust_list(0x555571745660, 24) = 0 [pid 5878] exit_group(0 <unfinished ...> [pid 5881] chdir("./5" <unfinished ...> [pid 5878] <... exit_group resumed>) = ? [pid 5881] <... chdir resumed>) = 0 [pid 5878] +++ exited with 0 +++ [ 203.002787][ T5879] loop0: detected capacity change from 0 to 32768 [ 203.035340][ T114] blkno = 5002c, nblocks = 1 [ 203.041738][ T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 203.041738][ T114] [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5881] setpgid(0, 0) = 0 [pid 5849] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5881] <... openat resumed>) = 3 [pid 5849] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5881] write(3, "1000", 4 <unfinished ...> [pid 5849] <... openat resumed>) = 3 [pid 5881] <... write resumed>) = 4 [pid 5849] newfstatat(3, "", <unfinished ...> [pid 5881] close(3 <unfinished ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5881] <... close resumed>) = 0 [pid 5881] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5849] getdents64(3, <unfinished ...> [pid 5881] <... symlink resumed>) = 0 [pid 5881] write(1, "executing program\n", 18executing program <unfinished ...> [pid 5849] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5881] <... write resumed>) = 18 [pid 5849] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5881] memfd_create("syzkaller", 0 <unfinished ...> [pid 5879] <... mount resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5881] <... memfd_create resumed>) = 3 [pid 5879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5849] newfstatat(AT_FDCWD, "./4/binderfs", <unfinished ...> [pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5879] <... openat resumed>) = 3 [pid 5881] <... mmap resumed>) = 0x7f7f07800000 [pid 5879] chdir("./file0" <unfinished ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5879] <... chdir resumed>) = 0 [pid 5879] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5879] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 203.069735][ T114] ERROR: (device loop1): remounting filesystem as read-only [pid 5879] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5849] unlink("./4/binderfs" <unfinished ...> [pid 5879] <... mount resumed>) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5879] exit_group(0 <unfinished ...> [pid 5849] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5879] <... exit_group resumed>) = ? [pid 5879] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5848] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./4/binderfs") = 0 [ 203.135824][ T113] blkno = 5002c, nblocks = 1 [ 203.140538][ T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 203.140538][ T113] [ 203.153739][ T5849] JFS: metapage_get_blocks failed [ 203.164675][ T113] ERROR: (device loop0): remounting filesystem as read-only [pid 5848] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5880] <... write resumed>) = 16777216 [pid 5880] munmap(0x7f7f07800000, 138412032) = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5880] <... openat resumed>) = 4 [pid 5880] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5880] close(3) = 0 [pid 5880] close(4) = 0 [pid 5880] mkdir("./file0", 0777) = 0 [pid 5880] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5880] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5880] chdir("./file0") = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5880] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 203.253212][ T5880] loop3: detected capacity change from 0 to 32768 [ 203.293171][ T114] blkno = 5002c, nblocks = 1 [pid 5880] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5880] exit_group(0) = ? [pid 5880] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5880, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./4/binderfs") = 0 [ 203.298068][ T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 203.298068][ T114] [pid 5851] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5851] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [ 203.333644][ T114] ERROR: (device loop3): remounting filesystem as read-only [ 203.342012][ T5851] JFS: metapage_get_blocks failed [pid 5851] rmdir("./4/file0") = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./4" <unfinished ...> [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] <... rmdir resumed>) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5851] mkdir("./5", 0777 <unfinished ...> [pid 5849] <... openat resumed>) = 4 [pid 5851] <... mkdir resumed>) = 0 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, <unfinished ...> [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5849] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5881] <... write resumed>) = 16777216 [pid 5849] close(4 <unfinished ...> [pid 5851] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5881] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5851] <... ioctl resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5851] close(3 <unfinished ...> [pid 5849] rmdir("./4/file0" <unfinished ...> [pid 5881] <... munmap resumed>) = 0 [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./4") = 0 [pid 5849] mkdir("./5", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [ 203.433511][ T5848] JFS: metapage_get_blocks failed [pid 5849] close(3 <unfinished ...> [pid 5881] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5881] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5881] close(3) = 0 [pid 5881] close(4) = 0 [pid 5881] mkdir("./file0", 0777) = 0 [ 203.473973][ T5881] loop5: detected capacity change from 0 to 32768 [pid 5881] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5881] chdir("./file0") = 0 [pid 5881] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5881] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 203.570050][ T113] blkno = 5002c, nblocks = 1 [ 203.583136][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 203.583136][ T113] [pid 5881] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5881] exit_group(0) = ? [pid 5881] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./5/binderfs") = 0 [pid 5853] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5849] <... close resumed>) = 0 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./5/file0", <unfinished ...> [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5882 attached <unfinished ...> [pid 5853] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5883 attached [pid 5853] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5849] <... clone resumed>, child_tidptr=0x555571745650) = 5882 [pid 5882] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5853] <... openat resumed>) = 4 [pid 5882] <... set_robust_list resumed>) = 0 [ 203.617391][ T113] ERROR: (device loop5): remounting filesystem as read-only [ 203.633834][ T5881] JFS: metapage_get_blocks failed [pid 5882] chdir("./5" <unfinished ...> [pid 5883] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5853] newfstatat(4, "", <unfinished ...> [pid 5883] <... set_robust_list resumed>) = 0 [pid 5882] <... chdir resumed>) = 0 [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555571745650) = 5883 [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5853] getdents64(4, <unfinished ...> [pid 5883] chdir("./5" <unfinished ...> [pid 5882] <... prctl resumed>) = 0 [pid 5882] setpgid(0, 0 <unfinished ...> [pid 5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5883] <... chdir resumed>) = 0 [pid 5882] <... setpgid resumed>) = 0 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5853] getdents64(4, <unfinished ...> [pid 5883] <... prctl resumed>) = 0 [pid 5853] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4 <unfinished ...> [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5883] setpgid(0, 0 <unfinished ...> [pid 5853] rmdir("./5/file0" <unfinished ...> [pid 5883] <... setpgid resumed>) = 0 [pid 5853] <... rmdir resumed>) = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5882] <... openat resumed>) = 3 [pid 5848] <... umount2 resumed>) = 0 [pid 5853] getdents64(3, <unfinished ...> [pid 5848] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5882] write(3, "1000", 4 <unfinished ...> [pid 5853] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5883] <... openat resumed>) = 3 [pid 5882] <... write resumed>) = 4 [pid 5853] close(3 <unfinished ...> [pid 5848] newfstatat(AT_FDCWD, "./4/file0", <unfinished ...> [pid 5883] write(3, "1000", 4 <unfinished ...> [pid 5882] close(3 <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] rmdir("./5" <unfinished ...> [pid 5848] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5883] <... write resumed>) = 4 [pid 5882] <... close resumed>) = 0 [pid 5853] <... rmdir resumed>) = 0 [pid 5883] close(3 <unfinished ...> [pid 5882] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5883] <... close resumed>) = 0 [pid 5882] <... symlink resumed>) = 0 executing program [pid 5853] mkdir("./6", 0777 <unfinished ...> [pid 5848] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5883] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5882] write(1, "executing program\n", 18 <unfinished ...> [pid 5848] <... openat resumed>) = 4 [pid 5883] <... symlink resumed>) = 0 [pid 5882] <... write resumed>) = 18 [pid 5853] <... mkdir resumed>) = 0 [pid 5848] newfstatat(4, "", <unfinished ...> [pid 5883] write(1, "executing program\n", 18 <unfinished ...> [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWRexecuting program <unfinished ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5883] <... write resumed>) = 18 [pid 5853] <... openat resumed>) = 3 [pid 5883] memfd_create("syzkaller", 0 <unfinished ...> [pid 5882] memfd_create("syzkaller", 0 <unfinished ...> [pid 5853] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5848] getdents64(4, <unfinished ...> [pid 5883] <... memfd_create resumed>) = 3 [pid 5853] <... ioctl resumed>) = 0 [pid 5883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5882] <... memfd_create resumed>) = 3 [pid 5853] close(3 <unfinished ...> [pid 5848] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5883] <... mmap resumed>) = 0x7f7f07800000 [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./4/file0") = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./4") = 0 [pid 5848] mkdir("./5", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 <unfinished ...> [pid 5882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5884 attached <unfinished ...> [pid 5848] <... close resumed>) = 0 [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5884 [pid 5884] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5884] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5885 attached [pid 5885] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5884] chdir("./6" <unfinished ...> [pid 5883] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5848] <... clone resumed>, child_tidptr=0x555571745650) = 5885 [pid 5885] <... set_robust_list resumed>) = 0 [pid 5884] <... chdir resumed>) = 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5884] setpgid(0, 0) = 0 [pid 5885] chdir("./5" <unfinished ...> [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5885] <... chdir resumed>) = 0 [pid 5884] <... openat resumed>) = 3 [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5884] write(3, "1000", 4 <unfinished ...> [pid 5885] <... prctl resumed>) = 0 [pid 5884] <... write resumed>) = 4 [pid 5885] setpgid(0, 0 <unfinished ...> [pid 5884] close(3 <unfinished ...> [pid 5885] <... setpgid resumed>) = 0 [pid 5884] <... close resumed>) = 0 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5884] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5885] <... openat resumed>) = 3 [pid 5884] <... symlink resumed>) = 0 executing program [pid 5885] write(3, "1000", 4 <unfinished ...> [pid 5884] write(1, "executing program\n", 18 <unfinished ...> [pid 5885] <... write resumed>) = 4 [pid 5884] <... write resumed>) = 18 [pid 5885] close(3) = 0 [pid 5885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5884] memfd_create("syzkaller", 0executing program <unfinished ...> [pid 5885] write(1, "executing program\n", 18 <unfinished ...> [pid 5884] <... memfd_create resumed>) = 3 [pid 5885] <... write resumed>) = 18 [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5885] memfd_create("syzkaller", 0 <unfinished ...> [pid 5884] <... mmap resumed>) = 0x7f7f07800000 [pid 5885] <... memfd_create resumed>) = 3 [pid 5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5882] <... write resumed>) = 16777216 [pid 5882] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5882] <... munmap resumed>) = 0 [pid 5882] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5882] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5882] close(3) = 0 [pid 5882] close(4) = 0 [pid 5882] mkdir("./file0", 0777) = 0 [ 204.304862][ T5882] loop1: detected capacity change from 0 to 32768 [pid 5882] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5882] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5882] chdir("./file0") = 0 [pid 5882] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5882] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5883] <... write resumed>) = 16777216 [pid 5883] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5882] <... symlink resumed>) = 0 [pid 5883] <... munmap resumed>) = 0 [pid 5882] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5883] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5883] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5882] <... mount resumed>) = 0 [pid 5883] <... ioctl resumed>) = 0 [pid 5882] exit_group(0) = ? [pid 5883] close(3) = 0 [pid 5883] close(4) = 0 [pid 5883] mkdir("./file0", 0777) = 0 [pid 5883] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5882] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5882, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./5/binderfs", <unfinished ...> [pid 5883] <... mount resumed>) = 0 [pid 5883] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5883] chdir("./file0") = 0 [ 204.444249][ T114] blkno = 5002c, nblocks = 1 [ 204.448912][ T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 204.448912][ T114] [ 204.454145][ T5883] loop3: detected capacity change from 0 to 32768 [ 204.466763][ T114] ERROR: (device loop1): remounting filesystem as read-only [pid 5883] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5883] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5849] unlink("./5/binderfs") = 0 [pid 5849] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5883] <... symlink resumed>) = 0 [pid 5883] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5883] exit_group(0) = ? [pid 5883] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./5/binderfs") = 0 [ 204.522360][ T5849] JFS: metapage_get_blocks failed [ 204.534203][ T114] blkno = 5002c, nblocks = 1 [ 204.538848][ T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 204.538848][ T114] [pid 5851] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5884] <... write resumed>) = 16777216 [pid 5884] munmap(0x7f7f07800000, 138412032) = 0 [pid 5885] <... write resumed>) = 16777216 [pid 5885] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5884] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 204.583044][ T114] ERROR: (device loop3): remounting filesystem as read-only [pid 5884] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5885] <... munmap resumed>) = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5884] <... ioctl resumed>) = 0 [pid 5885] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5884] close(3) = 0 [pid 5884] close(4 <unfinished ...> [pid 5885] <... ioctl resumed>) = 0 [pid 5885] close(3) = 0 [pid 5885] close(4) = 0 [pid 5885] mkdir("./file0", 0777) = 0 [pid 5885] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5884] <... close resumed>) = 0 [pid 5884] mkdir("./file0", 0777) = 0 [ 204.642283][ T5884] loop5: detected capacity change from 0 to 32768 [ 204.665394][ T5885] loop0: detected capacity change from 0 to 32768 [pid 5884] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5885] <... mount resumed>) = 0 [pid 5884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5884] <... openat resumed>) = 3 [pid 5885] chdir("./file0") = 0 [pid 5884] chdir("./file0") = 0 [pid 5885] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5884] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5885] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5884] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5885] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5884] <... symlink resumed>) = 0 [pid 5885] <... symlink resumed>) = 0 [pid 5885] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5884] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5885] <... mount resumed>) = 0 [pid 5884] <... mount resumed>) = 0 [pid 5884] exit_group(0 <unfinished ...> [pid 5885] exit_group(0 <unfinished ...> [pid 5884] <... exit_group resumed>) = ? [pid 5885] <... exit_group resumed>) = ? [pid 5884] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...> <unfinished ...> [pid 5885] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [ 204.748948][ T113] blkno = 5002c, nblocks = 1 [ 204.748952][ T114] blkno = 5002c, nblocks = 1 [ 204.748978][ T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 204.748978][ T114] [ 204.753805][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 204.753805][ T113] [ 204.754102][ T113] ERROR: (device loop5): remounting filesystem as read-only [ 204.761273][ T114] ERROR: (device loop0): remounting filesystem as read-only [pid 5848] restart_syscall(<... resuming interrupted clone ...> <unfinished ...> [pid 5853] <... restart_syscall resumed>) = 0 [pid 5848] <... restart_syscall resumed>) = 0 [pid 5853] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5853] <... openat resumed>) = 3 [pid 5849] <... umount2 resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5853] newfstatat(3, "", <unfinished ...> [pid 5849] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(3, "", <unfinished ...> [pid 5853] getdents64(3, <unfinished ...> [pid 5849] newfstatat(AT_FDCWD, "./5/file0", <unfinished ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] getdents64(3, <unfinished ...> [pid 5853] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] newfstatat(AT_FDCWD, "./6/binderfs", <unfinished ...> [pid 5849] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5848] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] <... openat resumed>) = 4 [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(4, "", <unfinished ...> [pid 5853] unlink("./6/binderfs" <unfinished ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] newfstatat(AT_FDCWD, "./5/binderfs", <unfinished ...> [pid 5853] <... unlink resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [ 204.803448][ T5851] JFS: metapage_get_blocks failed [pid 5848] unlink("./5/binderfs" <unfinished ...> [pid 5849] getdents64(4, <unfinished ...> [pid 5848] <... unlink resumed>) = 0 [pid 5848] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./5/file0") = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./5") = 0 [pid 5849] mkdir("./6", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 204.845319][ T5853] JFS: metapage_get_blocks failed [ 204.851148][ T5848] JFS: metapage_get_blocks failed [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5886 attached , child_tidptr=0x555571745650) = 5886 [pid 5886] set_robust_list(0x555571745660, 24) = 0 [pid 5886] chdir("./6") = 0 [pid 5886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5886] setpgid(0, 0) = 0 [pid 5886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5886] write(3, "1000", 4) = 4 [pid 5886] close(3) = 0 [pid 5886] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5886] write(1, "executing program\n", 18 <unfinished ...> [pid 5851] <... umount2 resumed>) = 0 executing program [pid 5886] <... write resumed>) = 18 [pid 5886] memfd_create("syzkaller", 0) = 3 [pid 5851] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./5/file0") = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./5") = 0 [pid 5853] <... umount2 resumed>) = 0 [pid 5848] <... umount2 resumed>) = 0 [pid 5851] mkdir("./6", 0777) = 0 [pid 5853] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] <... openat resumed>) = 3 [pid 5848] newfstatat(AT_FDCWD, "./5/file0", <unfinished ...> [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5851] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] <... openat resumed>) = 4 [pid 5851] <... ioctl resumed>) = 0 [pid 5848] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] newfstatat(4, "", <unfinished ...> [pid 5851] close(3 <unfinished ...> [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, <unfinished ...> [pid 5848] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, <unfinished ...> [pid 5848] rmdir("./5/file0" <unfinished ...> [pid 5853] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./6/file0") = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5853] getdents64(3, <unfinished ...> [pid 5848] rmdir("./5" <unfinished ...> [pid 5886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5853] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] <... rmdir resumed>) = 0 [pid 5853] close(3 <unfinished ...> [pid 5848] mkdir("./6", 0777 <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5848] <... mkdir resumed>) = 0 [pid 5853] rmdir("./6" <unfinished ...> [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5853] <... rmdir resumed>) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 <unfinished ...> [pid 5853] mkdir("./7", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3 <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5887 attached , child_tidptr=0x555571745650) = 5887 [pid 5887] set_robust_list(0x555571745660, 24) = 0 [pid 5887] chdir("./6") = 0 [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5887] setpgid(0, 0) = 0 [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 5887] write(3, "1000", 4) = 4 [pid 5887] close(3) = 0 [pid 5887] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5853] <... close resumed>) = 0 [pid 5887] write(1, "executing program\n", 18) = 18 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5887] memfd_create("syzkaller", 0) = 3 [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5888 [pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 ./strace-static-x86_64: Process 5888 attached [pid 5848] <... close resumed>) = 0 [pid 5888] set_robust_list(0x555571745660, 24) = 0 [pid 5888] chdir("./7" <unfinished ...> [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5889 attached <unfinished ...> [pid 5888] <... chdir resumed>) = 0 [pid 5889] set_robust_list(0x555571745660, 24) = 0 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5889] chdir("./6" <unfinished ...> [pid 5888] <... prctl resumed>) = 0 [pid 5848] <... clone resumed>, child_tidptr=0x555571745650) = 5889 [pid 5889] <... chdir resumed>) = 0 [pid 5888] setpgid(0, 0) = 0 [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5888] write(3, "1000", 4) = 4 [pid 5888] close(3 <unfinished ...> [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5888] <... close resumed>) = 0 [pid 5889] <... prctl resumed>) = 0 [pid 5888] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5889] setpgid(0, 0) = 0 executing program [pid 5888] <... symlink resumed>) = 0 [pid 5888] write(1, "executing program\n", 18) = 18 [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5888] memfd_create("syzkaller", 0 <unfinished ...> [pid 5889] <... openat resumed>) = 3 [pid 5888] <... memfd_create resumed>) = 3 [pid 5889] write(3, "1000", 4 <unfinished ...> [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5889] <... write resumed>) = 4 [pid 5888] <... mmap resumed>) = 0x7f7f07800000 [pid 5889] close(3) = 0 [pid 5889] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5889] write(1, "executing program\n", 18) = 18 [pid 5889] memfd_create("syzkaller", 0) = 3 [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5886] <... write resumed>) = 16777216 [pid 5886] munmap(0x7f7f07800000, 138412032) = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5886] close(3) = 0 [pid 5886] close(4) = 0 [pid 5886] mkdir("./file0", 0777) = 0 [pid 5886] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 205.665783][ T5886] loop1: detected capacity change from 0 to 32768 [pid 5886] chdir("./file0") = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5886] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5886] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5886] <... mount resumed>) = 0 [pid 5886] exit_group(0) = ? [pid 5886] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5886, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} --- [ 205.740804][ T113] blkno = 5002c, nblocks = 1 [ 205.756558][ T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 205.756558][ T113] [pid 5849] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./6/binderfs") = 0 [ 205.791918][ T113] ERROR: (device loop1): remounting filesystem as read-only [ 205.818095][ T5849] JFS: metapage_get_blocks failed [pid 5849] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5887] <... write resumed>) = 16777216 [pid 5888] <... write resumed>) = 16777216 [pid 5888] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5887] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5888] <... munmap resumed>) = 0 [pid 5887] <... munmap resumed>) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5887] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5888] <... openat resumed>) = 4 [pid 5887] <... openat resumed>) = 4 [pid 5888] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5887] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5888] <... ioctl resumed>) = 0 [pid 5887] <... ioctl resumed>) = 0 [pid 5888] close(3 <unfinished ...> [pid 5887] close(3 <unfinished ...> [pid 5888] <... close resumed>) = 0 [pid 5887] <... close resumed>) = 0 [pid 5888] close(4) = 0 [pid 5887] close(4) = 0 [pid 5888] mkdir("./file0", 0777 <unfinished ...> [pid 5887] mkdir("./file0", 0777 <unfinished ...> [pid 5888] <... mkdir resumed>) = 0 [pid 5887] <... mkdir resumed>) = 0 [pid 5888] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5889] <... write resumed>) = 16777216 [pid 5887] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [ 205.999395][ T5887] loop3: detected capacity change from 0 to 32768 [ 206.007325][ T5888] loop5: detected capacity change from 0 to 32768 [pid 5889] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5887] <... mount resumed>) = 0 [pid 5887] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5887] chdir("./file0") = 0 [pid 5887] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5887] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5888] <... mount resumed>) = 0 [pid 5888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5888] chdir("./file0") = 0 [pid 5887] <... symlink resumed>) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5888] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5888] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5887] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5888] exit_group(0) = ? [pid 5888] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...> <unfinished ...> [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5887] <... mount resumed>) = 0 [pid 5853] <... restart_syscall resumed>) = 0 [pid 5887] exit_group(0) = ? [pid 5853] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5889] <... munmap resumed>) = 0 [pid 5853] <... openat resumed>) = 3 [pid 5849] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5853] newfstatat(3, "", <unfinished ...> [pid 5849] <... openat resumed>) = 4 [pid 5887] +++ exited with 0 +++ [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] newfstatat(4, "", <unfinished ...> [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5889] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5889] <... openat resumed>) = 4 [pid 5853] getdents64(3, <unfinished ...> [pid 5851] <... openat resumed>) = 3 [pid 5849] getdents64(4, <unfinished ...> [ 206.080236][ T114] blkno = 5002c, nblocks = 1 [ 206.093962][ T113] blkno = 5002c, nblocks = 1 [ 206.104132][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 206.104132][ T114] [ 206.118564][ T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 206.118564][ T113] [pid 5851] newfstatat(3, "", <unfinished ...> [pid 5889] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5853] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] getdents64(3, <unfinished ...> [pid 5889] <... ioctl resumed>) = 0 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] newfstatat(AT_FDCWD, "./7/binderfs", <unfinished ...> [pid 5851] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5889] close(3 <unfinished ...> [pid 5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5889] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] getdents64(4, <unfinished ...> [pid 5853] unlink("./7/binderfs" <unfinished ...> [pid 5889] close(4 <unfinished ...> [pid 5851] newfstatat(AT_FDCWD, "./6/binderfs", <unfinished ...> [pid 5849] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5889] <... close resumed>) = 0 [pid 5853] <... unlink resumed>) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] close(4 <unfinished ...> [pid 5889] mkdir("./file0", 0777 <unfinished ...> [pid 5853] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5889] <... mkdir resumed>) = 0 [pid 5851] unlink("./6/binderfs" <unfinished ...> [pid 5849] <... close resumed>) = 0 [pid 5889] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5849] rmdir("./6/file0" <unfinished ...> [pid 5851] <... unlink resumed>) = 0 [pid 5851] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] <... rmdir resumed>) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./6") = 0 [pid 5849] mkdir("./7", 0777 <unfinished ...> [pid 5889] <... mount resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...> [pid 5889] chdir("./file0" <unfinished ...> [pid 5849] <... openat resumed>) = 3 [pid 5889] <... chdir resumed>) = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5849] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5849] <... ioctl resumed>) = 0 [pid 5889] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5849] close(3 <unfinished ...> [pid 5889] <... symlink resumed>) = 0 [pid 5889] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [ 206.120432][ T5889] loop0: detected capacity change from 0 to 32768 [ 206.130144][ T114] ERROR: (device loop5): remounting filesystem as read-only [ 206.138715][ T113] ERROR: (device loop3): remounting filesystem as read-only [ 206.157375][ T5853] JFS: metapage_get_blocks failed [ 206.166226][ T5851] JFS: metapage_get_blocks failed [pid 5889] exit_group(0) = ? [pid 5889] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./6/binderfs") = 0 [ 206.205011][ T113] blkno = 5002c, nblocks = 1 [ 206.209920][ T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 206.209920][ T113] [pid 5848] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5890 ./strace-static-x86_64: Process 5890 attached [pid 5890] set_robust_list(0x555571745660, 24) = 0 [ 206.253504][ T113] ERROR: (device loop0): remounting filesystem as read-only [pid 5890] chdir("./7") = 0 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5890] setpgid(0, 0) = 0 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5890] write(3, "1000", 4) = 4 [pid 5890] close(3) = 0 [pid 5890] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5890] write(1, "executing program\n", 18) = 18 [pid 5890] memfd_create("syzkaller", 0) = 3 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5853] <... umount2 resumed>) = 0 [pid 5853] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] <... umount2 resumed>) = 0 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] newfstatat(AT_FDCWD, "./7/file0", <unfinished ...> [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] newfstatat(AT_FDCWD, "./6/file0", <unfinished ...> [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", <unfinished ...> [pid 5851] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5853] getdents64(4, <unfinished ...> [pid 5851] <... openat resumed>) = 4 [pid 5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, <unfinished ...> [pid 5851] newfstatat(4, "", <unfinished ...> [pid 5853] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] close(4) = 0 [pid 5851] getdents64(4, <unfinished ...> [pid 5853] rmdir("./7/file0" <unfinished ...> [pid 5851] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] <... rmdir resumed>) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] getdents64(3, <unfinished ...> [pid 5851] close(4 <unfinished ...> [pid 5853] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3 <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5853] <... close resumed>) = 0 [pid 5851] rmdir("./6/file0") = 0 [pid 5851] getdents64(3, <unfinished ...> [pid 5853] rmdir("./7" <unfinished ...> [pid 5851] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5853] <... rmdir resumed>) = 0 [pid 5851] rmdir("./6" <unfinished ...> [pid 5853] mkdir("./8", 0777 <unfinished ...> [pid 5851] <... rmdir resumed>) = 0 [pid 5853] <... mkdir resumed>) = 0 [pid 5851] mkdir("./7", 0777 <unfinished ...> [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5851] <... mkdir resumed>) = 0 [pid 5853] <... openat resumed>) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3 <unfinished ...> [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5851] <... openat resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 206.503494][ T5848] JFS: metapage_get_blocks failed [pid 5851] close(3 <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5891 attached , child_tidptr=0x555571745650) = 5891 [pid 5891] set_robust_list(0x555571745660, 24) = 0 [pid 5891] chdir("./8") = 0 [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5891] setpgid(0, 0) = 0 [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5891] write(3, "1000", 4) = 4 [pid 5891] close(3) = 0 [pid 5891] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5891] write(1, "executing program\n", 18executing program ) = 18 [pid 5891] memfd_create("syzkaller", 0) = 3 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5892 ./strace-static-x86_64: Process 5892 attached [pid 5892] set_robust_list(0x555571745660, 24) = 0 [pid 5892] chdir("./7") = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5892] setpgid(0, 0) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5892] write(3, "1000", 4) = 4 [pid 5892] close(3) = 0 [pid 5892] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5892] write(1, "executing program\n", 18) = 18 [pid 5892] memfd_create("syzkaller", 0) = 3 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./6/file0") = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./6") = 0 [pid 5848] mkdir("./7", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 <unfinished ...> [pid 5890] <... write resumed>) = 16777216 [pid 5890] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5890] <... munmap resumed>) = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5890] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5890] close(3) = 0 [pid 5890] close(4) = 0 [pid 5890] mkdir("./file0", 0777) = 0 [ 206.930496][ T5890] loop1: detected capacity change from 0 to 32768 [pid 5890] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5890] <... mount resumed>) = 0 [pid 5890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5890] chdir("./file0") = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5890] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5890] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5890] exit_group(0) = ? [pid 5890] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./7/binderfs") = 0 [ 207.007542][ T114] blkno = 5002c, nblocks = 1 [ 207.012685][ T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 207.012685][ T114] [ 207.043881][ T114] ERROR: (device loop1): remounting filesystem as read-only [pid 5849] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5893 ./strace-static-x86_64: Process 5893 attached [pid 5893] set_robust_list(0x555571745660, 24) = 0 [pid 5893] chdir("./7") = 0 [pid 5893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5893] setpgid(0, 0) = 0 [pid 5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5893] write(3, "1000", 4) = 4 [pid 5893] close(3) = 0 [pid 5893] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5893] write(1, "executing program\n", 18) = 18 [pid 5893] memfd_create("syzkaller", 0) = 3 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [ 207.064452][ T5849] JFS: metapage_get_blocks failed [pid 5892] <... write resumed>) = 16777216 [pid 5892] munmap(0x7f7f07800000, 138412032) = 0 [pid 5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5892] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5891] <... write resumed>) = 16777216 [pid 5892] <... openat resumed>) = 4 [pid 5891] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5892] close(3) = 0 [pid 5892] close(4) = 0 [pid 5892] mkdir("./file0", 0777 <unfinished ...> [pid 5891] <... munmap resumed>) = 0 [pid 5892] <... mkdir resumed>) = 0 [pid 5892] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5891] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5891] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5892] <... mount resumed>) = 0 [pid 5891] <... ioctl resumed>) = 0 [pid 5892] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5849] <... umount2 resumed>) = 0 [pid 5892] <... openat resumed>) = 3 [pid 5891] close(3 <unfinished ...> [pid 5849] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5892] chdir("./file0" <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5892] <... chdir resumed>) = 0 [pid 5891] <... close resumed>) = 0 [pid 5849] newfstatat(AT_FDCWD, "./7/file0", <unfinished ...> [pid 5892] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5891] close(4 <unfinished ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5891] <... close resumed>) = 0 [pid 5849] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5891] mkdir("./file0", 0777 <unfinished ...> [pid 5892] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./7/file0") = 0 [pid 5892] <... symlink resumed>) = 0 [pid 5891] <... mkdir resumed>) = 0 [pid 5849] getdents64(3, <unfinished ...> [pid 5892] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [ 207.295853][ T5892] loop3: detected capacity change from 0 to 32768 [ 207.322109][ T5891] loop5: detected capacity change from 0 to 32768 [pid 5891] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5849] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5892] <... mount resumed>) = 0 [pid 5892] exit_group(0) = ? [pid 5849] rmdir("./7") = 0 [pid 5892] +++ exited with 0 +++ [pid 5891] <... mount resumed>) = 0 [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5851] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] mkdir("./8", 0777 <unfinished ...> [pid 5891] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... mkdir resumed>) = 0 [pid 5891] chdir("./file0" <unfinished ...> [pid 5851] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5891] <... chdir resumed>) = 0 [pid 5891] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5851] <... openat resumed>) = 3 [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...> [pid 5891] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5851] newfstatat(3, "", <unfinished ...> [pid 5849] <... openat resumed>) = 3 [pid 5891] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5851] getdents64(3, <unfinished ...> [pid 5849] <... ioctl resumed>) = 0 [pid 5851] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] close(3 <unfinished ...> [pid 5891] <... symlink resumed>) = 0 [pid 5851] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5891] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5891] <... mount resumed>) = 0 [pid 5851] unlink("./7/binderfs") = 0 [ 207.360001][ T114] blkno = 5002c, nblocks = 1 [ 207.367934][ T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 207.367934][ T114] [pid 5851] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5891] exit_group(0) = ? [pid 5891] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./8/binderfs") = 0 [ 207.407816][ T113] blkno = 5002c, nblocks = 1 [ 207.423389][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 207.423389][ T113] [ 207.439643][ T114] ERROR: (device loop3): remounting filesystem as read-only [ 207.474398][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] <... close resumed>) = 0 [pid 5893] <... write resumed>) = 16777216 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5893] munmap(0x7f7f07800000, 138412032./strace-static-x86_64: Process 5894 attached <unfinished ...> [pid 5849] <... clone resumed>, child_tidptr=0x555571745650) = 5894 [pid 5894] set_robust_list(0x555571745660, 24) = 0 [pid 5893] <... munmap resumed>) = 0 [pid 5894] chdir("./8" <unfinished ...> [pid 5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5894] <... chdir resumed>) = 0 [pid 5893] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5894] setpgid(0, 0) = 0 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5893] <... ioctl resumed>) = 0 [pid 5893] close(3 <unfinished ...> [pid 5894] <... openat resumed>) = 3 [pid 5893] <... close resumed>) = 0 [pid 5893] close(4 <unfinished ...> [pid 5894] write(3, "1000", 4 <unfinished ...> [pid 5893] <... close resumed>) = 0 [pid 5893] mkdir("./file0", 0777) = 0 [pid 5893] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5894] <... write resumed>) = 4 [pid 5894] close(3) = 0 [pid 5894] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5894] write(1, "executing program\n", 18) = 18 [pid 5894] memfd_create("syzkaller", 0) = 3 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5893] <... mount resumed>) = 0 [pid 5893] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5893] chdir("./file0") = 0 [pid 5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 207.615441][ T5893] loop0: detected capacity change from 0 to 32768 [pid 5893] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5893] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5893] exit_group(0) = ? [pid 5893] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./7/binderfs") = 0 [ 207.673652][ T5851] JFS: metapage_get_blocks failed [ 207.682379][ T114] blkno = 5002c, nblocks = 1 [ 207.687801][ T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 207.687801][ T114] [ 207.704303][ T114] ERROR: (device loop0): remounting filesystem as read-only [pid 5848] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5848] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5848] <... openat resumed>) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./7/file0") = 0 [ 207.721058][ T5848] JFS: metapage_get_blocks failed [ 207.733519][ T5853] JFS: metapage_get_blocks failed [pid 5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./7") = 0 [pid 5848] mkdir("./8", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 <unfinished ...> [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./7/file0") = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./7") = 0 [pid 5851] mkdir("./8", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5894] <... write resumed>) = 16777216 [pid 5851] close(3 <unfinished ...> [pid 5894] munmap(0x7f7f07800000, 138412032) = 0 [pid 5853] <... umount2 resumed>) = 0 [pid 5848] <... close resumed>) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...> [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5853] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5895 attached <unfinished ...> [pid 5894] <... openat resumed>) = 4 [pid 5894] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5848] <... clone resumed>, child_tidptr=0x555571745650) = 5895 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./8/file0", <unfinished ...> [pid 5895] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5895] <... set_robust_list resumed>) = 0 [pid 5853] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5895] chdir("./8" <unfinished ...> [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] <... chdir resumed>) = 0 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5853] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5895] setpgid(0, 0 <unfinished ...> [pid 5853] <... openat resumed>) = 4 [pid 5895] <... setpgid resumed>) = 0 [pid 5853] newfstatat(4, "", <unfinished ...> [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, <unfinished ...> [pid 5894] <... ioctl resumed>) = 0 [pid 5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5894] close(3) = 0 [pid 5895] <... openat resumed>) = 3 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./8/file0" <unfinished ...> [pid 5895] write(3, "1000", 4 <unfinished ...> [pid 5853] <... rmdir resumed>) = 0 [pid 5895] <... write resumed>) = 4 [pid 5895] close(3) = 0 [pid 5853] getdents64(3, <unfinished ...> [pid 5895] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5853] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5895] <... symlink resumed>) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./8"executing program <unfinished ...> [pid 5895] write(1, "executing program\n", 18 <unfinished ...> [pid 5894] close(4 <unfinished ...> [pid 5853] <... rmdir resumed>) = 0 [pid 5894] <... close resumed>) = 0 [pid 5894] mkdir("./file0", 0777) = 0 [pid 5894] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5895] <... write resumed>) = 18 [pid 5895] memfd_create("syzkaller", 0 <unfinished ...> [pid 5853] mkdir("./9", 0777 <unfinished ...> [pid 5895] <... memfd_create resumed>) = 3 [pid 5853] <... mkdir resumed>) = 0 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5894] <... mount resumed>) = 0 [pid 5894] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5894] chdir("./file0") = 0 [pid 5853] <... openat resumed>) = 3 [pid 5894] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5853] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5894] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5853] <... ioctl resumed>) = 0 [pid 5853] close(3 <unfinished ...> [pid 5894] <... symlink resumed>) = 0 [ 208.043812][ T5894] loop1: detected capacity change from 0 to 32768 [pid 5894] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5894] exit_group(0) = ? [pid 5894] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] <... close resumed>) = 0 [pid 5849] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5896 attached <unfinished ...> [pid 5896] set_robust_list(0x555571745660, 24) = 0 [pid 5851] <... clone resumed>, child_tidptr=0x555571745650) = 5896 [ 208.104646][ T113] blkno = 5002c, nblocks = 1 [ 208.109292][ T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 208.109292][ T113] [pid 5896] chdir("./8" <unfinished ...> [pid 5849] <... openat resumed>) = 3 [pid 5849] newfstatat(3, "", <unfinished ...> [pid 5896] <... chdir resumed>) = 0 [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5896] <... prctl resumed>) = 0 [pid 5896] setpgid(0, 0 <unfinished ...> [pid 5849] getdents64(3, <unfinished ...> [pid 5896] <... setpgid resumed>) = 0 [pid 5849] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5849] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5896] <... openat resumed>) = 3 [pid 5849] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5896] write(3, "1000", 4 <unfinished ...> [pid 5849] newfstatat(AT_FDCWD, "./8/binderfs", <unfinished ...> [pid 5896] <... write resumed>) = 4 [pid 5896] close(3 <unfinished ...> [pid 5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5896] <... close resumed>) = 0 [pid 5896] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5849] unlink("./8/binderfs"executing program <unfinished ...> [pid 5896] <... symlink resumed>) = 0 [pid 5849] <... unlink resumed>) = 0 [pid 5896] write(1, "executing program\n", 18 <unfinished ...> [pid 5849] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5896] <... write resumed>) = 18 [pid 5896] memfd_create("syzkaller", 0) = 3 [ 208.147691][ T113] ERROR: (device loop1): remounting filesystem as read-only [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [ 208.192754][ T5849] JFS: metapage_get_blocks failed [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5897 attached , child_tidptr=0x555571745650) = 5897 [pid 5897] set_robust_list(0x555571745660, 24) = 0 [pid 5897] chdir("./9") = 0 [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5897] setpgid(0, 0) = 0 [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5897] write(3, "1000", 4) = 4 [pid 5897] close(3) = 0 [pid 5897] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5897] write(1, "executing program\n", 18executing program ) = 18 [pid 5897] memfd_create("syzkaller", 0) = 3 [pid 5897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5895] <... write resumed>) = 16777216 [pid 5895] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./8/file0") = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./8") = 0 [pid 5849] mkdir("./9", 0777 <unfinished ...> [pid 5895] <... munmap resumed>) = 0 [pid 5849] <... mkdir resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3 <unfinished ...> [pid 5895] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5895] <... ioctl resumed>) = 0 [pid 5895] close(3) = 0 [pid 5895] close(4) = 0 [ 208.543809][ T5895] loop0: detected capacity change from 0 to 32768 [pid 5895] mkdir("./file0", 0777) = 0 [pid 5895] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5895] chdir("./file0") = 0 [pid 5895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5895] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5895] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5895] exit_group(0) = ? [pid 5895] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5848] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./8/binderfs") = 0 [ 208.635913][ T114] blkno = 5002c, nblocks = 1 [ 208.640575][ T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 208.640575][ T114] [ 208.690979][ T114] ERROR: (device loop0): remounting filesystem as read-only [pid 5848] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5896] <... write resumed>) = 16777216 [pid 5896] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5849] <... close resumed>) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5898 attached <unfinished ...> [pid 5897] <... write resumed>) = 16777216 [pid 5896] <... munmap resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555571745650) = 5898 [pid 5898] set_robust_list(0x555571745660, 24) = 0 [pid 5897] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5896] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5898] chdir("./9") = 0 [pid 5896] <... openat resumed>) = 4 [pid 5896] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5898] setpgid(0, 0) = 0 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5897] <... munmap resumed>) = 0 [pid 5896] <... ioctl resumed>) = 0 [pid 5897] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5896] close(3 <unfinished ...> [pid 5898] write(3, "1000", 4 <unfinished ...> [pid 5897] <... openat resumed>) = 4 [pid 5896] <... close resumed>) = 0 [pid 5898] <... write resumed>) = 4 [pid 5898] close(3) = 0 [pid 5897] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5896] close(4 <unfinished ...> [pid 5898] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5898] write(1, "executing program\n", 18 <unfinished ...> [pid 5897] <... ioctl resumed>) = 0 [pid 5896] <... close resumed>) = 0 [pid 5897] close(3) = 0 [pid 5897] close(4) = 0 [pid 5897] mkdir("./file0", 0777executing program <unfinished ...> [pid 5898] <... write resumed>) = 18 [pid 5897] <... mkdir resumed>) = 0 [pid 5896] mkdir("./file0", 0777 <unfinished ...> [pid 5897] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5896] <... mkdir resumed>) = 0 [pid 5898] memfd_create("syzkaller", 0 <unfinished ...> [pid 5896] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5898] <... memfd_create resumed>) = 3 [pid 5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5897] <... mount resumed>) = 0 [pid 5897] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5897] chdir("./file0") = 0 [ 208.849783][ T5896] loop3: detected capacity change from 0 to 32768 [ 208.867058][ T5897] loop5: detected capacity change from 0 to 32768 [pid 5897] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5897] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5896] <... mount resumed>) = 0 [pid 5897] <... symlink resumed>) = 0 [pid 5896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5897] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5896] <... openat resumed>) = 3 [pid 5896] chdir("./file0") = 0 [pid 5897] <... mount resumed>) = 0 [pid 5896] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5896] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5897] exit_group(0) = ? [pid 5897] +++ exited with 0 +++ [pid 5896] <... symlink resumed>) = 0 [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5853] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5896] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5896] exit_group(0) = ? [pid 5896] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./8/binderfs" <unfinished ...> [pid 5853] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5851] <... unlink resumed>) = 0 [ 208.926017][ T113] blkno = 5002c, nblocks = 1 [ 208.930672][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 208.930672][ T113] [ 208.933500][ T5848] JFS: metapage_get_blocks failed [ 208.964118][ T114] blkno = 5002c, nblocks = 1 [pid 5853] <... openat resumed>) = 3 [pid 5851] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./9/binderfs") = 0 [pid 5853] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [ 208.968766][ T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 208.968766][ T114] [ 208.984423][ T113] ERROR: (device loop5): remounting filesystem as read-only [ 208.990001][ T114] ERROR: (device loop3): remounting filesystem as read-only [ 209.003587][ T5853] JFS: metapage_get_blocks failed [pid 5898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5898] munmap(0x7f7f07800000, 138412032) = 0 [pid 5898] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5898] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5898] close(3) = 0 [pid 5898] close(4) = 0 [ 209.204178][ T5898] loop1: detected capacity change from 0 to 32768 [pid 5898] mkdir("./file0", 0777) = 0 [pid 5898] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5848] <... umount2 resumed>) = 0 [pid 5848] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./8/file0") = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3 <unfinished ...> [pid 5898] <... mount resumed>) = 0 [pid 5853] <... umount2 resumed>) = 0 [pid 5848] <... close resumed>) = 0 [ 209.253471][ T5851] JFS: metapage_get_blocks failed [pid 5853] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5898] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5848] rmdir("./8" <unfinished ...> [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5898] <... openat resumed>) = 3 [pid 5848] <... rmdir resumed>) = 0 [pid 5853] newfstatat(AT_FDCWD, "./9/file0", <unfinished ...> [pid 5898] chdir("./file0") = 0 [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] mkdir("./9", 0777 <unfinished ...> [pid 5898] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...> [pid 5853] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5853] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5848] <... mkdir resumed>) = 0 [pid 5898] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5853] <... openat resumed>) = 4 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] <... openat resumed>) = 3 [pid 5853] getdents64(4, <unfinished ...> [pid 5898] <... symlink resumed>) = 0 [pid 5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5848] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5853] getdents64(4, <unfinished ...> [pid 5848] <... ioctl resumed>) = 0 [pid 5898] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5853] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] close(3 <unfinished ...> [pid 5853] close(4) = 0 [pid 5853] rmdir("./9/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./9" <unfinished ...> [pid 5898] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5898] exit_group(0 <unfinished ...> [pid 5853] <... rmdir resumed>) = 0 [pid 5898] <... exit_group resumed>) = ? [pid 5853] mkdir("./10", 0777 <unfinished ...> [pid 5898] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...> <unfinished ...> [pid 5853] <... mkdir resumed>) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5849] <... restart_syscall resumed>) = 0 [pid 5853] <... ioctl resumed>) = 0 [pid 5853] close(3 <unfinished ...> [pid 5849] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5849] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./9/binderfs") = 0 [ 209.345534][ T113] blkno = 5002c, nblocks = 1 [ 209.350191][ T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 209.350191][ T113] [ 209.361523][ T113] ERROR: (device loop1): remounting filesystem as read-only [pid 5849] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5851] newfstatat(AT_FDCWD, "./8/file0", ./strace-static-x86_64: Process 5900 attached ./strace-static-x86_64: Process 5899 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5900] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5899] set_robust_list(0x555571745660, 24) = 0 [pid 5851] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5900] <... set_robust_list resumed>) = 0 [pid 5899] chdir("./9" <unfinished ...> [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5900 [pid 5851] <... openat resumed>) = 4 [pid 5848] <... clone resumed>, child_tidptr=0x555571745650) = 5899 [pid 5900] chdir("./10" <unfinished ...> [pid 5899] <... chdir resumed>) = 0 [pid 5851] newfstatat(4, "", <unfinished ...> [pid 5900] <... chdir resumed>) = 0 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5900] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5899] <... prctl resumed>) = 0 [pid 5851] getdents64(4, <unfinished ...> [pid 5900] setpgid(0, 0 <unfinished ...> [pid 5899] setpgid(0, 0 <unfinished ...> [pid 5851] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5900] <... setpgid resumed>) = 0 [pid 5899] <... setpgid resumed>) = 0 [pid 5851] getdents64(4, <unfinished ...> [pid 5900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5851] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5899] <... openat resumed>) = 3 [pid 5851] close(4 <unfinished ...> [pid 5900] <... openat resumed>) = 3 [pid 5899] write(3, "1000", 4 <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5899] <... write resumed>) = 4 [pid 5851] rmdir("./8/file0" <unfinished ...> [pid 5900] write(3, "1000", 4) = 4 [pid 5899] close(3 <unfinished ...> [pid 5851] <... rmdir resumed>) = 0 [pid 5900] close(3) = 0 [pid 5900] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5899] <... close resumed>) = 0 [pid 5851] getdents64(3, <unfinished ...> [pid 5900] <... symlink resumed>) = 0 [pid 5899] symlink("/dev/binderfs", "./binderfs"executing program <unfinished ...> [pid 5851] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5900] write(1, "executing program\n", 18 <unfinished ...> [pid 5899] <... symlink resumed>) = 0 executing program [pid 5851] close(3 <unfinished ...> [pid 5900] <... write resumed>) = 18 [pid 5899] write(1, "executing program\n", 18) = 18 [pid 5851] <... close resumed>) = 0 [pid 5900] memfd_create("syzkaller", 0 <unfinished ...> [pid 5899] memfd_create("syzkaller", 0 <unfinished ...> [pid 5900] <... memfd_create resumed>) = 3 [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5851] rmdir("./8" <unfinished ...> [pid 5900] <... mmap resumed>) = 0x7f7f07800000 [pid 5851] <... rmdir resumed>) = 0 [pid 5851] mkdir("./9", 0777 <unfinished ...> [pid 5899] <... memfd_create resumed>) = 3 [pid 5851] <... mkdir resumed>) = 0 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5901 ./strace-static-x86_64: Process 5901 attached [pid 5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5901] set_robust_list(0x555571745660, 24) = 0 [pid 5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5901] chdir("./9") = 0 [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5901] setpgid(0, 0) = 0 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5901] write(3, "1000", 4) = 4 [pid 5901] close(3) = 0 [pid 5901] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5901] write(1, "executing program\n", 18executing program ) = 18 [pid 5901] memfd_create("syzkaller", 0) = 3 [pid 5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5900] <... write resumed>) = 16777216 [pid 5900] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5900] <... munmap resumed>) = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5900] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5900] close(3) = 0 [pid 5900] close(4 <unfinished ...> [pid 5899] <... write resumed>) = 16777216 [pid 5899] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5900] <... close resumed>) = 0 [pid 5900] mkdir("./file0", 0777) = 0 [pid 5900] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5900] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 210.016940][ T5900] loop5: detected capacity change from 0 to 32768 [pid 5900] chdir("./file0") = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5900] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5900] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5899] <... munmap resumed>) = 0 [pid 5900] exit_group(0 <unfinished ...> [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5899] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5900] <... exit_group resumed>) = ? [pid 5900] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5900, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=23 /* 0.23 s */} --- [pid 5853] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./10/binderfs") = 0 [ 210.074363][ T114] blkno = 5002c, nblocks = 1 [ 210.079319][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 210.079319][ T114] [ 210.090704][ T114] ERROR: (device loop5): remounting filesystem as read-only [ 210.091296][ T5899] loop0: detected capacity change from 0 to 32768 [pid 5853] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5899] <... ioctl resumed>) = 0 [pid 5899] close(3) = 0 [pid 5899] close(4) = 0 [pid 5899] mkdir("./file0", 0777) = 0 [pid 5899] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5899] chdir("./file0") = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 210.125479][ T5853] JFS: metapage_get_blocks failed [pid 5899] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5899] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5899] exit_group(0) = ? [pid 5899] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- [pid 5848] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./9/binderfs") = 0 [pid 5848] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5901] <... write resumed>) = 16777216 [pid 5901] munmap(0x7f7f07800000, 138412032) = 0 [pid 5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 210.169720][ T113] blkno = 5002c, nblocks = 1 [ 210.187611][ T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 210.187611][ T113] [ 210.205198][ T113] ERROR: (device loop0): remounting filesystem as read-only [pid 5901] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5901] close(3) = 0 [pid 5901] close(4) = 0 [pid 5901] mkdir("./file0", 0777) = 0 [pid 5901] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5901] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5901] chdir("./file0") = 0 [pid 5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5901] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 210.247996][ T5901] loop3: detected capacity change from 0 to 32768 [pid 5901] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5901] exit_group(0) = ? [pid 5901] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5851] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5851] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./9/binderfs") = 0 [pid 5851] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] <... umount2 resumed>) = 0 [ 210.319407][ T114] blkno = 5002c, nblocks = 1 [ 210.324345][ T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 210.324345][ T114] [ 210.335318][ T114] ERROR: (device loop3): remounting filesystem as read-only [ 210.353267][ T5851] JFS: metapage_get_blocks failed [pid 5853] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [ 210.473584][ T5848] JFS: metapage_get_blocks failed [pid 5853] rmdir("./10/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./10") = 0 [pid 5853] mkdir("./11", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3 <unfinished ...> [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./9/file0") = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./9") = 0 [pid 5851] mkdir("./10", 0777) = 0 [pid 5853] <... close resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 ./strace-static-x86_64: Process 5902 attached [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [pid 5851] close(3 <unfinished ...> [pid 5902] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5902 [pid 5902] <... set_robust_list resumed>) = 0 [pid 5902] chdir("./11") = 0 [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5902] setpgid(0, 0) = 0 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5902] write(3, "1000", 4) = 4 [pid 5902] close(3) = 0 [pid 5902] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5902] write(1, "executing program\n", 18executing program ) = 18 [pid 5902] memfd_create("syzkaller", 0) = 3 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5848] <... umount2 resumed>) = 0 [pid 5902] <... mmap resumed>) = 0x7f7f07800000 [pid 5848] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5848] close(4) = 0 [pid 5848] rmdir("./9/file0") = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./9") = 0 [pid 5848] mkdir("./10", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3 <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5903 attached , child_tidptr=0x555571745650) = 5903 [pid 5903] set_robust_list(0x555571745660, 24) = 0 [pid 5903] chdir("./10") = 0 [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5903] setpgid(0, 0) = 0 [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5903] write(3, "1000", 4) = 4 [pid 5903] close(3) = 0 [pid 5903] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5903] write(1, "executing program\n", 18) = 18 [pid 5903] memfd_create("syzkaller", 0) = 3 [pid 5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5848] <... close resumed>) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5904 ./strace-static-x86_64: Process 5904 attached [pid 5904] set_robust_list(0x555571745660, 24) = 0 [pid 5904] chdir("./10") = 0 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5904] setpgid(0, 0) = 0 executing program [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5904] write(3, "1000", 4) = 4 [pid 5904] close(3) = 0 [pid 5904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5904] write(1, "executing program\n", 18) = 18 [pid 5904] memfd_create("syzkaller", 0) = 3 [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5902] <... write resumed>) = 16777216 [pid 5902] munmap(0x7f7f07800000, 138412032) = 0 [pid 5902] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5902] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5902] close(3) = 0 [pid 5902] close(4) = 0 [pid 5902] mkdir("./file0", 0777) = 0 [pid 5902] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5902] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5902] chdir("./file0") = 0 [pid 5902] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5902] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 211.232759][ T5902] loop5: detected capacity change from 0 to 32768 [pid 5902] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5902] exit_group(0) = ? [pid 5902] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./11/binderfs") = 0 [ 211.273073][ T114] blkno = 5002c, nblocks = 1 [ 211.277899][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 211.277899][ T114] [ 211.299113][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5904] <... write resumed>) = 16777216 [pid 5904] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5903] <... write resumed>) = 16777216 [pid 5904] <... munmap resumed>) = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5903] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5904] <... openat resumed>) = 4 [ 211.334279][ T5853] JFS: metapage_get_blocks failed [pid 5904] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5903] <... munmap resumed>) = 0 [pid 5903] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5904] close(3 <unfinished ...> [pid 5903] <... openat resumed>) = 4 [pid 5904] <... close resumed>) = 0 [pid 5903] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5904] close(4) = 0 [pid 5904] mkdir("./file0", 0777 <unfinished ...> [pid 5903] <... ioctl resumed>) = 0 [pid 5904] <... mkdir resumed>) = 0 [pid 5903] close(3 <unfinished ...> [pid 5904] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5903] <... close resumed>) = 0 [pid 5904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5903] close(4 <unfinished ...> [pid 5904] <... openat resumed>) = 3 [pid 5903] <... close resumed>) = 0 [pid 5904] chdir("./file0" <unfinished ...> [ 211.371557][ T5904] loop0: detected capacity change from 0 to 32768 [ 211.401477][ T5903] loop3: detected capacity change from 0 to 32768 [pid 5903] mkdir("./file0", 0777 <unfinished ...> [pid 5904] <... chdir resumed>) = 0 [pid 5903] <... mkdir resumed>) = 0 [pid 5903] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5904] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5904] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5904] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5903] <... mount resumed>) = 0 [pid 5904] <... mount resumed>) = 0 [pid 5903] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5904] exit_group(0 <unfinished ...> [pid 5903] chdir("./file0") = 0 [pid 5903] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5903] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5904] <... exit_group resumed>) = ? [pid 5903] <... symlink resumed>) = 0 [pid 5903] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5904] +++ exited with 0 +++ [pid 5903] <... mount resumed>) = 0 [pid 5903] exit_group(0 <unfinished ...> [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5903] <... exit_group resumed>) = ? [pid 5903] +++ exited with 0 +++ [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [ 211.462137][ T113] blkno = 5002c, nblocks = 1 [ 211.467171][ T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 211.467171][ T113] [ 211.479547][ T113] ERROR: (device loop0): remounting filesystem as read-only [ 211.499142][ T114] blkno = 5002c, nblocks = 1 [pid 5851] restart_syscall(<... resuming interrupted clone ...> <unfinished ...> [pid 5848] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] <... restart_syscall resumed>) = 0 [pid 5851] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", <unfinished ...> [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5851] getdents64(3, <unfinished ...> [pid 5848] <... openat resumed>) = 3 [pid 5851] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5848] newfstatat(3, "", <unfinished ...> [pid 5851] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] getdents64(3, <unfinished ...> [pid 5851] newfstatat(AT_FDCWD, "./10/binderfs", <unfinished ...> [pid 5848] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] unlink("./10/binderfs" <unfinished ...> [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./10/binderfs", <unfinished ...> [pid 5851] <... unlink resumed>) = 0 [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] unlink("./10/binderfs") = 0 [ 211.504772][ T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 211.504772][ T114] [ 211.516135][ T114] ERROR: (device loop3): remounting filesystem as read-only [ 211.545439][ T5851] JFS: metapage_get_blocks failed [ 211.557212][ T5848] JFS: metapage_get_blocks failed [pid 5848] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] <... umount2 resumed>) = 0 [pid 5853] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./11/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./11") = 0 [pid 5853] mkdir("./12", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5905 attached , child_tidptr=0x555571745650) = 5905 [pid 5905] set_robust_list(0x555571745660, 24) = 0 [pid 5905] chdir("./12") = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5905] write(1, "executing program\n", 18executing program ) = 18 [pid 5905] memfd_create("syzkaller", 0) = 3 [pid 5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5848] <... umount2 resumed>) = 0 [pid 5851] <... umount2 resumed>) = 0 [pid 5848] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./10/file0", <unfinished ...> [pid 5848] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] <... openat resumed>) = 4 [pid 5851] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5848] newfstatat(4, "", <unfinished ...> [pid 5851] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5851] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./10/file0") = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./10") = 0 [pid 5851] mkdir("./11", 0777) = 0 [pid 5848] getdents64(4, <unfinished ...> [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5848] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5848] close(4) = 0 [pid 5905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5851] <... ioctl resumed>) = 0 [pid 5848] rmdir("./10/file0") = 0 [pid 5851] close(3 <unfinished ...> [pid 5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [pid 5848] rmdir("./10") = 0 [pid 5848] mkdir("./11", 0777) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5848] ioctl(3, LOOP_CLR_FD) = 0 [pid 5848] close(3) = 0 [pid 5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5851] <... close resumed>) = 0 ./strace-static-x86_64: Process 5906 attached [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...> [pid 5906] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5848] <... clone resumed>, child_tidptr=0x555571745650) = 5906 [pid 5906] <... set_robust_list resumed>) = 0 [pid 5906] chdir("./11") = 0 [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5907 attached ) = 0 [pid 5907] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5906] setpgid(0, 0 <unfinished ...> [pid 5851] <... clone resumed>, child_tidptr=0x555571745650) = 5907 [pid 5907] <... set_robust_list resumed>) = 0 [pid 5906] <... setpgid resumed>) = 0 [pid 5907] chdir("./11" <unfinished ...> [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5907] <... chdir resumed>) = 0 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5906] <... openat resumed>) = 3 [pid 5907] setpgid(0, 0) = 0 [pid 5906] write(3, "1000", 4 <unfinished ...> [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5906] <... write resumed>) = 4 [pid 5905] <... write resumed>) = 16777216 [pid 5906] close(3) = 0 [pid 5905] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5907] <... openat resumed>) = 3 [pid 5906] symlink("/dev/binderfs", "./binderfs" <unfinished ...> [pid 5907] write(3, "1000", 4 <unfinished ...> [pid 5906] <... symlink resumed>) = 0 [pid 5907] <... write resumed>) = 4 [pid 5907] close(3) = 0 [pid 5907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5906] write(1, "executing program\n", 18executing program ) = 18 [pid 5906] memfd_create("syzkaller", 0executing program <unfinished ...> [pid 5907] write(1, "executing program\n", 18 <unfinished ...> [pid 5905] <... munmap resumed>) = 0 [pid 5907] <... write resumed>) = 18 [pid 5906] <... memfd_create resumed>) = 3 [pid 5905] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...> [pid 5907] memfd_create("syzkaller", 0 <unfinished ...> [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5905] <... openat resumed>) = 4 [pid 5907] <... memfd_create resumed>) = 3 [pid 5906] <... mmap resumed>) = 0x7f7f07800000 [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...> [pid 5905] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5907] <... mmap resumed>) = 0x7f7f07800000 [pid 5905] close(3) = 0 [pid 5905] close(4) = 0 [pid 5905] mkdir("./file0", 0777) = 0 [pid 5905] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [ 212.165562][ T5905] loop5: detected capacity change from 0 to 32768 [pid 5905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5905] chdir("./file0") = 0 [pid 5905] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5905] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5905] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [ 212.243131][ T114] blkno = 5002c, nblocks = 1 [ 212.258225][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 212.258225][ T114] [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5905] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5905] exit_group(0) = ? [pid 5905] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./12/binderfs") = 0 [ 212.283465][ T114] ERROR: (device loop5): remounting filesystem as read-only [ 212.303807][ T5905] JFS: metapage_get_blocks failed [pid 5853] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5853] <... umount2 resumed>) = 0 [pid 5853] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./12/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./12") = 0 [pid 5853] mkdir("./13", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3 <unfinished ...> [pid 5906] <... write resumed>) = 16777216 [pid 5906] munmap(0x7f7f07800000, 138412032) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5906] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5906] close(3) = 0 [pid 5906] close(4) = 0 [pid 5906] mkdir("./file0", 0777) = 0 [pid 5853] <... close resumed>) = 0 [pid 5906] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5908 attached <unfinished ...> [pid 5908] set_robust_list(0x555571745660, 24) = 0 [pid 5908] chdir("./13") = 0 [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...> [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5908 [pid 5908] <... prctl resumed>) = 0 [pid 5907] <... write resumed>) = 16777216 [pid 5906] <... mount resumed>) = 0 [pid 5908] setpgid(0, 0 <unfinished ...> [pid 5907] munmap(0x7f7f07800000, 138412032 <unfinished ...> [ 212.581844][ T5906] loop0: detected capacity change from 0 to 32768 [pid 5906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...> [pid 5908] <... setpgid resumed>) = 0 [pid 5906] <... openat resumed>) = 3 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...> [pid 5906] chdir("./file0" <unfinished ...> [pid 5908] <... openat resumed>) = 3 [pid 5906] <... chdir resumed>) = 0 [pid 5908] write(3, "1000", 4 <unfinished ...> [pid 5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...> [pid 5908] <... write resumed>) = 4 [pid 5906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5908] close(3) = 0 [pid 5906] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5908] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5906] <... symlink resumed>) = 0 [pid 5908] write(1, "executing program\n", 18) = 18 [pid 5908] memfd_create("syzkaller", 0 <unfinished ...> [pid 5906] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5908] <... memfd_create resumed>) = 3 [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5907] <... munmap resumed>) = 0 [pid 5907] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5907] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5906] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... ioctl resumed>) = 0 [pid 5907] close(3 <unfinished ...> [pid 5906] exit_group(0 <unfinished ...> [pid 5907] <... close resumed>) = 0 [pid 5907] close(4) = 0 [pid 5907] mkdir("./file0", 0777) = 0 [pid 5906] <... exit_group resumed>) = ? [pid 5907] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5906] +++ exited with 0 +++ [pid 5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5848] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5907] <... mount resumed>) = 0 [pid 5848] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5907] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5907] chdir("./file0") = 0 [pid 5907] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5907] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...> [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... symlink resumed>) = 0 [pid 5848] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5907] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5848] <... openat resumed>) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [ 212.664475][ T114] blkno = 5002c, nblocks = 1 [ 212.669195][ T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 212.669195][ T114] [ 212.685622][ T114] ERROR: (device loop0): remounting filesystem as read-only [ 212.694135][ T5907] loop3: detected capacity change from 0 to 32768 [pid 5848] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5907] <... mount resumed>) = 0 [pid 5907] exit_group(0 <unfinished ...> [pid 5848] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... exit_group resumed>) = ? [pid 5907] +++ exited with 0 +++ [pid 5848] newfstatat(AT_FDCWD, "./11/binderfs", <unfinished ...> [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- [pid 5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5848] unlink("./11/binderfs") = 0 [pid 5848] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./11/binderfs") = 0 [pid 5851] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [ 212.734422][ T113] blkno = 5002c, nblocks = 1 [ 212.739090][ T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 212.739090][ T113] [ 212.764660][ T113] ERROR: (device loop3): remounting filesystem as read-only [pid 5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5908] munmap(0x7f7f07800000, 138412032) = 0 [pid 5908] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5908] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5908] close(3) = 0 [pid 5908] close(4) = 0 [pid 5908] mkdir("./file0", 0777) = 0 [pid 5908] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5908] chdir("./file0") = 0 [ 212.967055][ T5908] loop5: detected capacity change from 0 to 32768 [pid 5908] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5908] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 213.033573][ T5851] JFS: metapage_get_blocks failed [pid 5908] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5908] exit_group(0) = ? [pid 5908] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5853] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 213.070172][ T114] blkno = 5002c, nblocks = 1 [ 213.074893][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 213.074893][ T114] [ 213.085800][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./13/binderfs") = 0 [ 213.195581][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] <... umount2 resumed>) = 0 [pid 5851] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5851] close(4) = 0 [pid 5851] rmdir("./11/file0") = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [pid 5851] rmdir("./11") = 0 [pid 5851] mkdir("./12", 0777) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD <unfinished ...> [pid 5853] <... umount2 resumed>) = 0 [pid 5853] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5851] <... ioctl resumed>) = 0 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] close(3 <unfinished ...> [pid 5853] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./13/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./13") = 0 [pid 5853] mkdir("./14", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3 <unfinished ...> [pid 5851] <... close resumed>) = 0 [pid 5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5909 attached , child_tidptr=0x555571745650) = 5909 [pid 5909] set_robust_list(0x555571745660, 24) = 0 [pid 5909] chdir("./12") = 0 [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5909] setpgid(0, 0) = 0 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5909] write(3, "1000", 4) = 4 [pid 5909] close(3) = 0 [pid 5909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5909] write(1, "executing program\n", 18executing program ) = 18 [pid 5909] memfd_create("syzkaller", 0) = 3 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5853] <... close resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5910 attached <unfinished ...> [pid 5910] set_robust_list(0x555571745660, 24) = 0 [pid 5910] chdir("./14" <unfinished ...> [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5910 [pid 5910] <... chdir resumed>) = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5910] setpgid(0, 0) = 0 [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5910] write(3, "1000", 4) = 4 [pid 5910] close(3) = 0 [pid 5910] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5910] write(1, "executing program\n", 18executing program ) = 18 [pid 5910] memfd_create("syzkaller", 0) = 3 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5909] <... write resumed>) = 16777216 [pid 5909] munmap(0x7f7f07800000, 138412032) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5909] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5909] close(3) = 0 [pid 5909] close(4) = 0 [pid 5909] mkdir("./file0", 0777) = 0 [pid 5910] <... write resumed>) = 16777216 [pid 5909] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5910] munmap(0x7f7f07800000, 138412032 <unfinished ...> [pid 5909] <... mount resumed>) = 0 [pid 5909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5910] <... munmap resumed>) = 0 [ 213.968456][ T5909] loop3: detected capacity change from 0 to 32768 [pid 5909] chdir("./file0" <unfinished ...> [pid 5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5909] <... chdir resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...> [pid 5910] ioctl(4, LOOP_SET_FD, 3 <unfinished ...> [pid 5909] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5909] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5909] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5910] <... ioctl resumed>) = 0 [pid 5910] close(3) = 0 [pid 5910] close(4) = 0 [pid 5910] mkdir("./file0", 0777) = 0 [pid 5910] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...> [pid 5909] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5909] exit_group(0) = ? [pid 5910] <... mount resumed>) = 0 [pid 5909] +++ exited with 0 +++ [pid 5910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5910] chdir("./file0") = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5910] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5910] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...> [pid 5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5851] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5851] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5851] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 214.032541][ T5910] loop5: detected capacity change from 0 to 32768 [ 214.036045][ T113] blkno = 5002c, nblocks = 1 [ 214.044117][ T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 214.044117][ T113] [ 214.054523][ T113] ERROR: (device loop3): remounting filesystem as read-only [pid 5851] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5851] unlink("./12/binderfs") = 0 [pid 5851] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5910] <... mount resumed>) = 0 [pid 5910] exit_group(0) = ? [pid 5910] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} --- [pid 5853] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 214.079309][ T114] blkno = 5002c, nblocks = 1 [ 214.084344][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 214.084344][ T114] [ 214.095286][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./14/binderfs") = 0 [ 214.218090][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./14/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./14") = 0 [pid 5853] mkdir("./15", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5911 attached , child_tidptr=0x555571745650) = 5911 [pid 5911] set_robust_list(0x555571745660, 24) = 0 [pid 5911] chdir("./15") = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5911] setpgid(0, 0) = 0 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5911] write(3, "1000", 4) = 4 [pid 5911] close(3) = 0 [pid 5911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5911] write(1, "executing program\n", 18executing program ) = 18 [pid 5911] memfd_create("syzkaller", 0) = 3 [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5911] munmap(0x7f7f07800000, 138412032) = 0 [pid 5911] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5911] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5911] close(3) = 0 [pid 5911] close(4) = 0 [pid 5911] mkdir("./file0", 0777) = 0 [pid 5911] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5911] chdir("./file0") = 0 [pid 5911] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5911] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 215.064765][ T5911] loop5: detected capacity change from 0 to 32768 [pid 5911] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5911] exit_group(0) = ? [pid 5911] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 215.121293][ T113] blkno = 5002c, nblocks = 1 [ 215.126054][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 215.126054][ T113] [ 215.137533][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./15/binderfs") = 0 [ 215.259498][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./15/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./15") = 0 [pid 5853] mkdir("./16", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5912 attached , child_tidptr=0x555571745650) = 5912 [pid 5912] set_robust_list(0x555571745660, 24) = 0 [pid 5912] chdir("./16") = 0 [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5912] setpgid(0, 0) = 0 [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5912] write(3, "1000", 4) = 4 [pid 5912] close(3) = 0 [pid 5912] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5912] write(1, "executing program\n", 18) = 18 [pid 5912] memfd_create("syzkaller", 0) = 3 [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5912] munmap(0x7f7f07800000, 138412032) = 0 [pid 5912] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5912] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5912] close(3) = 0 [pid 5912] close(4) = 0 [pid 5912] mkdir("./file0", 0777) = 0 [pid 5912] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5912] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5912] chdir("./file0") = 0 [ 216.171095][ T5912] loop5: detected capacity change from 0 to 32768 [pid 5912] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5912] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5912] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5912] exit_group(0) = ? [pid 5912] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5912, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 216.236635][ T114] blkno = 5002c, nblocks = 1 [ 216.241267][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 216.241267][ T114] [ 216.252108][ T114] ERROR: (device loop5): remounting filesystem as read-only [ 216.260531][ T5912] JFS: metapage_get_blocks failed [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./16/binderfs") = 0 [pid 5853] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./16/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./16") = 0 [pid 5853] mkdir("./17", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5913 attached , child_tidptr=0x555571745650) = 5913 [pid 5913] set_robust_list(0x555571745660, 24) = 0 [pid 5913] chdir("./17") = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5913] setpgid(0, 0) = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5913] write(3, "1000", 4) = 4 [pid 5913] close(3) = 0 [pid 5913] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5913] write(1, "executing program\n", 18) = 18 [pid 5913] memfd_create("syzkaller", 0) = 3 [pid 5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5913] munmap(0x7f7f07800000, 138412032) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5913] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5913] close(3) = 0 [pid 5913] close(4) = 0 [pid 5913] mkdir("./file0", 0777) = 0 [pid 5913] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5913] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5913] chdir("./file0") = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5913] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 216.950836][ T5913] loop5: detected capacity change from 0 to 32768 [pid 5913] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5913] exit_group(0) = ? [pid 5913] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 217.008426][ T113] blkno = 5002c, nblocks = 1 [ 217.013666][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 217.013666][ T113] [ 217.025718][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./17/binderfs") = 0 [ 217.142614][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./17/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./17") = 0 [pid 5853] mkdir("./18", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5914 attached , child_tidptr=0x555571745650) = 5914 [pid 5914] set_robust_list(0x555571745660, 24) = 0 [pid 5914] chdir("./18") = 0 [pid 5914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5914] setpgid(0, 0) = 0 [pid 5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5914] write(3, "1000", 4) = 4 [pid 5914] close(3) = 0 [pid 5914] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5914] write(1, "executing program\n", 18executing program ) = 18 [pid 5914] memfd_create("syzkaller", 0) = 3 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5914] munmap(0x7f7f07800000, 138412032) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5914] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5914] close(3) = 0 [pid 5914] close(4) = 0 [pid 5914] mkdir("./file0", 0777) = 0 [pid 5914] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5914] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5914] chdir("./file0") = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5914] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 218.006189][ T5914] loop5: detected capacity change from 0 to 32768 [pid 5914] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5914] exit_group(0) = ? [pid 5914] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5914, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 218.063548][ T114] blkno = 5002c, nblocks = 1 [ 218.069200][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 218.069200][ T114] [ 218.080003][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./18/binderfs") = 0 [ 218.177003][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./18/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./18") = 0 [pid 5853] mkdir("./19", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5915 attached , child_tidptr=0x555571745650) = 5915 [pid 5915] set_robust_list(0x555571745660, 24) = 0 [pid 5915] chdir("./19") = 0 [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5915] setpgid(0, 0) = 0 [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5915] write(3, "1000", 4) = 4 [pid 5915] close(3) = 0 [pid 5915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5915] write(1, "executing program\n", 18executing program ) = 18 [pid 5915] memfd_create("syzkaller", 0) = 3 [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5915] munmap(0x7f7f07800000, 138412032) = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5915] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5915] close(3) = 0 [pid 5915] close(4) = 0 [pid 5915] mkdir("./file0", 0777) = 0 [pid 5915] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 219.037012][ T5915] loop5: detected capacity change from 0 to 32768 [pid 5915] chdir("./file0") = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5915] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5915] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5915] exit_group(0) = ? [pid 5915] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./19/binderfs") = 0 [ 219.136297][ T114] blkno = 5002c, nblocks = 1 [ 219.141228][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 219.141228][ T114] [ 219.151981][ T114] ERROR: (device loop5): remounting filesystem as read-only [ 219.167158][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./19/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./19") = 0 [pid 5853] mkdir("./20", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5916 attached , child_tidptr=0x555571745650) = 5916 [pid 5916] set_robust_list(0x555571745660, 24) = 0 [pid 5916] chdir("./20") = 0 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5916] setpgid(0, 0) = 0 [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5916] write(3, "1000", 4) = 4 [pid 5916] close(3) = 0 [pid 5916] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5916] write(1, "executing program\n", 18) = 18 [pid 5916] memfd_create("syzkaller", 0) = 3 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5916] munmap(0x7f7f07800000, 138412032) = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5916] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5916] close(3) = 0 [pid 5916] close(4) = 0 [pid 5916] mkdir("./file0", 0777) = 0 [pid 5916] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5916] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5916] chdir("./file0") = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5916] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 220.018723][ T5916] loop5: detected capacity change from 0 to 32768 [pid 5916] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5916] exit_group(0) = ? [pid 5916] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5853] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 220.072537][ T113] blkno = 5002c, nblocks = 1 [ 220.079053][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 220.079053][ T113] [ 220.089945][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./20/binderfs") = 0 [ 220.205201][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./20/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./20") = 0 [pid 5853] mkdir("./21", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5917 attached , child_tidptr=0x555571745650) = 5917 [pid 5917] set_robust_list(0x555571745660, 24) = 0 [pid 5917] chdir("./21") = 0 [pid 5917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5917] setpgid(0, 0) = 0 [pid 5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5917] write(3, "1000", 4) = 4 [pid 5917] close(3) = 0 [pid 5917] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5917] write(1, "executing program\n", 18executing program ) = 18 [pid 5917] memfd_create("syzkaller", 0) = 3 [pid 5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5917] munmap(0x7f7f07800000, 138412032) = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5917] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5917] close(3) = 0 [pid 5917] close(4) = 0 [pid 5917] mkdir("./file0", 0777) = 0 [pid 5917] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5917] chdir("./file0") = 0 [pid 5917] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 221.060067][ T5917] loop5: detected capacity change from 0 to 32768 [pid 5917] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5917] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5917] exit_group(0) = ? [pid 5917] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5917, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 221.125373][ T114] blkno = 5002c, nblocks = 1 [ 221.130020][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 221.130020][ T114] [ 221.140511][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./21/binderfs") = 0 [ 221.280017][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./21/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./21") = 0 [pid 5853] mkdir("./22", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5918 attached , child_tidptr=0x555571745650) = 5918 [pid 5918] set_robust_list(0x555571745660, 24) = 0 [pid 5918] chdir("./22") = 0 [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5918] setpgid(0, 0) = 0 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5918] write(3, "1000", 4) = 4 [pid 5918] close(3) = 0 [pid 5918] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5918] write(1, "executing program\n", 18) = 18 [pid 5918] memfd_create("syzkaller", 0) = 3 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5918] munmap(0x7f7f07800000, 138412032) = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5918] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5918] close(3) = 0 [pid 5918] close(4) = 0 [pid 5918] mkdir("./file0", 0777) = 0 [pid 5918] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5918] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 222.139328][ T5918] loop5: detected capacity change from 0 to 32768 [pid 5918] chdir("./file0") = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5918] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5918] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5918] exit_group(0) = ? [pid 5918] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 222.230477][ T113] blkno = 5002c, nblocks = 1 [ 222.235200][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 222.235200][ T113] [ 222.245489][ T113] ERROR: (device loop5): remounting filesystem as read-only [ 222.253579][ T5918] JFS: metapage_get_blocks failed [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./22/binderfs") = 0 [pid 5853] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./22/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./22") = 0 [pid 5853] mkdir("./23", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5919 attached , child_tidptr=0x555571745650) = 5919 [pid 5919] set_robust_list(0x555571745660, 24) = 0 [pid 5919] chdir("./23") = 0 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5919] setpgid(0, 0) = 0 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5919] write(3, "1000", 4) = 4 [pid 5919] close(3) = 0 [pid 5919] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5919] write(1, "executing program\n", 18) = 18 [pid 5919] memfd_create("syzkaller", 0) = 3 [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5919] munmap(0x7f7f07800000, 138412032) = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5919] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5919] close(3) = 0 [pid 5919] close(4) = 0 [pid 5919] mkdir("./file0", 0777) = 0 [pid 5919] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [ 222.851690][ T5919] loop5: detected capacity change from 0 to 32768 [pid 5919] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5919] chdir("./file0") = 0 [pid 5919] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5919] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5919] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5919] exit_group(0) = ? [pid 5919] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [ 222.957022][ T114] blkno = 5002c, nblocks = 1 [ 222.961675][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 222.961675][ T114] [ 222.972115][ T114] ERROR: (device loop5): remounting filesystem as read-only [ 222.979914][ T5919] JFS: metapage_get_blocks failed [pid 5853] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./23/binderfs") = 0 [pid 5853] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./23/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./23") = 0 [pid 5853] mkdir("./24", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5920 attached , child_tidptr=0x555571745650) = 5920 [pid 5920] set_robust_list(0x555571745660, 24) = 0 [pid 5920] chdir("./24") = 0 [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5920] setpgid(0, 0) = 0 [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5920] write(3, "1000", 4) = 4 [pid 5920] close(3) = 0 [pid 5920] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5920] write(1, "executing program\n", 18) = 18 [pid 5920] memfd_create("syzkaller", 0) = 3 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5920] munmap(0x7f7f07800000, 138412032) = 0 [pid 5920] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5920] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5920] close(3) = 0 [pid 5920] close(4) = 0 [pid 5920] mkdir("./file0", 0777) = 0 [pid 5920] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5920] chdir("./file0") = 0 [pid 5920] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5920] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 223.495396][ T5920] loop5: detected capacity change from 0 to 32768 [ 223.533660][ T113] blkno = 5002c, nblocks = 1 [pid 5920] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5920] exit_group(0) = ? [pid 5920] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./24/binderfs") = 0 [ 223.538336][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 223.538336][ T113] [ 223.550191][ T113] ERROR: (device loop5): remounting filesystem as read-only [ 223.572091][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./24/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./24") = 0 [pid 5853] mkdir("./25", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5921 attached , child_tidptr=0x555571745650) = 5921 [pid 5921] set_robust_list(0x555571745660, 24) = 0 [pid 5921] chdir("./25") = 0 [pid 5921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5921] setpgid(0, 0) = 0 [pid 5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5921] write(3, "1000", 4) = 4 [pid 5921] close(3) = 0 [pid 5921] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5921] write(1, "executing program\n", 18) = 18 [pid 5921] memfd_create("syzkaller", 0) = 3 [pid 5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5921] munmap(0x7f7f07800000, 138412032) = 0 [pid 5921] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5921] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5921] close(3) = 0 [pid 5921] close(4) = 0 [pid 5921] mkdir("./file0", 0777) = 0 [pid 5921] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5921] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5921] chdir("./file0") = 0 [pid 5921] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 224.417009][ T5921] loop5: detected capacity change from 0 to 32768 [pid 5921] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5921] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5921] exit_group(0) = ? [pid 5921] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5921, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [ 224.480864][ T114] blkno = 5002c, nblocks = 1 [ 224.489092][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 224.489092][ T114] [ 224.500037][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./25/binderfs") = 0 [ 224.592900][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./25/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./25") = 0 [pid 5853] mkdir("./26", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5922 attached , child_tidptr=0x555571745650) = 5922 [pid 5922] set_robust_list(0x555571745660, 24) = 0 [pid 5922] chdir("./26") = 0 [pid 5922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5922] setpgid(0, 0) = 0 [pid 5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5922] write(3, "1000", 4) = 4 [pid 5922] close(3) = 0 [pid 5922] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5922] write(1, "executing program\n", 18) = 18 [pid 5922] memfd_create("syzkaller", 0) = 3 [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5922] munmap(0x7f7f07800000, 138412032) = 0 [pid 5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5922] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5922] close(3) = 0 [pid 5922] close(4) = 0 [pid 5922] mkdir("./file0", 0777) = 0 [pid 5922] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5922] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5922] chdir("./file0") = 0 [pid 5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5922] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 225.482013][ T5922] loop5: detected capacity change from 0 to 32768 [pid 5922] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5922] exit_group(0) = ? [pid 5922] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5922, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 225.537321][ T113] blkno = 5002c, nblocks = 1 [ 225.542149][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 225.542149][ T113] [ 225.552975][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./26/binderfs") = 0 [ 225.670925][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./26/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./26") = 0 [pid 5853] mkdir("./27", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5923 attached , child_tidptr=0x555571745650) = 5923 [pid 5923] set_robust_list(0x555571745660, 24) = 0 [pid 5923] chdir("./27") = 0 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0) = 0 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5923] write(3, "1000", 4) = 4 [pid 5923] close(3) = 0 [pid 5923] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5923] write(1, "executing program\n", 18) = 18 [pid 5923] memfd_create("syzkaller", 0) = 3 [pid 5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5923] munmap(0x7f7f07800000, 138412032) = 0 [pid 5923] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5923] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5923] close(3) = 0 [pid 5923] close(4) = 0 [pid 5923] mkdir("./file0", 0777) = 0 [pid 5923] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5923] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 226.530988][ T5923] loop5: detected capacity change from 0 to 32768 [pid 5923] chdir("./file0") = 0 [pid 5923] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5923] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5923] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5923] exit_group(0) = ? [pid 5923] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [ 226.596947][ T113] blkno = 5002c, nblocks = 1 [ 226.601589][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 226.601589][ T113] [ 226.612582][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./27/binderfs") = 0 [ 226.700477][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./27/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./27") = 0 [pid 5853] mkdir("./28", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5924 attached , child_tidptr=0x555571745650) = 5924 [pid 5924] set_robust_list(0x555571745660, 24) = 0 [pid 5924] chdir("./28") = 0 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5924] setpgid(0, 0) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5924] write(3, "1000", 4) = 4 [pid 5924] close(3) = 0 [pid 5924] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5924] write(1, "executing program\n", 18executing program ) = 18 [pid 5924] memfd_create("syzkaller", 0) = 3 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5924] munmap(0x7f7f07800000, 138412032) = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5924] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5924] close(3) = 0 [pid 5924] close(4) = 0 [pid 5924] mkdir("./file0", 0777) = 0 [pid 5924] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5924] chdir("./file0") = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5924] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 227.421713][ T5924] loop5: detected capacity change from 0 to 32768 [pid 5924] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5924] exit_group(0) = ? [pid 5924] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 227.484282][ T113] blkno = 5002c, nblocks = 1 [ 227.488971][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 227.488971][ T113] [ 227.499790][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./28/binderfs") = 0 [ 227.624465][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./28/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./28") = 0 [pid 5853] mkdir("./29", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5925 attached , child_tidptr=0x555571745650) = 5925 [pid 5925] set_robust_list(0x555571745660, 24) = 0 [pid 5925] chdir("./29") = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 [pid 5925] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5925] write(1, "executing program\n", 18) = 18 [pid 5925] memfd_create("syzkaller", 0) = 3 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5925] munmap(0x7f7f07800000, 138412032) = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5925] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5925] close(3) = 0 [pid 5925] close(4) = 0 [pid 5925] mkdir("./file0", 0777) = 0 [pid 5925] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [ 228.349089][ T5925] loop5: detected capacity change from 0 to 32768 [pid 5925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5925] chdir("./file0") = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5925] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5925] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5925] exit_group(0) = ? [pid 5925] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 228.456094][ T114] blkno = 5002c, nblocks = 1 [ 228.460790][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 228.460790][ T114] [ 228.471152][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./29/binderfs") = 0 [ 228.579410][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./29/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./29") = 0 [pid 5853] mkdir("./30", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5926 attached , child_tidptr=0x555571745650) = 5926 [pid 5926] set_robust_list(0x555571745660, 24) = 0 [pid 5926] chdir("./30") = 0 [pid 5926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5926] setpgid(0, 0) = 0 [pid 5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5926] write(3, "1000", 4) = 4 [pid 5926] close(3) = 0 [pid 5926] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5926] write(1, "executing program\n", 18executing program ) = 18 [pid 5926] memfd_create("syzkaller", 0) = 3 [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5926] munmap(0x7f7f07800000, 138412032) = 0 [pid 5926] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5926] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5926] close(3) = 0 [pid 5926] close(4) = 0 [pid 5926] mkdir("./file0", 0777) = 0 [pid 5926] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5926] chdir("./file0") = 0 [pid 5926] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5926] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 229.449079][ T5926] loop5: detected capacity change from 0 to 32768 [pid 5926] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5926] exit_group(0) = ? [pid 5926] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5926, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5853] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 229.513977][ T114] blkno = 5002c, nblocks = 1 [ 229.518788][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 229.518788][ T114] [ 229.530248][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./30/binderfs") = 0 [ 229.628415][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./30/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./30") = 0 [pid 5853] mkdir("./31", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5927 attached , child_tidptr=0x555571745650) = 5927 [pid 5927] set_robust_list(0x555571745660, 24) = 0 [pid 5927] chdir("./31") = 0 [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5927] setpgid(0, 0) = 0 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5927] write(3, "1000", 4) = 4 [pid 5927] close(3) = 0 [pid 5927] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5927] write(1, "executing program\n", 18) = 18 [pid 5927] memfd_create("syzkaller", 0) = 3 [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5927] munmap(0x7f7f07800000, 138412032) = 0 [pid 5927] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5927] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5927] close(3) = 0 [pid 5927] close(4) = 0 [pid 5927] mkdir("./file0", 0777) = 0 [pid 5927] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5927] chdir("./file0") = 0 [pid 5927] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5927] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 230.498481][ T5927] loop5: detected capacity change from 0 to 32768 [pid 5927] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5927] exit_group(0) = ? [pid 5927] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [ 230.550821][ T113] blkno = 5002c, nblocks = 1 [ 230.555661][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 230.555661][ T113] [ 230.566560][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./31/binderfs") = 0 [ 230.715867][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./31/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./31") = 0 [pid 5853] mkdir("./32", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5928 attached , child_tidptr=0x555571745650) = 5928 [pid 5928] set_robust_list(0x555571745660, 24) = 0 [pid 5928] chdir("./32") = 0 [pid 5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5928] setpgid(0, 0) = 0 [pid 5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5928] write(3, "1000", 4) = 4 [pid 5928] close(3) = 0 [pid 5928] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5928] write(1, "executing program\n", 18) = 18 [pid 5928] memfd_create("syzkaller", 0) = 3 [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5928] munmap(0x7f7f07800000, 138412032) = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5928] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5928] close(3) = 0 [pid 5928] close(4) = 0 [pid 5928] mkdir("./file0", 0777) = 0 [ 231.531263][ T5928] loop5: detected capacity change from 0 to 32768 [pid 5928] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5928] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5928] chdir("./file0") = 0 [pid 5928] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5928] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5928] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5928] exit_group(0) = ? [pid 5928] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5853] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 231.650508][ T114] blkno = 5002c, nblocks = 1 [ 231.655228][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 231.655228][ T114] [ 231.666094][ T114] ERROR: (device loop5): remounting filesystem as read-only [ 231.673973][ T5928] JFS: metapage_get_blocks failed [pid 5853] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./32/binderfs") = 0 [pid 5853] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./32/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./32") = 0 [pid 5853] mkdir("./33", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5929 attached , child_tidptr=0x555571745650) = 5929 [pid 5929] set_robust_list(0x555571745660, 24) = 0 [pid 5929] chdir("./33") = 0 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5929] setpgid(0, 0) = 0 [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5929] write(3, "1000", 4) = 4 [pid 5929] close(3) = 0 [pid 5929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5929] write(1, "executing program\n", 18executing program ) = 18 [pid 5929] memfd_create("syzkaller", 0) = 3 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5929] munmap(0x7f7f07800000, 138412032) = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5929] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5929] close(3) = 0 [pid 5929] close(4) = 0 [pid 5929] mkdir("./file0", 0777) = 0 [pid 5929] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5929] chdir("./file0") = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5929] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5929] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [ 232.233078][ T5929] loop5: detected capacity change from 0 to 32768 [pid 5929] exit_group(0) = ? [pid 5929] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5853] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./33/binderfs") = 0 [ 232.292487][ T113] blkno = 5002c, nblocks = 1 [ 232.297271][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 232.297271][ T113] [ 232.308214][ T113] ERROR: (device loop5): remounting filesystem as read-only [ 232.325598][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./33/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./33") = 0 [pid 5853] mkdir("./34", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5930 attached , child_tidptr=0x555571745650) = 5930 [pid 5930] set_robust_list(0x555571745660, 24) = 0 [pid 5930] chdir("./34") = 0 [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5930] setpgid(0, 0) = 0 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5930] write(3, "1000", 4) = 4 [pid 5930] close(3) = 0 [pid 5930] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5930] write(1, "executing program\n", 18) = 18 [pid 5930] memfd_create("syzkaller", 0) = 3 [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5930] munmap(0x7f7f07800000, 138412032) = 0 [pid 5930] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5930] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5930] close(3) = 0 [pid 5930] close(4) = 0 [pid 5930] mkdir("./file0", 0777) = 0 [ 233.182878][ T5930] loop5: detected capacity change from 0 to 32768 [pid 5930] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5930] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5930] chdir("./file0") = 0 [pid 5930] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5930] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5930] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5930] exit_group(0) = ? [pid 5930] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5930, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 233.280235][ T114] blkno = 5002c, nblocks = 1 [ 233.285290][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 233.285290][ T114] [ 233.296222][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./34/binderfs") = 0 [ 233.406752][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./34/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./34") = 0 [pid 5853] mkdir("./35", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5931 attached , child_tidptr=0x555571745650) = 5931 [pid 5931] set_robust_list(0x555571745660, 24) = 0 [pid 5931] chdir("./35") = 0 [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5931] setpgid(0, 0) = 0 [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5931] write(3, "1000", 4) = 4 [pid 5931] close(3) = 0 [pid 5931] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5931] write(1, "executing program\n", 18) = 18 [pid 5931] memfd_create("syzkaller", 0) = 3 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5931] munmap(0x7f7f07800000, 138412032) = 0 [pid 5931] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5931] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5931] close(3) = 0 [pid 5931] close(4) = 0 [pid 5931] mkdir("./file0", 0777) = 0 [pid 5931] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5931] chdir("./file0") = 0 [ 234.270140][ T5931] loop5: detected capacity change from 0 to 32768 [pid 5931] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5931] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5931] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5931] exit_group(0) = ? [pid 5931] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 234.348141][ T113] blkno = 5002c, nblocks = 1 [ 234.352846][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 234.352846][ T113] [ 234.365007][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./35/binderfs") = 0 [ 234.471954][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./35/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./35") = 0 [pid 5853] mkdir("./36", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5932 attached , child_tidptr=0x555571745650) = 5932 [pid 5932] set_robust_list(0x555571745660, 24) = 0 [pid 5932] chdir("./36") = 0 [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5932] setpgid(0, 0) = 0 [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5932] write(3, "1000", 4) = 4 [pid 5932] close(3) = 0 [pid 5932] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5932] write(1, "executing program\n", 18) = 18 [pid 5932] memfd_create("syzkaller", 0) = 3 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5932] munmap(0x7f7f07800000, 138412032) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5932] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5932] close(3) = 0 [pid 5932] close(4) = 0 [pid 5932] mkdir("./file0", 0777) = 0 [pid 5932] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5932] chdir("./file0") = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 235.320903][ T5932] loop5: detected capacity change from 0 to 32768 [pid 5932] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5932] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5932] exit_group(0) = ? [pid 5932] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5932, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 235.384673][ T114] blkno = 5002c, nblocks = 1 [ 235.389352][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 235.389352][ T114] [ 235.400251][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./36/binderfs") = 0 [ 235.508355][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./36/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./36") = 0 [pid 5853] mkdir("./37", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5933 attached , child_tidptr=0x555571745650) = 5933 [pid 5933] set_robust_list(0x555571745660, 24) = 0 [pid 5933] chdir("./37") = 0 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5933] setpgid(0, 0) = 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5933] write(3, "1000", 4) = 4 [pid 5933] close(3) = 0 [pid 5933] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5933] write(1, "executing program\n", 18) = 18 [pid 5933] memfd_create("syzkaller", 0) = 3 [pid 5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5933] munmap(0x7f7f07800000, 138412032) = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5933] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5933] close(3) = 0 [pid 5933] close(4) = 0 [pid 5933] mkdir("./file0", 0777) = 0 [pid 5933] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5933] chdir("./file0") = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5933] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 236.336437][ T5933] loop5: detected capacity change from 0 to 32768 [pid 5933] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5933] exit_group(0) = ? [pid 5933] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 236.387116][ T113] blkno = 5002c, nblocks = 1 [ 236.391858][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 236.391858][ T113] [ 236.402905][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./37/binderfs") = 0 [ 236.525499][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./37/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./37") = 0 [pid 5853] mkdir("./38", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5934 attached , child_tidptr=0x555571745650) = 5934 [pid 5934] set_robust_list(0x555571745660, 24) = 0 [pid 5934] chdir("./38") = 0 [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5934] setpgid(0, 0) = 0 [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5934] write(3, "1000", 4) = 4 [pid 5934] close(3) = 0 [pid 5934] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5934] write(1, "executing program\n", 18) = 18 [pid 5934] memfd_create("syzkaller", 0) = 3 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5934] munmap(0x7f7f07800000, 138412032) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5934] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5934] close(3) = 0 [pid 5934] close(4) = 0 [pid 5934] mkdir("./file0", 0777) = 0 [ 237.355612][ T5934] loop5: detected capacity change from 0 to 32768 [pid 5934] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5934] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5934] chdir("./file0") = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5934] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5934] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5934] exit_group(0) = ? [pid 5934] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 237.468565][ T114] blkno = 5002c, nblocks = 1 [ 237.473318][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 237.473318][ T114] [ 237.483860][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./38/binderfs") = 0 [ 237.602746][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./38/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./38") = 0 [pid 5853] mkdir("./39", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5935 attached , child_tidptr=0x555571745650) = 5935 [pid 5935] set_robust_list(0x555571745660, 24) = 0 [pid 5935] chdir("./39") = 0 [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5935] setpgid(0, 0) = 0 [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5935] write(3, "1000", 4) = 4 [pid 5935] close(3) = 0 [pid 5935] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5935] write(1, "executing program\n", 18) = 18 [pid 5935] memfd_create("syzkaller", 0) = 3 [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5935] munmap(0x7f7f07800000, 138412032) = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5935] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5935] close(3) = 0 [pid 5935] close(4) = 0 [pid 5935] mkdir("./file0", 0777) = 0 [pid 5935] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5935] chdir("./file0") = 0 [ 238.534809][ T5935] loop5: detected capacity change from 0 to 32768 [pid 5935] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5935] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5935] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5935] exit_group(0) = ? [pid 5935] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 238.618204][ T113] blkno = 5002c, nblocks = 1 [ 238.622902][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 238.622902][ T113] [ 238.634187][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./39/binderfs") = 0 [ 238.756373][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./39/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./39") = 0 [pid 5853] mkdir("./40", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5936 attached , child_tidptr=0x555571745650) = 5936 [pid 5936] set_robust_list(0x555571745660, 24) = 0 [pid 5936] chdir("./40") = 0 [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5936] setpgid(0, 0) = 0 [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5936] write(3, "1000", 4) = 4 [pid 5936] close(3) = 0 [pid 5936] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5936] write(1, "executing program\n", 18executing program ) = 18 [pid 5936] memfd_create("syzkaller", 0) = 3 [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5936] munmap(0x7f7f07800000, 138412032) = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5936] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5936] close(3) = 0 [pid 5936] close(4) = 0 [pid 5936] mkdir("./file0", 0777) = 0 [pid 5936] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5936] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5936] chdir("./file0") = 0 [ 239.541990][ T5936] loop5: detected capacity change from 0 to 32768 [pid 5936] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5936] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5936] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5936] exit_group(0) = ? [pid 5936] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5936, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5853] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 239.627027][ T114] blkno = 5002c, nblocks = 1 [ 239.631695][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 239.631695][ T114] [ 239.642055][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./40/binderfs") = 0 [ 239.698698][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./40/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./40") = 0 [pid 5853] mkdir("./41", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5937 attached , child_tidptr=0x555571745650) = 5937 [pid 5937] set_robust_list(0x555571745660, 24) = 0 [pid 5937] chdir("./41") = 0 [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5937] setpgid(0, 0) = 0 [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5937] write(3, "1000", 4) = 4 [pid 5937] close(3) = 0 [pid 5937] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5937] write(1, "executing program\n", 18) = 18 [pid 5937] memfd_create("syzkaller", 0) = 3 [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5937] munmap(0x7f7f07800000, 138412032) = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5937] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5937] close(3) = 0 [pid 5937] close(4) = 0 [pid 5937] mkdir("./file0", 0777) = 0 [pid 5937] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [ 240.547945][ T5937] loop5: detected capacity change from 0 to 32768 [pid 5937] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5937] chdir("./file0") = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5937] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5937] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5937] exit_group(0) = ? [pid 5937] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5937, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 240.651787][ T114] blkno = 5002c, nblocks = 1 [ 240.656555][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 240.656555][ T114] [ 240.667695][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./41/binderfs") = 0 [ 240.771854][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./41/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./41") = 0 [pid 5853] mkdir("./42", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5938 attached , child_tidptr=0x555571745650) = 5938 [pid 5938] set_robust_list(0x555571745660, 24) = 0 [pid 5938] chdir("./42") = 0 [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] setpgid(0, 0) = 0 [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5938] write(3, "1000", 4) = 4 [pid 5938] close(3) = 0 [pid 5938] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5938] write(1, "executing program\n", 18) = 18 executing program [pid 5938] memfd_create("syzkaller", 0) = 3 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5938] munmap(0x7f7f07800000, 138412032) = 0 [pid 5938] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5938] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5938] close(3) = 0 [pid 5938] close(4) = 0 [pid 5938] mkdir("./file0", 0777) = 0 [pid 5938] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [ 241.607546][ T5938] loop5: detected capacity change from 0 to 32768 [pid 5938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5938] chdir("./file0") = 0 [pid 5938] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5938] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5938] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5938] exit_group(0) = ? [pid 5938] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5938, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5853] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 241.710327][ T113] blkno = 5002c, nblocks = 1 [ 241.715040][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 241.715040][ T113] [ 241.725561][ T113] ERROR: (device loop5): remounting filesystem as read-only [ 241.733710][ T5938] JFS: metapage_get_blocks failed [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./42/binderfs") = 0 [pid 5853] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./42/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./42") = 0 [pid 5853] mkdir("./43", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5939 attached , child_tidptr=0x555571745650) = 5939 [pid 5939] set_robust_list(0x555571745660, 24) = 0 [pid 5939] chdir("./43") = 0 [pid 5939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5939] setpgid(0, 0) = 0 [pid 5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5939] write(3, "1000", 4) = 4 [pid 5939] close(3) = 0 [pid 5939] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5939] write(1, "executing program\n", 18) = 18 [pid 5939] memfd_create("syzkaller", 0) = 3 [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5939] munmap(0x7f7f07800000, 138412032) = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5939] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5939] close(3) = 0 [pid 5939] close(4) = 0 [pid 5939] mkdir("./file0", 0777) = 0 [pid 5939] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5939] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5939] chdir("./file0") = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5939] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 242.311995][ T5939] loop5: detected capacity change from 0 to 32768 [pid 5939] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5939] exit_group(0) = ? [pid 5939] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5939, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [ 242.366461][ T113] blkno = 5002c, nblocks = 1 [ 242.371145][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 242.371145][ T113] [ 242.384124][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./43/binderfs") = 0 [ 242.470049][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./43/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./43") = 0 [pid 5853] mkdir("./44", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5940 attached , child_tidptr=0x555571745650) = 5940 [pid 5940] set_robust_list(0x555571745660, 24) = 0 [pid 5940] chdir("./44") = 0 [pid 5940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5940] setpgid(0, 0) = 0 [pid 5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5940] write(3, "1000", 4) = 4 [pid 5940] close(3) = 0 [pid 5940] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5940] write(1, "executing program\n", 18executing program ) = 18 [pid 5940] memfd_create("syzkaller", 0) = 3 [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5940] munmap(0x7f7f07800000, 138412032) = 0 [pid 5940] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5940] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5940] close(3) = 0 [pid 5940] close(4) = 0 [pid 5940] mkdir("./file0", 0777) = 0 [pid 5940] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5940] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5940] chdir("./file0") = 0 [ 243.310127][ T5940] loop5: detected capacity change from 0 to 32768 [pid 5940] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5940] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5940] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5940] exit_group(0) = ? [pid 5940] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5940, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 243.388996][ T114] blkno = 5002c, nblocks = 1 [ 243.393805][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 243.393805][ T114] [ 243.405515][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./44/binderfs") = 0 [ 243.472981][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./44/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./44") = 0 [pid 5853] mkdir("./45", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5941 attached , child_tidptr=0x555571745650) = 5941 [pid 5941] set_robust_list(0x555571745660, 24) = 0 [pid 5941] chdir("./45") = 0 [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5941] setpgid(0, 0) = 0 [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5941] write(3, "1000", 4) = 4 [pid 5941] close(3) = 0 [pid 5941] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5941] write(1, "executing program\n", 18executing program ) = 18 [pid 5941] memfd_create("syzkaller", 0) = 3 [pid 5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5941] munmap(0x7f7f07800000, 138412032) = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5941] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5941] close(3) = 0 [pid 5941] close(4) = 0 [pid 5941] mkdir("./file0", 0777) = 0 [pid 5941] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5941] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5941] chdir("./file0") = 0 [pid 5941] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 244.359525][ T5941] loop5: detected capacity change from 0 to 32768 [pid 5941] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5941] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5941] exit_group(0) = ? [pid 5941] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 244.425536][ T114] blkno = 5002c, nblocks = 1 [ 244.430178][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 244.430178][ T114] [ 244.441956][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./45/binderfs") = 0 [ 244.552537][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./45/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./45") = 0 [pid 5853] mkdir("./46", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5942 attached , child_tidptr=0x555571745650) = 5942 [pid 5942] set_robust_list(0x555571745660, 24) = 0 [pid 5942] chdir("./46") = 0 [pid 5942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5942] setpgid(0, 0) = 0 [pid 5942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5942] write(3, "1000", 4) = 4 [pid 5942] close(3) = 0 [pid 5942] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5942] write(1, "executing program\n", 18executing program ) = 18 [pid 5942] memfd_create("syzkaller", 0) = 3 [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5942] munmap(0x7f7f07800000, 138412032) = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5942] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5942] close(3) = 0 [pid 5942] close(4) = 0 [pid 5942] mkdir("./file0", 0777) = 0 [pid 5942] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5942] chdir("./file0") = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5942] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 245.380667][ T5942] loop5: detected capacity change from 0 to 32768 [pid 5942] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5942] exit_group(0) = ? [pid 5942] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5942, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 245.443727][ T113] blkno = 5002c, nblocks = 1 [ 245.448519][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 245.448519][ T113] [ 245.459915][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./46/binderfs") = 0 [ 245.574792][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./46/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./46") = 0 [pid 5853] mkdir("./47", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5943 attached , child_tidptr=0x555571745650) = 5943 [pid 5943] set_robust_list(0x555571745660, 24) = 0 [pid 5943] chdir("./47") = 0 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5943] setpgid(0, 0) = 0 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5943] write(3, "1000", 4) = 4 [pid 5943] close(3) = 0 [pid 5943] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5943] write(1, "executing program\n", 18) = 18 [pid 5943] memfd_create("syzkaller", 0) = 3 [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5943] munmap(0x7f7f07800000, 138412032) = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5943] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5943] close(3) = 0 [pid 5943] close(4) = 0 [pid 5943] mkdir("./file0", 0777) = 0 [pid 5943] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5943] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5943] chdir("./file0") = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 246.441736][ T5943] loop5: detected capacity change from 0 to 32768 [pid 5943] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5943] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5943] exit_group(0) = ? [pid 5943] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 246.506605][ T114] blkno = 5002c, nblocks = 1 [ 246.511266][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 246.511266][ T114] [ 246.522173][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./47/binderfs") = 0 [ 246.625392][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./47/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./47") = 0 [pid 5853] mkdir("./48", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5944 attached , child_tidptr=0x555571745650) = 5944 [pid 5944] set_robust_list(0x555571745660, 24) = 0 [pid 5944] chdir("./48") = 0 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5944] setpgid(0, 0) = 0 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5944] write(3, "1000", 4) = 4 [pid 5944] close(3) = 0 [pid 5944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5944] write(1, "executing program\n", 18executing program ) = 18 [pid 5944] memfd_create("syzkaller", 0) = 3 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5944] munmap(0x7f7f07800000, 138412032) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5944] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5944] close(3) = 0 [pid 5944] close(4) = 0 [pid 5944] mkdir("./file0", 0777) = 0 [pid 5944] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5944] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 247.492134][ T5944] loop5: detected capacity change from 0 to 32768 [pid 5944] chdir("./file0") = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5944] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5944] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5944] exit_group(0) = ? [pid 5944] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5944, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 247.574361][ T113] blkno = 5002c, nblocks = 1 [ 247.579022][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 247.579022][ T113] [ 247.590667][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./48/binderfs") = 0 [ 247.702763][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./48/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./48") = 0 [pid 5853] mkdir("./49", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5945 attached <unfinished ...> [pid 5945] set_robust_list(0x555571745660, 24 <unfinished ...> [pid 5853] <... clone resumed>, child_tidptr=0x555571745650) = 5945 [pid 5945] <... set_robust_list resumed>) = 0 [pid 5945] chdir("./49") = 0 [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5945] setpgid(0, 0) = 0 [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5945] write(3, "1000", 4) = 4 [pid 5945] close(3) = 0 [pid 5945] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5945] write(1, "executing program\n", 18) = 18 [pid 5945] memfd_create("syzkaller", 0) = 3 [pid 5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5945] munmap(0x7f7f07800000, 138412032) = 0 [pid 5945] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5945] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5945] close(3) = 0 [pid 5945] close(4) = 0 [pid 5945] mkdir("./file0", 0777) = 0 [pid 5945] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5945] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5945] chdir("./file0") = 0 [pid 5945] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5945] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 248.544977][ T5945] loop5: detected capacity change from 0 to 32768 [pid 5945] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5945] exit_group(0) = ? [pid 5945] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5945, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 248.594510][ T113] blkno = 5002c, nblocks = 1 [ 248.599669][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 248.599669][ T113] [ 248.610539][ T113] ERROR: (device loop5): remounting filesystem as read-only [ 248.619333][ T5945] JFS: metapage_get_blocks failed [pid 5853] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./49/binderfs") = 0 [pid 5853] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./49/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./49") = 0 [pid 5853] mkdir("./50", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5948 attached , child_tidptr=0x555571745650) = 5948 [pid 5948] set_robust_list(0x555571745660, 24) = 0 [pid 5948] chdir("./50") = 0 [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5948] setpgid(0, 0) = 0 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5948] write(3, "1000", 4) = 4 [pid 5948] close(3) = 0 [pid 5948] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5948] write(1, "executing program\n", 18) = 18 [pid 5948] memfd_create("syzkaller", 0) = 3 [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5948] munmap(0x7f7f07800000, 138412032) = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5948] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5948] close(3) = 0 [pid 5948] close(4) = 0 [pid 5948] mkdir("./file0", 0777) = 0 [pid 5948] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5948] chdir("./file0") = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5948] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 249.211074][ T5948] loop5: detected capacity change from 0 to 32768 [pid 5948] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5948] exit_group(0) = ? [pid 5948] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5948, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5853] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 249.272038][ T114] blkno = 5002c, nblocks = 1 [ 249.277731][ T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 249.277731][ T114] [ 249.288554][ T114] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./50/binderfs") = 0 [ 249.366123][ T5853] JFS: metapage_get_blocks failed [pid 5853] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5853] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5853] rmdir("./50/file0") = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5853] rmdir("./50") = 0 [pid 5853] mkdir("./51", 0777) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5853] close(3) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5951 attached , child_tidptr=0x555571745650) = 5951 [pid 5951] set_robust_list(0x555571745660, 24) = 0 [pid 5951] chdir("./51") = 0 [pid 5951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5951] setpgid(0, 0) = 0 [pid 5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5951] write(3, "1000", 4) = 4 [pid 5951] close(3) = 0 [pid 5951] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5951] write(1, "executing program\n", 18executing program ) = 18 [pid 5951] memfd_create("syzkaller", 0) = 3 [pid 5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [ 249.993204][ T5852] jfs_flush_journal: synclist not empty [ 249.998835][ T5852] metapage: ffff888077ee8ba0: 00001000 00000000 00003a90 00000000 [ 250.007319][ T5852] metapage: ffff888077ee8bb0: 77ee8ca8 ffff8880 277c3a28 ffff8880 [ 250.015477][ T5852] metapage: ffff888077ee8bc0: 00000004 00000000 00000000 00000000 [ 250.023777][ T5852] metapage: ffff888077ee8bd0: 730b2000 ffff8880 0005002c 00000000 [ 250.031735][ T5852] metapage: ffff888077ee8be0: 00000000 dead4ead ffffffff 00000000 [ 250.039855][ T5852] metapage: ffff888077ee8bf0: ffffffff ffffffff 9a931580 ffffffff [ 250.048182][ T5852] metapage: ffff888077ee8c00: 96ea4ad0 ffffffff 00000000 00000000 [ 250.056832][ T5852] metapage: ffff888077ee8c10: 8bac11a0 ffffffff 00000300 00000000 [ 250.065381][ T5852] metapage: ffff888077ee8c20: 77ee8c20 ffff8880 77ee8c20 ffff8880 [ 250.074138][ T5852] metapage: ffff888077ee8c30: 01cc2c80 ffffea00 750ba000 ffff8880 [ 250.082049][ T5852] metapage: ffff888077ee8c40: 00001000 0000424c 00000000 00000000 [ 250.090423][ T5852] metapage: ffff888077ee8c50: 277c3800 ffff8880 [ 250.096741][ T5852] page: ffffea0001cc2c80: 00fff4000000403c ffffea0001dc8cc8 [ 250.104751][ T5852] page: ffffea0001cc2c90: ffffea0000afbcc8 0000000000000000 [ 250.112090][ T5852] page: ffffea0001cc2ca0: 000000000005002c ffff888077ee8ba0 [ 250.119792][ T5852] page: ffffea0001cc2cb0: 00000001ffffffff ffff888140ad4000 [ 250.127534][ T5852] metapage: ffff888077ee8c98: 00001000 00000000 00003f68 00000000 [ 250.135736][ T5852] metapage: ffff888077ee8ca8: 277c3a28 ffff8880 77ee8bb0 ffff8880 [ 250.144022][ T5852] metapage: ffff888077ee8cb8: 00000004 00000000 00000000 00000000 [ 250.151904][ T5852] metapage: ffff888077ee8cc8: 77c4f000 ffff8880 0000001c 00000000 [ 250.160312][ T5852] metapage: ffff888077ee8cd8: 00000000 dead4ead ffffffff 00000000 [ 250.168615][ T5852] metapage: ffff888077ee8ce8: ffffffff ffffffff 9a931580 ffffffff [ 250.176838][ T5852] metapage: ffff888077ee8cf8: 96ea4ad0 ffffffff 00000000 00000000 [ 250.185875][ T5852] metapage: ffff888077ee8d08: 8bac11a0 ffffffff 00000300 00000000 [ 250.194036][ T5852] metapage: ffff888077ee8d18: 77ee8d18 ffff8880 77ee8d18 ffff8880 [ 250.202331][ T5852] metapage: ffff888077ee8d28: 01df13c0 ffffea00 750ba000 ffff8880 [ 250.210702][ T5852] metapage: ffff888077ee8d38: 00001000 0000424c 00000000 00000000 [ 250.218921][ T5852] metapage: ffff888077ee8d48: 277c3800 ffff8880 [ 250.225516][ T5852] page: ffffea0001df13c0: 00fff4800000423c ffffea0001df1388 [ 250.232844][ T5852] page: ffffea0001df13d0: ffffea0001dc8cc8 0000000000000000 [pid 5951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5951] munmap(0x7f7f07800000, 138412032) = 0 [pid 5951] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 250.240622][ T5852] page: ffffea0001df13e0: 000000000000001c ffff888077ee8c98 [ 250.248310][ T5852] page: ffffea0001df13f0: 00000001ffffffff ffff888140ad4000 [pid 5951] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5951] close(3) = 0 [pid 5951] close(4) = 0 [pid 5951] mkdir("./file0", 0777) = 0 [pid 5951] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5951] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5951] chdir("./file0") = 0 [pid 5951] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5951] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 250.297107][ T5951] loop5: detected capacity change from 0 to 32768 [pid 5951] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5951] exit_group(0) = ? [pid 5951] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5951, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5853] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5853] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 250.364156][ T113] blkno = 5002c, nblocks = 1 [ 250.369049][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 250.369049][ T113] [ 250.380150][ T113] ERROR: (device loop5): remounting filesystem as read-only [pid 5853] unlink("./51/binderfs") = 0 [ 250.452639][ T5853] JFS: metapage_get_blocks failed [ 251.633262][ T5850] jfs_flush_journal: synclist not empty [ 251.638864][ T5850] metapage: ffff8880291d42e8: 00001000 00000000 00003a90 00000000 [ 251.646830][ T5850] metapage: ffff8880291d42f8: 291d43f0 ffff8880 738fb228 ffff8880 [ 251.654743][ T5850] metapage: ffff8880291d4308: 00000004 00000000 00000000 00000000 [ 251.662642][ T5850] metapage: ffff8880291d4318: 34a3e000 ffff8880 0005002c 00000000 [ 251.670620][ T5850] metapage: ffff8880291d4328: 00000000 dead4ead ffffffff 00000000 [ 251.678541][ T5850] metapage: ffff8880291d4338: ffffffff ffffffff 9a931580 ffffffff [ 251.686484][ T5850] metapage: ffff8880291d4348: 96ea4ad0 ffffffff 00000000 00000000 [ 251.694361][ T5850] metapage: ffff8880291d4358: 8bac11a0 ffffffff 00000300 00000000 [ 251.702206][ T5850] metapage: ffff8880291d4368: 291d4368 ffff8880 291d4368 ffff8880 [ 251.710118][ T5850] metapage: ffff8880291d4378: 00d28f80 ffffea00 7bac0000 ffff8880 [ 251.718001][ T5850] metapage: ffff8880291d4388: 00001000 0000424c 00000000 00000000 [ 251.726189][ T5850] metapage: ffff8880291d4398: 738fb000 ffff8880 [ 251.733012][ T5850] page: ffffea0000d28f80: 00fff4000000403c ffffea0001dcd488 [ 251.740397][ T5850] page: ffffea0000d28f90: ffffea0000969a88 0000000000000000 [ 251.747815][ T5850] page: ffffea0000d28fa0: 000000000005002c ffff8880291d42e8 [ 251.755628][ T5850] page: ffffea0000d28fb0: 00000001ffffffff ffff888140ad4000 [ 251.762987][ T5850] metapage: ffff8880291d43e0: 00001000 00000000 00003f68 00000000 [ 251.771034][ T5850] metapage: ffff8880291d43f0: 738fb228 ffff8880 291d42f8 ffff8880 [ 251.779009][ T5850] metapage: ffff8880291d4400: 00000004 00000000 00000000 00000000 [ 251.787021][ T5850] metapage: ffff8880291d4410: 77f18000 ffff8880 0000001c 00000000 [ 251.794960][ T5850] metapage: ffff8880291d4420: 00000000 dead4ead ffffffff 00000000 [ 251.802826][ T5850] metapage: ffff8880291d4430: ffffffff ffffffff 9a931580 ffffffff [ 251.810777][ T5850] metapage: ffff8880291d4440: 96ea4ad0 ffffffff 00000000 00000000 [ 251.818680][ T5850] metapage: ffff8880291d4450: 8bac11a0 ffffffff 00000300 00000000 [ 251.826595][ T5850] metapage: ffff8880291d4460: 291d4460 ffff8880 291d4460 ffff8880 [ 251.834921][ T5850] metapage: ffff8880291d4470: 01dfc600 ffffea00 7bac0000 ffff8880 [ 251.842757][ T5850] metapage: ffff8880291d4480: 00001000 0000424c 00000000 00000000 [ 251.850724][ T5850] metapage: ffff8880291d4490: 738fb000 ffff8880 [ 251.857046][ T5850] page: ffffea0001dfc600: 00fff4800000423c ffffea0000935188 [ 251.864466][ T5850] page: ffffea0001dfc610: ffffea0000a523c8 0000000000000000 [ 251.871814][ T5850] page: ffffea0001dfc620: 000000000000001c ffff8880291d43e0 [ 251.879246][ T5850] page: ffffea0001dfc630: 00000001ffffffff ffff888140ad4000 [ 261.683255][ T5849] jfs_flush_journal: synclist not empty [ 261.688858][ T5849] metapage: ffff88807c7289b0: 00001000 00000000 00003a90 00000000 [ 261.696883][ T5849] metapage: ffff88807c7289c0: 7c728ab8 ffff8880 29f83228 ffff8880 [ 261.704781][ T5849] metapage: ffff88807c7289d0: 00000004 00000000 00000000 00000000 [ 261.712666][ T5849] metapage: ffff88807c7289e0: 7ed55000 ffff8880 0005002c 00000000 [ 261.720974][ T5849] metapage: ffff88807c7289f0: 00000000 dead4ead ffffffff 00000000 [ 261.728971][ T5849] metapage: ffff88807c728a00: ffffffff ffffffff 9a931580 ffffffff [ 261.737000][ T5849] metapage: ffff88807c728a10: 96ea4ad0 ffffffff 00000000 00000000 [ 261.744960][ T5849] metapage: ffff88807c728a20: 8bac11a0 ffffffff 00000300 00000000 [ 261.752799][ T5849] metapage: ffff88807c728a30: 7c728a30 ffff8880 7c728a30 ffff8880 [ 261.760775][ T5849] metapage: ffff88807c728a40: 01fb5540 ffffea00 334e8000 ffff8880 [ 261.768697][ T5849] metapage: ffff88807c728a50: 00001000 0000424c 00000000 00000000 [ 261.776624][ T5849] metapage: ffff88807c728a60: 29f83000 ffff8880 [ 261.782905][ T5849] page: ffffea0001fb5540: 00fff4000000403c ffffea0000cd9988 [ 261.790297][ T5849] page: ffffea0001fb5550: ffffea000092c888 0000000000000000 [ 261.797712][ T5849] page: ffffea0001fb5560: 000000000005002c ffff88807c7289b0 [ 261.805120][ T5849] page: ffffea0001fb5570: 00000001ffffffff ffff888140ad4000 [ 261.812477][ T5849] metapage: ffff88807c728aa8: 00001000 00000000 00003f68 00000000 [ 261.820461][ T5849] metapage: ffff88807c728ab8: 29f83228 ffff8880 7c7289c0 ffff8880 [ 261.828384][ T5849] metapage: ffff88807c728ac8: 00000004 00000000 00000000 00000000 [ 261.836403][ T5849] metapage: ffff88807c728ad8: 2a04f000 ffff8880 0000001c 00000000 [ 261.844296][ T5849] metapage: ffff88807c728ae8: 00000000 dead4ead ffffffff 00000000 [ 261.852253][ T5849] metapage: ffff88807c728af8: ffffffff ffffffff 9a931580 ffffffff [ 261.860202][ T5849] metapage: ffff88807c728b08: 96ea4ad0 ffffffff 00000000 00000000 [ 261.868128][ T5849] metapage: ffff88807c728b18: 8bac11a0 ffffffff 00000300 00000000 [ 261.876042][ T5849] metapage: ffff88807c728b28: 7c728b28 ffff8880 7c728b28 ffff8880 [ 261.884027][ T5849] metapage: ffff88807c728b38: 00a813c0 ffffea00 334e8000 ffff8880 [ 261.891850][ T5849] metapage: ffff88807c728b48: 00001000 0000424c 00000000 00000000 [ 261.900013][ T5849] metapage: ffff88807c728b58: 29f83000 ffff8880 [ 261.906433][ T5849] page: ffffea0000a813c0: 00fff4800000423c ffffea0000a81308 [ 261.913940][ T5849] page: ffffea0000a813d0: ffffea0000cd9988 0000000000000000 [ 261.921279][ T5849] page: ffffea0000a813e0: 000000000000001c ffff88807c728aa8 [ 261.928672][ T5849] page: ffffea0000a813f0: 00000001ffffffff ffff888140ad4000 [ 264.983326][ T5848] jfs_flush_journal: synclist not empty [ 264.988917][ T5848] metapage: ffff888077ee82e8: 00001000 00000000 00003a90 00000000 [ 264.996866][ T5848] metapage: ffff888077ee82f8: 77ee8200 ffff8880 33012228 ffff8880 [ 265.005245][ T5848] metapage: ffff888077ee8308: 00000004 00000000 00000000 00000000 [ 265.013344][ T5848] metapage: ffff888077ee8318: 34d54000 ffff8880 0005002c 00000000 [ 265.021308][ T5848] metapage: ffff888077ee8328: 00000000 dead4ead ffffffff 00000000 [ 265.029373][ T5848] metapage: ffff888077ee8338: ffffffff ffffffff 9a931580 ffffffff [ 265.037270][ T5848] metapage: ffff888077ee8348: 96ea4ad0 ffffffff 00000000 00000000 [ 265.045240][ T5848] metapage: ffff888077ee8358: 8bac11a0 ffffffff 00000300 00000000 [ 265.053183][ T5848] metapage: ffff888077ee8368: 77ee8368 ffff8880 77ee8368 ffff8880 [ 265.061045][ T5848] metapage: ffff888077ee8378: 00d35500 ffffea00 74ff4000 ffff8880 [ 265.068981][ T5848] metapage: ffff888077ee8388: 00001000 0000424c 00000000 00000000 [ 265.076907][ T5848] metapage: ffff888077ee8398: 33012000 ffff8880 [ 265.083235][ T5848] page: ffffea0000d35500: 00fff4000000403c ffffea0000afacc8 [ 265.090577][ T5848] page: ffffea0000d35510: ffffea0000bf4408 0000000000000000 [ 265.097976][ T5848] page: ffffea0000d35520: 000000000005002c ffff888077ee82e8 [ 265.105441][ T5848] page: ffffea0000d35530: 00000001ffffffff ffff888140ad4000 [ 265.112762][ T5848] metapage: ffff888077ee81f0: 00001000 00000000 00003f68 00000000 [ 265.120820][ T5848] metapage: ffff888077ee8200: 33012228 ffff8880 77ee82f8 ffff8880 [ 265.128725][ T5848] metapage: ffff888077ee8210: 00000004 00000000 00000000 00000000 [ 265.136704][ T5848] metapage: ffff888077ee8220: 2fc3b000 ffff8880 0000001c 00000000 [ 265.144605][ T5848] metapage: ffff888077ee8230: 00000000 dead4ead ffffffff 00000000 [ 265.152505][ T5848] metapage: ffff888077ee8240: ffffffff ffffffff 9a931580 ffffffff [ 265.160458][ T5848] metapage: ffff888077ee8250: 96ea4ad0 ffffffff 00000000 00000000 [ 265.168393][ T5848] metapage: ffff888077ee8260: 8bac11a0 ffffffff 00000300 00000000 [ 265.176317][ T5848] metapage: ffff888077ee8270: 77ee8270 ffff8880 77ee8270 ffff8880 [ 265.184214][ T5848] metapage: ffff888077ee8280: 00bf0ec0 ffffea00 74ff4000 ffff8880 [ 265.192062][ T5848] metapage: ffff888077ee8290: 00001000 0000424c 00000000 00000000 [ 265.199952][ T5848] metapage: ffff888077ee82a0: 33012000 ffff8880 [ 265.206290][ T5848] page: ffffea0000bf0ec0: 00fff4800000423c ffffea0000ca93c8 [ 265.213654][ T5848] page: ffffea0000bf0ed0: ffffea0000b067c8 0000000000000000 [ 265.220974][ T5848] page: ffffea0000bf0ee0: 000000000000001c ffff888077ee81f0 [ 265.228340][ T5848] page: ffffea0000bf0ef0: 00000001ffffffff ffff888140ad4000 [ 266.413301][ T5851] jfs_flush_journal: synclist not empty [ 266.418932][ T5851] metapage: ffff888077ee88b8: 00001000 00000000 00003a90 00000000 [ 266.426887][ T5851] metapage: ffff888077ee88c8: 77ee86d8 ffff8880 750a7a28 ffff8880 [ 266.434769][ T5851] metapage: ffff888077ee88d8: 00000004 00000000 00000000 00000000 [ 266.443066][ T5851] metapage: ffff888077ee88e8: 7157f000 ffff8880 0005002c 00000000 [ 266.451004][ T5851] metapage: ffff888077ee88f8: 00000000 dead4ead ffffffff 00000000 [ 266.458973][ T5851] metapage: ffff888077ee8908: ffffffff ffffffff 9a931580 ffffffff [ 266.466861][ T5851] metapage: ffff888077ee8918: 96ea4ad0 ffffffff 00000000 00000000 [ 266.474754][ T5851] metapage: ffff888077ee8928: 8bac11a0 ffffffff 00000300 00000000 [ 266.482625][ T5851] metapage: ffff888077ee8938: 77ee8938 ffff8880 77ee8938 ffff8880 [ 266.490555][ T5851] metapage: ffff888077ee8948: 01c55fc0 ffffea00 74cac000 ffff8880 [ 266.498480][ T5851] metapage: ffff888077ee8958: 00001000 0000424c 00000000 00000000 [ 266.506500][ T5851] metapage: ffff888077ee8968: 750a7800 ffff8880 [ 266.512776][ T5851] page: ffffea0001c55fc0: 00fff4000000403c ffffea0001c54808 [ 266.520154][ T5851] page: ffffea0001c55fd0: ffffea0001bb3548 0000000000000000 [ 266.527584][ T5851] page: ffffea0001c55fe0: 000000000005002c ffff888077ee88b8 [ 266.534967][ T5851] page: ffffea0001c55ff0: 00000001ffffffff ffff888140ad4000 [ 266.542292][ T5851] metapage: ffff888077ee86c8: 00001000 00000000 00003f68 00000000 [ 266.550251][ T5851] metapage: ffff888077ee86d8: 750a7a28 ffff8880 77ee88c8 ffff8880 [ 266.558130][ T5851] metapage: ffff888077ee86e8: 00000004 00000000 00000000 00000000 [ 266.566052][ T5851] metapage: ffff888077ee86f8: 33b71000 ffff8880 0000001c 00000000 [ 266.574024][ T5851] metapage: ffff888077ee8708: 00000000 dead4ead ffffffff 00000000 [ 266.581975][ T5851] metapage: ffff888077ee8718: ffffffff ffffffff 9a931580 ffffffff [ 266.589914][ T5851] metapage: ffff888077ee8728: 96ea4ad0 ffffffff 00000000 00000000 [ 266.597842][ T5851] metapage: ffff888077ee8738: 8bac11a0 ffffffff 00000300 00000000 [ 266.605768][ T5851] metapage: ffff888077ee8748: 77ee8748 ffff8880 77ee8748 ffff8880 [ 266.613668][ T5851] metapage: ffff888077ee8758: 00cedc40 ffffea00 74cac000 ffff8880 [ 266.621491][ T5851] metapage: ffff888077ee8768: 00001000 0000424c 00000000 00000000 [ 266.629411][ T5851] metapage: ffff888077ee8778: 750a7800 ffff8880 [ 266.635717][ T5851] page: ffffea0000cedc40: 00fff4800000423c ffffea0000be6088 [ 266.643386][ T5851] page: ffffea0000cedc50: ffffea0001c54808 0000000000000000 [ 266.650730][ T5851] page: ffffea0000cedc60: 000000000000001c ffff888077ee86c8 [ 266.658141][ T5851] page: ffffea0000cedc70: 00000001ffffffff ffff888140ad4000 [ 302.263189][ T5852] jfs_flush_journal: synclist not empty [ 302.268919][ T5852] metapage: ffff888077ee8ba0: 00001000 00000000 00003a90 00000000 [ 302.276840][ T5852] metapage: ffff888077ee8bb0: 77ee8ca8 ffff8880 277c3a28 ffff8880 [ 302.284748][ T5852] metapage: ffff888077ee8bc0: 00000004 00000000 00000000 00000000 [ 302.292569][ T5852] metapage: ffff888077ee8bd0: 730b2000 ffff8880 0005002c 00000000 [ 302.300450][ T5852] metapage: ffff888077ee8be0: 00000000 dead4ead ffffffff 00000000 [ 302.308368][ T5852] metapage: ffff888077ee8bf0: ffffffff ffffffff 9a931580 ffffffff [ 302.316249][ T5852] metapage: ffff888077ee8c00: 96ea4ad0 ffffffff 00000000 00000000 [ 302.324182][ T5852] metapage: ffff888077ee8c10: 8bac11a0 ffffffff 00000300 00000000 [ 302.332131][ T5852] metapage: ffff888077ee8c20: 77ee8c20 ffff8880 77ee8c20 ffff8880 [ 302.340025][ T5852] metapage: ffff888077ee8c30: 01cc2c80 ffffea00 750ba000 ffff8880 [ 302.347950][ T5852] metapage: ffff888077ee8c40: 00001000 0000424c 00000000 00000000 [ 302.355873][ T5852] metapage: ffff888077ee8c50: 277c3800 ffff8880 [ 302.362253][ T5852] page: ffffea0001cc2c80: 00fff4000000403c ffffea0001df13c8 [ 302.369632][ T5852] page: ffffea0001cc2c90: ffffea0000afbcc8 0000000000000000 [ 302.376997][ T5852] page: ffffea0001cc2ca0: 000000000005002c ffff888077ee8ba0 [ 302.384455][ T5852] page: ffffea0001cc2cb0: 00000001ffffffff ffff888140ad4000 [ 302.391797][ T5852] metapage: ffff888077ee8c98: 00001000 00000000 00003f68 00000000 [ 302.399787][ T5852] metapage: ffff888077ee8ca8: 277c3a28 ffff8880 77ee8bb0 ffff8880 [ 302.407718][ T5852] metapage: ffff888077ee8cb8: 00000004 00000000 00000000 00000000 [ 302.415619][ T5852] metapage: ffff888077ee8cc8: 77c4f000 ffff8880 0000001c 00000000 [ 302.423537][ T5852] metapage: ffff888077ee8cd8: 00000000 dead4ead ffffffff 00000000 [ 302.431359][ T5852] metapage: ffff888077ee8ce8: ffffffff ffffffff 9a931580 ffffffff [ 302.439352][ T5852] metapage: ffff888077ee8cf8: 96ea4ad0 ffffffff 00000000 00000000 [ 302.447417][ T5852] metapage: ffff888077ee8d08: 8bac11a0 ffffffff 00000300 00000000 [ 302.455308][ T5852] metapage: ffff888077ee8d18: 77ee8d18 ffff8880 77ee8d18 ffff8880 [ 302.463752][ T5852] metapage: ffff888077ee8d28: 01df13c0 ffffea00 750ba000 ffff8880 [ 302.471575][ T5852] metapage: ffff888077ee8d38: 00001000 0000424c 00000000 00000000 [ 302.479721][ T5852] metapage: ffff888077ee8d48: 277c3800 ffff8880 [ 302.486056][ T5852] page: ffffea0001df13c0: 00fff4800000423c ffffea0001c1d148 [ 302.493450][ T5852] page: ffffea0001df13d0: ffffea0001cc2c88 0000000000000000 [ 302.500785][ T5852] page: ffffea0001df13e0: 000000000000001c ffff888077ee8c98 [pid 5853] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5852] <... umount2 resumed>) = 0 [pid 5853] <... umount2 resumed>) = 0 [pid 5852] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./0/file0", <unfinished ...> [pid 5853] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./51/file0", <unfinished ...> [pid 5852] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5852] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5853] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5853] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...> [pid 5852] <... openat resumed>) = 4 [pid 5853] <... openat resumed>) = 4 [pid 5852] newfstatat(4, "", <unfinished ...> [pid 5853] newfstatat(4, "", <unfinished ...> [pid 5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 302.508285][ T5852] page: ffffea0001df13f0: 00000001ffffffff ffff888140ad4000 [pid 5853] getdents64(4, <unfinished ...> [pid 5852] getdents64(4, <unfinished ...> [pid 5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5852] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(4, <unfinished ...> [pid 5852] getdents64(4, <unfinished ...> [pid 5853] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5852] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5853] close(4) = 0 [pid 5852] close(4 <unfinished ...> [pid 5853] rmdir("./51/file0" <unfinished ...> [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./0/file0" <unfinished ...> [pid 5853] <... rmdir resumed>) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5853] rmdir("./51" <unfinished ...> [pid 5852] getdents64(3, <unfinished ...> [pid 5853] <... rmdir resumed>) = 0 [pid 5852] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5853] mkdir("./52", 0777 <unfinished ...> [pid 5852] close(3 <unfinished ...> [pid 5853] <... mkdir resumed>) = 0 [pid 5852] <... close resumed>) = 0 [pid 5852] rmdir("./0" <unfinished ...> [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5853] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] <... rmdir resumed>) = 0 [pid 5853] close(3 <unfinished ...> [pid 5852] mkdir("./1", 0777) = 0 [pid 5852] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5852] ioctl(3, LOOP_CLR_FD) = 0 [pid 5852] close(3 <unfinished ...> [pid 5853] <... close resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5956 ./strace-static-x86_64: Process 5956 attached [pid 5956] set_robust_list(0x555571745660, 24) = 0 [pid 5956] chdir("./52") = 0 [pid 5956] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 5956] setpgid(0, 0) = 0 [pid 5956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5956] write(3, "1000", 4) = 4 [pid 5956] close(3) = 0 [pid 5956] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5956] write(1, "executing program\n", 18) = 18 [pid 5956] memfd_create("syzkaller", 0) = 3 [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5852] <... close resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5957 attached , child_tidptr=0x555571745650) = 5957 [pid 5957] set_robust_list(0x555571745660, 24) = 0 [pid 5957] chdir("./1") = 0 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5957] setpgid(0, 0) = 0 [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5957] write(3, "1000", 4) = 4 [pid 5957] close(3) = 0 [pid 5957] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5957] write(1, "executing program\n", 18executing program ) = 18 [pid 5957] memfd_create("syzkaller", 0 <unfinished ...> [pid 5956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5957] <... memfd_create resumed>) = 3 [pid 5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...> [pid 5956] <... write resumed>) = 16777216 [pid 5956] munmap(0x7f7f07800000, 138412032) = 0 [pid 5956] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5956] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5956] close(3) = 0 [pid 5956] close(4) = 0 [pid 5956] mkdir("./file0", 0777) = 0 [ 303.031276][ T5956] loop5: detected capacity change from 0 to 32768 [pid 5956] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5956] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5956] chdir("./file0") = 0 [pid 5956] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5956] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5956] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0 [pid 5956] exit_group(0) = ? [pid 5956] +++ exited with 0 +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5956, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5853] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5853] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5853] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5853] unlink("./52/binderfs") = 0 [pid 5853] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5957] <... write resumed>) = 16777216 [pid 5957] munmap(0x7f7f07800000, 138412032) = 0 [pid 5957] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 303.115260][ T113] blkno = 5002c, nblocks = 1 [ 303.119944][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 303.119944][ T113] [ 303.140987][ T113] ERROR: (device loop5): remounting filesystem as read-only [ 303.149091][ T5853] JFS: metapage_get_blocks failed [pid 5957] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5957] close(3) = 0 [pid 5957] close(4) = 0 [pid 5957] mkdir("./file0", 0777) = 0 [pid 5957] mount("/dev/loop4", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5957] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5957] chdir("./file0") = 0 [pid 5957] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5957] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 303.178752][ T5957] loop4: detected capacity change from 0 to 32768 [pid 5957] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5957] exit_group(0) = ? [pid 5957] +++ exited with 0 +++ [pid 5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5852] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5852] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 303.236193][ T114] blkno = 5002c, nblocks = 1 [ 303.240858][ T114] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 303.240858][ T114] [ 303.251263][ T114] ERROR: (device loop4): remounting filesystem as read-only [ 303.259926][ T5957] JFS: metapage_get_blocks failed [pid 5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5852] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5852] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5852] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5852] unlink("./1/binderfs") = 0 [ 354.513247][ T5850] jfs_flush_journal: synclist not empty [ 354.518844][ T5850] metapage: ffff8880291d42e8: 00001000 00000000 00003a90 00000000 [ 354.526795][ T5850] metapage: ffff8880291d42f8: 291d43f0 ffff8880 738fb228 ffff8880 [ 354.534886][ T5850] metapage: ffff8880291d4308: 00000004 00000000 00000000 00000000 [ 354.542736][ T5850] metapage: ffff8880291d4318: 34a3e000 ffff8880 0005002c 00000000 [ 354.550670][ T5850] metapage: ffff8880291d4328: 00000000 dead4ead ffffffff 00000000 [ 354.558628][ T5850] metapage: ffff8880291d4338: ffffffff ffffffff 9a931580 ffffffff [ 354.566569][ T5850] metapage: ffff8880291d4348: 96ea4ad0 ffffffff 00000000 00000000 [ 354.574443][ T5850] metapage: ffff8880291d4358: 8bac11a0 ffffffff 00000300 00000000 [ 354.582269][ T5850] metapage: ffff8880291d4368: 291d4368 ffff8880 291d4368 ffff8880 [ 354.590205][ T5850] metapage: ffff8880291d4378: 00d28f80 ffffea00 7bac0000 ffff8880 [ 354.598068][ T5850] metapage: ffff8880291d4388: 00001000 0000424c 00000000 00000000 [ 354.605971][ T5850] metapage: ffff8880291d4398: 738fb000 ffff8880 [ 354.612333][ T5850] page: ffffea0000d28f80: 00fff4000000403c ffffea00009c7748 [ 354.619691][ T5850] page: ffffea0000d28f90: ffffea0000969a88 0000000000000000 [ 354.627052][ T5850] page: ffffea0000d28fa0: 000000000005002c ffff8880291d42e8 [ 354.634483][ T5850] page: ffffea0000d28fb0: 00000001ffffffff ffff888140ad4000 [ 354.641824][ T5850] metapage: ffff8880291d43e0: 00001000 00000000 00003f68 00000000 [ 354.649779][ T5850] metapage: ffff8880291d43f0: 738fb228 ffff8880 291d42f8 ffff8880 [ 354.657694][ T5850] metapage: ffff8880291d4400: 00000004 00000000 00000000 00000000 [ 354.665624][ T5850] metapage: ffff8880291d4410: 77f18000 ffff8880 0000001c 00000000 [ 354.673522][ T5850] metapage: ffff8880291d4420: 00000000 dead4ead ffffffff 00000000 [ 354.681389][ T5850] metapage: ffff8880291d4430: ffffffff ffffffff 9a931580 ffffffff [ 354.689364][ T5850] metapage: ffff8880291d4440: 96ea4ad0 ffffffff 00000000 00000000 [ 354.697269][ T5850] metapage: ffff8880291d4450: 8bac11a0 ffffffff 00000300 00000000 [ 354.705202][ T5850] metapage: ffff8880291d4460: 291d4460 ffff8880 291d4460 ffff8880 [ 354.713026][ T5850] metapage: ffff8880291d4470: 01dfc600 ffffea00 7bac0000 ffff8880 [ 354.720929][ T5850] metapage: ffff8880291d4480: 00001000 0000424c 00000000 00000000 [ 354.728822][ T5850] metapage: ffff8880291d4490: 738fb000 ffff8880 [ 354.735310][ T5850] page: ffffea0001dfc600: 00fff4800000423c ffffea0000a43848 [ 354.742636][ T5850] page: ffffea0001dfc610: ffffea0000a523c8 0000000000000000 [ 354.750072][ T5850] page: ffffea0001dfc620: 000000000000001c ffff8880291d43e0 [pid 5852] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5850] <... umount2 resumed>) = 0 [pid 5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 354.757444][ T5850] page: ffffea0001dfc630: 00000001ffffffff ffff888140ad4000 [pid 5850] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5850] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5850] close(4) = 0 [pid 5850] rmdir("./1/file0") = 0 [pid 5850] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5850] rmdir("./1") = 0 [pid 5850] mkdir("./2", 0777) = 0 [pid 5850] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5850] ioctl(3, LOOP_CLR_FD) = 0 [pid 5850] close(3) = 0 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5959 attached , child_tidptr=0x555571745650) = 5959 [pid 5959] set_robust_list(0x555571745660, 24) = 0 [pid 5959] chdir("./2") = 0 [pid 5959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5959] setpgid(0, 0) = 0 [pid 5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5959] write(3, "1000", 4) = 4 [pid 5959] close(3) = 0 [pid 5959] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5959] write(1, "executing program\n", 18executing program ) = 18 [pid 5959] memfd_create("syzkaller", 0) = 3 [pid 5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5959] munmap(0x7f7f07800000, 138412032) = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5959] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5959] close(3) = 0 [pid 5959] close(4) = 0 [pid 5959] mkdir("./file0", 0777) = 0 [pid 5959] mount("/dev/loop2", "./file0", "jfs", MS_LAZYTIME, "") = 0 [pid 5959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 355.369470][ T5959] loop2: detected capacity change from 0 to 32768 [pid 5959] chdir("./file0") = 0 [pid 5959] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5959] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5959] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5959] exit_group(0) = ? [pid 5959] +++ exited with 0 +++ [pid 5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5850] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 355.466123][ T113] blkno = 5002c, nblocks = 1 [ 355.470794][ T113] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 355.470794][ T113] [ 355.481577][ T113] ERROR: (device loop2): remounting filesystem as read-only [ 355.489973][ T5959] JFS: metapage_get_blocks failed [pid 5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5850] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [pid 5850] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5850] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5850] unlink("./2/binderfs") = 0 [ 406.783344][ T5849] jfs_flush_journal: synclist not empty [ 406.788952][ T5849] metapage: ffff88807c7289b0: 00001000 00000000 00003a90 00000000 [ 406.796911][ T5849] metapage: ffff88807c7289c0: 7c728ab8 ffff8880 29f83228 ffff8880 [ 406.804959][ T5849] metapage: ffff88807c7289d0: 00000004 00000000 00000000 00000000 [ 406.812818][ T5849] metapage: ffff88807c7289e0: 7ed55000 ffff8880 0005002c 00000000 [ 406.820726][ T5849] metapage: ffff88807c7289f0: 00000000 dead4ead ffffffff 00000000 [ 406.828633][ T5849] metapage: ffff88807c728a00: ffffffff ffffffff 9a931580 ffffffff [ 406.836516][ T5849] metapage: ffff88807c728a10: 96ea4ad0 ffffffff 00000000 00000000 [ 406.844384][ T5849] metapage: ffff88807c728a20: 8bac11a0 ffffffff 00000300 00000000 [ 406.852203][ T5849] metapage: ffff88807c728a30: 7c728a30 ffff8880 7c728a30 ffff8880 [ 406.860090][ T5849] metapage: ffff88807c728a40: 01fb5540 ffffea00 334e8000 ffff8880 [ 406.867975][ T5849] metapage: ffff88807c728a50: 00001000 0000424c 00000000 00000000 [ 406.875849][ T5849] metapage: ffff88807c728a60: 29f83000 ffff8880 [ 406.882124][ T5849] page: ffffea0001fb5540: 00fff4000000403c ffffea0000a813c8 [ 406.889676][ T5849] page: ffffea0001fb5550: ffffea000092c888 0000000000000000 [ 406.897033][ T5849] page: ffffea0001fb5560: 000000000005002c ffff88807c7289b0 [ 406.904383][ T5849] page: ffffea0001fb5570: 00000001ffffffff ffff888140ad4000 [ 406.911733][ T5849] metapage: ffff88807c728aa8: 00001000 00000000 00003f68 00000000 [ 406.919662][ T5849] metapage: ffff88807c728ab8: 29f83228 ffff8880 7c7289c0 ffff8880 [ 406.927578][ T5849] metapage: ffff88807c728ac8: 00000004 00000000 00000000 00000000 [ 406.935533][ T5849] metapage: ffff88807c728ad8: 2a04f000 ffff8880 0000001c 00000000 [ 406.943440][ T5849] metapage: ffff88807c728ae8: 00000000 dead4ead ffffffff 00000000 [ 406.951310][ T5849] metapage: ffff88807c728af8: ffffffff ffffffff 9a931580 ffffffff [ 406.959220][ T5849] metapage: ffff88807c728b08: 96ea4ad0 ffffffff 00000000 00000000 [ 406.967135][ T5849] metapage: ffff88807c728b18: 8bac11a0 ffffffff 00000300 00000000 [ 406.975027][ T5849] metapage: ffff88807c728b28: 7c728b28 ffff8880 7c728b28 ffff8880 [ 406.982870][ T5849] metapage: ffff88807c728b38: 00a813c0 ffffea00 334e8000 ffff8880 [ 406.990769][ T5849] metapage: ffff88807c728b48: 00001000 0000424c 00000000 00000000 [ 406.998780][ T5849] metapage: ffff88807c728b58: 29f83000 ffff8880 [ 407.005132][ T5849] page: ffffea0000a813c0: 00fff4800000423c ffffea0000c29c88 [ 407.012472][ T5849] page: ffffea0000a813d0: ffffea0001fb5548 0000000000000000 [ 407.019858][ T5849] page: ffffea0000a813e0: 000000000000001c ffff88807c728aa8 [ 407.027245][ T5849] page: ffffea0000a813f0: 00000001ffffffff ffff888140ad4000 [pid 5850] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...> [pid 5849] <... umount2 resumed>) = 0 [pid 5849] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48 [pid 5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0 [pid 5849] close(4) = 0 [pid 5849] rmdir("./9/file0") = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0 [pid 5849] close(3) = 0 [pid 5849] rmdir("./9") = 0 [pid 5849] mkdir("./10", 0777) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5849] ioctl(3, LOOP_CLR_FD) = 0 [pid 5849] close(3) = 0 [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5968 attached , child_tidptr=0x555571745650) = 5968 [pid 5968] set_robust_list(0x555571745660, 24) = 0 [pid 5968] chdir("./10") = 0 [pid 5968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5968] setpgid(0, 0) = 0 [pid 5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5968] write(3, "1000", 4) = 4 [pid 5968] close(3) = 0 [pid 5968] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5968] write(1, "executing program\n", 18) = 18 [pid 5968] memfd_create("syzkaller", 0) = 3 [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000 [pid 5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5968] munmap(0x7f7f07800000, 138412032) = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5968] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5968] close(3) = 0 [pid 5968] close(4) = 0 [pid 5968] mkdir("./file0", 0777) = 0 [pid 5968] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "") = 0 [ 407.576898][ T5968] loop1: detected capacity change from 0 to 32768 [pid 5968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5968] chdir("./file0") = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5968] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [pid 5968] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument) [pid 5968] exit_group(0) = ? [pid 5968] +++ exited with 0 +++ [pid 5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5968, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5849] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5849] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112 [ 407.679287][ T113] blkno = 5002c, nblocks = 1 [ 407.684071][ T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 407.684071][ T113] [ 407.694659][ T113] ERROR: (device loop1): remounting filesystem as read-only [ 407.702528][ T5968] JFS: metapage_get_blocks failed [pid 5849] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5849] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5849] unlink("./10/binderfs") = 0 [ 429.373876][ T30] INFO: task syz-executor286:5851 blocked for more than 143 seconds. [ 429.382075][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 429.389878][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.398746][ T30] task:syz-executor286 state:D stack:25840 pid:5851 tgid:5851 ppid:5847 flags:0x00004002 [ 429.409091][ T30] Call Trace: [ 429.412397][ T30] <TASK> [ 429.415412][ T30] __schedule+0xe58/0x5ad0 [ 429.419987][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 429.425301][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 429.430576][ T30] ? __pfx___schedule+0x10/0x10 [ 429.435504][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.441271][ T30] ? schedule+0x298/0x350 [ 429.445693][ T30] ? __pfx_lock_release+0x10/0x10 [ 429.450791][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.456643][ T30] ? __mutex_trylock_common+0x78/0x250 [ 429.462186][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.467940][ T30] ? lock_acquire+0x2f/0xb0 [ 429.472485][ T30] ? schedule+0x1fd/0x350 [ 429.476915][ T30] schedule+0xe7/0x350 [ 429.481049][ T30] schedule_preempt_disabled+0x13/0x30 [ 429.486598][ T30] __mutex_lock+0x62b/0xa60 [ 429.491167][ T30] ? lmLogClose+0xc8/0x710 [ 429.495673][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 429.500800][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.506645][ T30] ? lmLogClose+0xc8/0x710 [ 429.511133][ T30] lmLogClose+0xc8/0x710 [ 429.515470][ T30] ? filemap_check_errors+0xa9/0x160 [ 429.520826][ T30] jfs_umount+0x2f0/0x440 [ 429.525284][ T30] jfs_put_super+0x88/0x1d0 [ 429.529847][ T30] ? __pfx_jfs_put_super+0x10/0x10 [ 429.535063][ T30] generic_shutdown_super+0x15f/0x3d0 [ 429.540494][ T30] kill_block_super+0x3b/0x90 [ 429.545285][ T30] deactivate_locked_super+0xc1/0x1a0 [ 429.550719][ T30] deactivate_super+0xde/0x100 [ 429.555559][ T30] cleanup_mnt+0x222/0x450 [ 429.560037][ T30] task_work_run+0x151/0x250 [ 429.564733][ T30] ? __pfx_task_work_run+0x10/0x10 [ 429.569888][ T30] ? putname+0x13c/0x180 [ 429.574224][ T30] ptrace_notify+0x10e/0x130 [ 429.578899][ T30] syscall_exit_to_user_mode_prepare+0x126/0x290 [ 429.585356][ T30] syscall_exit_to_user_mode+0x11/0x2a0 [ 429.590974][ T30] do_syscall_64+0xda/0x250 [ 429.595570][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.601529][ T30] RIP: 0033:0x7f7f0fe1d4b7 [ 429.606026][ T30] RSP: 002b:00007fff5f1bf788 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 429.614536][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7f0fe1d4b7 [ 429.622552][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5f1bf840 [ 429.630594][ T30] RBP: 00007fff5f1bf840 R08: 0000000000000000 R09: 0000000000000000 [ 429.638660][ T30] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007fff5f1c08a0 [ 429.646728][ T30] R13: 00005555717466c0 R14: 000000000000000d R15: 431bde82d7b634db [ 429.654799][ T30] </TASK> [ 429.657881][ T30] [ 429.657881][ T30] Showing all locks held in the system: [ 429.665677][ T30] 5 locks held by kworker/u8:0/11: [ 429.670811][ T30] #0: ffff8880b873ed18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 429.680844][ T30] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 429.692448][ T30] #2: ffff8880b872a898 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 429.701780][ T30] #3: ffffffff9aa8a618 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x149/0x4a0 [ 429.712389][ T30] #4: ffffffff8e07c888 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 429.722973][ T30] 1 lock held by khungtaskd/30: [ 429.727974][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 429.737957][ T30] 2 locks held by getty/5589: [ 429.742662][ T30] #0: ffff8880319660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 429.752559][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 429.763009][ T30] 2 locks held by syz-executor286/5848: [ 429.768645][ T30] #0: ffff888074ff40e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 429.779134][ T30] #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710 [ 429.788289][ T30] 2 locks held by syz-executor286/5849: [ 429.793899][ T30] #0: ffff888021ec80e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 429.804396][ T30] #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710 [ 429.813523][ T30] 2 locks held by syz-executor286/5850: [ 429.819094][ T30] #0: ffff88807f8120e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 429.829528][ T30] #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710 [ 429.838669][ T30] 2 locks held by syz-executor286/5851: [ 429.844301][ T30] #0: ffff888074cac0e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 429.854748][ T30] #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710 [ 429.863839][ T30] 2 locks held by syz-executor286/5852: [ 429.869416][ T30] #0: ffff88807baae0e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 429.879811][ T30] #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710 [ 429.889044][ T30] 2 locks held by syz-executor286/5853: [ 429.894829][ T30] #0: ffff888034a100e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 429.905370][ T30] #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710 [ 429.914465][ T30] [ 429.916807][ T30] ============================================= [ 429.916807][ T30] [ 429.925301][ T30] NMI backtrace for cpu 0 [ 429.929738][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 429.940273][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 429.950344][ T30] Call Trace: [ 429.953635][ T30] <TASK> [ 429.956580][ T30] dump_stack_lvl+0x116/0x1f0 [ 429.961309][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 429.966294][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 429.972316][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 429.978340][ T30] watchdog+0xf14/0x1240 [ 429.982628][ T30] ? __pfx_watchdog+0x10/0x10 [ 429.987343][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.992584][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.998259][ T30] ? __kthread_parkme+0x148/0x220 [ 430.003324][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.008986][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.013705][ T30] kthread+0x2c4/0x3a0 [ 430.017814][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.023046][ T30] ? __pfx_kthread+0x10/0x10 [ 430.027682][ T30] ret_from_fork+0x48/0x80 [ 430.032125][ T30] ? __pfx_kthread+0x10/0x10 [ 430.036754][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.041665][ T30] </TASK> [ 430.044814][ T30] Sending NMI from CPU 0 to CPUs 1: [ 430.050053][ C1] NMI backtrace for cpu 1 [ 430.050070][ C1] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 430.050112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.050134][ C1] Workqueue: events_unbound toggle_allocation_gate [ 430.050172][ C1] RIP: 0010:write_comp_data+0x42/0x90 [ 430.050215][ C1] Code: a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 1c 16 00 00 85 c0 74 4f 8b 82 f8 15 00 00 <83> f8 03 75 44 48 8b 82 00 16 00 00 8b 92 fc 15 00 00 48 8b 38 48 [ 430.050248][ C1] RSP: 0018:ffffc90000107920 EFLAGS: 00000246 [ 430.050275][ C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff8b277684 [ 430.050298][ C1] RDX: ffff88801d283c00 RSI: 0000000000000004 RDI: 0000000000000001 [ 430.050320][ C1] RBP: ffffffff8ccdc500 R08: 0000000000000001 R09: 0000000000000004 [ 430.050342][ C1] R10: 0000000000000008 R11: 0000000000000004 R12: 0000000000000008 [ 430.050364][ C1] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff8db0b160 [ 430.050389][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 430.050421][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.050447][ C1] CR2: 0000557a4bb13dd8 CR3: 000000000df7e000 CR4: 0000000000350ef0 [ 430.050470][ C1] Call Trace: [ 430.050479][ C1] <NMI> [ 430.050491][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 430.050539][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 430.050574][ C1] ? nmi_handle+0x1af/0x5d0 [ 430.050613][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.050650][ C1] ? write_comp_data+0x42/0x90 [ 430.050690][ C1] ? default_do_nmi+0x6a/0x160 [ 430.050730][ C1] ? exc_nmi+0x170/0x1e0 [ 430.050767][ C1] ? end_repeat_nmi+0xf/0x53 [ 430.050803][ C1] ? insn_get_immediate+0xec4/0x1dd0 [ 430.050855][ C1] ? write_comp_data+0x42/0x90 [ 430.050895][ C1] ? write_comp_data+0x42/0x90 [ 430.050936][ C1] ? write_comp_data+0x42/0x90 [ 430.050976][ C1] </NMI> [ 430.050987][ C1] <TASK> [ 430.050998][ C1] __sanitizer_cov_trace_switch+0x54/0x90 [ 430.051044][ C1] ? kmem_cache_alloc_bulk_noprof+0x16f/0xb10 [ 430.051081][ C1] insn_get_immediate+0xec4/0x1dd0 [ 430.051130][ C1] ? __asan_memset+0x23/0x50 [ 430.051182][ C1] ? kmem_cache_alloc_bulk_noprof+0x16f/0xb10 [ 430.051219][ C1] insn_decode+0x21d/0x320 [ 430.051268][ C1] arch_jump_entry_size+0xb3/0x150 [ 430.051321][ C1] ? __pfx_arch_jump_entry_size+0x10/0x10 [ 430.051380][ C1] ? kmem_cache_alloc_bulk_noprof+0x16f/0xb10 [ 430.051416][ C1] ? kmem_cache_alloc_bulk_noprof+0x17e/0xb10 [ 430.051452][ C1] ? kmem_cache_alloc_bulk_noprof+0x170/0xb10 [ 430.051491][ C1] ? kmem_cache_alloc_bulk_noprof+0x46d/0xb10 [ 430.051533][ C1] __jump_label_patch+0x85/0x400 [ 430.051588][ C1] arch_jump_label_transform_queue+0x7e/0x120 [ 430.051647][ C1] __jump_label_update+0x125/0x420 [ 430.051699][ C1] jump_label_update+0x1d7/0x400 [ 430.051747][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 430.051799][ C1] static_key_disable+0x1a/0x20 [ 430.051847][ C1] toggle_allocation_gate+0x147/0x260 [ 430.051883][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 430.051919][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.051955][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 430.052010][ C1] ? process_one_work+0x921/0x1ba0 [ 430.052049][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.052086][ C1] ? lock_acquire+0x2f/0xb0 [ 430.052123][ C1] ? process_one_work+0x921/0x1ba0 [ 430.052162][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.052200][ C1] process_one_work+0x9c8/0x1ba0 [ 430.052245][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 430.052287][ C1] ? __pfx_process_one_work+0x10/0x10 [ 430.052325][ C1] ? rcu_is_watching+0x12/0xc0 [ 430.052375][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.052416][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.052452][ C1] ? assign_work+0x1a0/0x250 [ 430.052489][ C1] worker_thread+0x6c8/0xf00 [ 430.052540][ C1] ? __pfx_worker_thread+0x10/0x10 [ 430.052579][ C1] kthread+0x2c4/0x3a0 [ 430.052625][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.052670][ C1] ? __pfx_kthread+0x10/0x10 [ 430.052718][ C1] ret_from_fork+0x48/0x80 [ 430.052753][ C1] ? __pfx_kthread+0x10/0x10 [ 430.052801][ C1] ret_from_fork_asm+0x1a/0x30 [ 430.052862][ C1] </TASK> [ 430.052875][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.822 msecs [ 430.053052][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 430.489257][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 430.499788][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.509884][ T30] Call Trace: [ 430.513178][ T30] <TASK> [ 430.516122][ T30] dump_stack_lvl+0x3d/0x1f0 [ 430.520767][ T30] panic+0x71d/0x800 [ 430.524710][ T30] ? __pfx_panic+0x10/0x10 [ 430.529180][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.534845][ T30] ? __irq_work_queue_local+0xdd/0x460 [ 430.540345][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.546378][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.552037][ T30] ? irq_work_queue+0x2a/0x80 [ 430.556784][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.562447][ T30] ? watchdog+0xd7e/0x1240 [ 430.566899][ T30] ? watchdog+0xd71/0x1240 [ 430.571354][ T30] watchdog+0xd8f/0x1240 [ 430.575640][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.580350][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.585589][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.591248][ T30] ? __kthread_parkme+0x148/0x220 [ 430.596319][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.601980][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.606692][ T30] kthread+0x2c4/0x3a0 [ 430.610799][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.616034][ T30] ? __pfx_kthread+0x10/0x10 [ 430.620664][ T30] ret_from_fork+0x48/0x80 [ 430.625105][ T30] ? __pfx_kthread+0x10/0x10 [ 430.629732][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.634557][ T30] </TASK> [ 430.637822][ T30] Kernel Offset: disabled [ 430.642149][ T30] Rebooting in 86400 seconds..