./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor301052098 <...> Warning: Permanently added '10.128.10.35' (ECDSA) to the list of known hosts. execve("./syz-executor301052098", ["./syz-executor301052098"], 0x7ffe6f5a23b0 /* 10 vars */) = 0 brk(NULL) = 0x55555576d000 brk(0x55555576dd40) = 0x55555576dd40 arch_prctl(ARCH_SET_FS, 0x55555576d400) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x55555576d6d0) = 3615 set_robust_list(0x55555576d6e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f44138fe970, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f44138fdec0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f44138fea10, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f44138fdec0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor301052098", 4096) = 27 brk(0x55555578ed40) = 0x55555578ed40 brk(0x55555578f000) = 0x55555578f000 mprotect(0x7f44139c0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=680, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3615}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1c\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x25\x00\x00\x00\x48\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 680 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3615}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 access("/proc/net", R_OK) = 0 access("/proc/net/unix", R_OK) = 0 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3615}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3615}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3615}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3615}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3615}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f44138f82d0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f44138fdec0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f44138f82d0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f44138fdec0}, NULL, 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555576d6d0) = 3617 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555576d6d0) = 3618 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555576d6d0) = 3619 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555576d6d0) = 3620 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3618 attached [pid 3618] set_robust_list(0x55555576d6e0, 24 [pid 3615] <... clone resumed>, child_tidptr=0x55555576d6d0) = 3621 [pid 3615] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3618] <... set_robust_list resumed>) = 0 [pid 3618] getpid() = 3618 [pid 3618] mkdir("./syzkaller.Rw3HcN", 0700) = 0 [pid 3615] <... clone resumed>, child_tidptr=0x55555576d6d0) = 3623 ./strace-static-x86_64: Process 3619 attached [pid 3619] set_robust_list(0x55555576d6e0, 24) = 0 [pid 3619] getpid() = 3619 [pid 3619] mkdir("./syzkaller.UWAwgS", 0700) = 0 ./strace-static-x86_64: Process 3620 attached ./strace-static-x86_64: Process 3617 attached [pid 3620] set_robust_list(0x55555576d6e0, 24 [pid 3617] set_robust_list(0x55555576d6e0, 24 [pid 3620] <... set_robust_list resumed>) = 0 [pid 3617] <... set_robust_list resumed>) = 0 [pid 3620] getpid( [pid 3618] chmod("./syzkaller.Rw3HcN", 0777 [pid 3620] <... getpid resumed>) = 3620 [pid 3617] getpid(./strace-static-x86_64: Process 3621 attached [pid 3620] mkdir("./syzkaller.FHyqQT", 0700 [pid 3617] <... getpid resumed>) = 3617 ./strace-static-x86_64: Process 3623 attached [pid 3618] <... chmod resumed>) = 0 [pid 3618] chdir("./syzkaller.Rw3HcN" [pid 3620] <... mkdir resumed>) = 0 [pid 3617] mkdir("./syzkaller.TwsqMH", 0700 [pid 3621] set_robust_list(0x55555576d6e0, 24 [pid 3620] chmod("./syzkaller.FHyqQT", 0777 [pid 3623] set_robust_list(0x55555576d6e0, 24 [pid 3618] <... chdir resumed>) = 0 [pid 3618] mkdir("./0", 0777 [pid 3617] <... mkdir resumed>) = 0 [pid 3620] <... chmod resumed>) = 0 [pid 3621] <... set_robust_list resumed>) = 0 [pid 3617] chmod("./syzkaller.TwsqMH", 0777 [pid 3623] <... set_robust_list resumed>) = 0 [pid 3620] chdir("./syzkaller.FHyqQT" [pid 3619] chmod("./syzkaller.UWAwgS", 0777 [pid 3621] getpid( [pid 3620] <... chdir resumed>) = 0 [pid 3620] mkdir("./0", 0777 [pid 3618] <... mkdir resumed>) = 0 [pid 3617] <... chmod resumed>) = 0 [pid 3623] getpid( [pid 3618] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 3620] <... mkdir resumed>) = 0 [pid 3618] <... openat resumed>) = 3 [pid 3617] chdir("./syzkaller.TwsqMH" [pid 3619] <... chmod resumed>) = 0 [pid 3623] <... getpid resumed>) = 3623 [pid 3621] <... getpid resumed>) = 3621 [pid 3620] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3618] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3618] close(3) = 0 [pid 3618] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555576d6d0) = 3624 ./strace-static-x86_64: Process 3624 attached [pid 3624] set_robust_list(0x55555576d6e0, 24) = 0 [pid 3624] chdir("./0") = 0 [pid 3624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3624] setpgid(0, 0) = 0 [pid 3624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3624] write(3, "1000", 4) = 4 [pid 3624] close(3) = 0 [pid 3624] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3624] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f44138cd000 [pid 3624] mprotect(0x7f44138ce000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3624] clone(child_stack=0x7f44138ed2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3625], tls=0x7f44138ed700, child_tidptr=0x7f44138ed9d0) = 3625 [pid 3624] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3624] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=100000000}./strace-static-x86_64: Process 3625 attached [pid 3625] set_robust_list(0x7f44138ed9e0, 24) = 0 [pid 3625] memfd_create("syzkaller", 0) = 3 [pid 3625] ftruncate(3, 33077) = 0 [pid 3625] pwrite64(3, "\x60\x1c\x6d\x6b\x64\x6f\x73\x66\x90\xe6\xb1\x00\x08\x01\x01\x00\x04\x40\x00\x20\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x7d\x92\xd6\xcb\xe5\xd9\x15\x00\x7b\xf7\xd7\xef\xdf\x73\x0c\x3d\x67\xac\x38\x9a\x1c\xda\x44\x0a\x25\xe1\xc3\x0c\x10\xfc\xd6\xdc", 88, 0) = 88 [pid 3625] pwrite64(3, "\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x08\x00\x00\x07\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x00\x00\x00\x00\x00\x00\x41\x66\x00\x69\x00\x6c\x00\x65\x00\x30\x80\x0f\x00\xfc\x00\x01\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\xff\xdf\xf2\xff\x46\x49\x4c\x45\x30\x20\x20\x20\x20\x20\x20\x14\x00\x7f\x15\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x03\x00\x00\x00\x00\x00\x6f\x7a\x00\x69"..., 1079, 10240) = 1079 [pid 3625] pwrite64(3, "\x00\xba\x1f\x9d\xf7\x25\x7e\xb9\x87", 9, 16384) = 9 [pid 3625] pwrite64(3, "\xf8\xff\x07\x00\xf0\xff\x04\x40\xfe\x26\x84\x00\x09\xa0\x00\xc8\xe6\x00", 18, 16393) = 18 [pid 3625] pwrite64(3, "\x73\xc0\xd2\x8b\xde\xef\xe2\x35\x25\x97\x75\xdb\xad\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\xec\x65\x72\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x6a\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\xb6\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x53\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\xee\x82\xc1\x1b\x5a\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x62\x6c\x6c\xdf\xd0\x57"..., 306, 32771) = 306 [pid 3625] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 3625] ioctl(4, LOOP_SET_FD, 3 [pid 3617] <... chdir resumed>) = 0 [pid 3620] <... openat resumed>) = 3 [pid 3617] mkdir("./0", 0777 [pid 3620] ioctl(3, LOOP_CLR_FD [pid 3619] chdir("./syzkaller.UWAwgS" [pid 3621] mkdir("./syzkaller.tWv34Z", 0700 [pid 3617] <... mkdir resumed>) = 0 [pid 3623] mkdir("./syzkaller.YXHCmb", 0700 [pid 3621] <... mkdir resumed>) = 0 [pid 3620] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3619] <... chdir resumed>) = 0 [pid 3617] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3623] <... mkdir resumed>) = 0 [pid 3619] mkdir("./0", 0777 [pid 3617] <... openat resumed>) = 3 [pid 3619] <... mkdir resumed>) = 0 [pid 3617] ioctl(3, LOOP_CLR_FD [pid 3620] close(3 [pid 3617] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3623] chmod("./syzkaller.YXHCmb", 0777 [pid 3621] chmod("./syzkaller.tWv34Z", 0777 [pid 3620] <... close resumed>) = 0 [pid 3619] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3617] close(3 [pid 3625] <... ioctl resumed>) = 0 [pid 3625] mkdir("./file0", 0777 [pid 3623] <... chmod resumed>) = 0 [pid 3621] <... chmod resumed>) = 0 [pid 3620] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3619] <... openat resumed>) = 3 [pid 3617] <... close resumed>) = 0 [pid 3625] <... mkdir resumed>) = 0 [pid 3623] chdir("./syzkaller.YXHCmb" [pid 3621] chdir("./syzkaller.tWv34Z" [pid 3619] ioctl(3, LOOP_CLR_FD [pid 3617] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3625] mount("/dev/loop1", "./file0", "vfat", MS_SYNCHRONOUS|MS_SILENT, "" [pid 3623] <... chdir resumed>) = 0 [pid 3621] <... chdir resumed>) = 0 [pid 3619] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3623] mkdir("./0", 0777 [pid 3621] mkdir("./0", 0777 [pid 3620] <... clone resumed>, child_tidptr=0x55555576d6d0) = 3626 [pid 3619] close(3./strace-static-x86_64: Process 3626 attached [pid 3623] <... mkdir resumed>) = 0 [pid 3621] <... mkdir resumed>) = 0 [pid 3619] <... close resumed>) = 0 [pid 3617] <... clone resumed>, child_tidptr=0x55555576d6d0) = 3627 [pid 3623] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3621] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3619] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3626] set_robust_list(0x55555576d6e0, 24 [pid 3623] <... openat resumed>) = 3 [pid 3621] <... openat resumed>) = 3 ./strace-static-x86_64: Process 3627 attached [pid 3626] <... set_robust_list resumed>) = 0 [pid 3625] <... mount resumed>) = 0 [pid 3623] ioctl(3, LOOP_CLR_FD [pid 3621] ioctl(3, LOOP_CLR_FD [pid 3619] <... clone resumed>, child_tidptr=0x55555576d6d0) = 3628 [pid 3626] chdir("./0" [pid 3625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 3623] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3621] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 3627] set_robust_list(0x55555576d6e0, 24 [pid 3623] close(3 [pid 3621] close(3 [pid 3627] <... set_robust_list resumed>) = 0 [pid 3626] <... chdir resumed>) = 0 [pid 3625] <... openat resumed>) = 5 [pid 3623] <... close resumed>) = 0 [pid 3621] <... close resumed>) = 0 [pid 3625] chdir("./file0" [pid 3626] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3623] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 3621] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3628 attached [pid 3627] chdir("./0" [pid 3626] <... prctl resumed>) = 0 [pid 3625] <... chdir resumed>) = 0 [pid 3627] <... chdir resumed>) = 0 [pid 3626] setpgid(0, 0 [pid 3625] ioctl(4, LOOP_CLR_FD [pid 3623] <... clone resumed>, child_tidptr=0x55555576d6d0) = 3629 [pid 3621] <... clone resumed>, child_tidptr=0x55555576d6d0) = 3630 [pid 3627] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3626] <... setpgid resumed>) = 0 [pid 3625] <... ioctl resumed>) = 0 [pid 3628] set_robust_list(0x55555576d6e0, 24 [pid 3627] <... prctl resumed>) = 0 [pid 3626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3625] close(4 [pid 3627] setpgid(0, 0 [pid 3626] <... openat resumed>) = 3 [pid 3625] <... close resumed>) = 0 [pid 3627] <... setpgid resumed>) = 0 [pid 3626] write(3, "1000", 4 [pid 3625] close(3 [pid 3628] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 3629 attached [pid 3628] chdir("./0" [pid 3627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3626] <... write resumed>) = 4 [pid 3625] <... close resumed>) = 0 [pid 3629] set_robust_list(0x55555576d6e0, 24 [pid 3628] <... chdir resumed>) = 0 [pid 3627] <... openat resumed>) = 3 [pid 3626] close(3 [pid 3625] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3629] <... set_robust_list resumed>) = 0 [pid 3628] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3627] write(3, "1000", 4 [pid 3626] <... close resumed>) = 0 [pid 3625] <... futex resumed>) = 1 [pid 3624] <... futex resumed>) = 0 [pid 3629] chdir("./0" [pid 3628] <... prctl resumed>) = 0 [pid 3627] <... write resumed>) = 4 [pid 3626] symlink("/dev/binderfs", "./binderfs" [pid 3625] futex(0x7f44139c64a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3624] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3629] <... chdir resumed>) = 0 [pid 3628] setpgid(0, 0 [pid 3627] close(3 [pid 3629] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3628] <... setpgid resumed>) = 0 [pid 3627] <... close resumed>) = 0 [pid 3626] <... symlink resumed>) = 0 [pid 3625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3624] <... futex resumed>) = 0 ./strace-static-x86_64: Process 3630 attached [pid 3629] <... prctl resumed>) = 0 [pid 3627] symlink("/dev/binderfs", "./binderfs" [pid 3626] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] mkdir("./file1", 000 [pid 3628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3624] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3629] setpgid(0, 0 [pid 3626] <... futex resumed>) = 0 [pid 3629] <... setpgid resumed>) = 0 [pid 3626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3627] <... symlink resumed>) = 0 [pid 3629] <... openat resumed>) = 3 [pid 3629] write(3, "1000", 4) = 4 [pid 3629] close(3) = 0 [pid 3629] symlink("/dev/binderfs", "./binderfs" [pid 3626] <... mmap resumed>) = 0x7f44138cd000 [pid 3627] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3629] <... symlink resumed>) = 0 [pid 3628] <... openat resumed>) = 3 [pid 3627] <... futex resumed>) = 0 [pid 3626] mprotect(0x7f44138ce000, 131072, PROT_READ|PROT_WRITE [pid 3629] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3628] write(3, "1000", 4 [pid 3627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3626] <... mprotect resumed>) = 0 [pid 3630] set_robust_list(0x55555576d6e0, 24 [pid 3629] <... futex resumed>) = 0 [pid 3627] <... mmap resumed>) = 0x7f44138cd000 [pid 3626] clone(child_stack=0x7f44138ed2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3628] <... write resumed>) = 4 [pid 3630] <... set_robust_list resumed>) = 0 [pid 3629] <... mmap resumed>) = 0x7f44138cd000 [pid 3628] close(3 [pid 3627] mprotect(0x7f44138ce000, 131072, PROT_READ|PROT_WRITE [pid 3625] <... mkdir resumed>) = 0 [pid 3629] mprotect(0x7f44138ce000, 131072, PROT_READ|PROT_WRITE [pid 3628] <... close resumed>) = 0 [pid 3626] <... clone resumed>, parent_tid=[3631], tls=0x7f44138ed700, child_tidptr=0x7f44138ed9d0) = 3631 [pid 3627] <... mprotect resumed>) = 0 [pid 3625] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3630] chdir("./0" [pid 3629] <... mprotect resumed>) = 0 [pid 3628] symlink("/dev/binderfs", "./binderfs" [pid 3626] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] clone(child_stack=0x7f44138ed2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3631 attached [pid 3629] clone(child_stack=0x7f44138ed2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3628] <... symlink resumed>) = 0 [pid 3626] <... futex resumed>) = 0 [pid 3625] <... futex resumed>) = 1 [pid 3624] <... futex resumed>) = 0 [pid 3631] set_robust_list(0x7f44138ed9e0, 24 [pid 3630] <... chdir resumed>) = 0 [pid 3628] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3626] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=100000000} [pid 3625] futex(0x7f44139c64a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3624] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... set_robust_list resumed>) = 0 [pid 3630] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 3629] <... clone resumed>, parent_tid=[3633], tls=0x7f44138ed700, child_tidptr=0x7f44138ed9d0) = 3633 syzkaller login: [ 48.337322][ T3625] loop1: detected capacity change from 0 to 64 [pid 3628] <... futex resumed>) = 0 [pid 3627] <... clone resumed>, parent_tid=[3632], tls=0x7f44138ed700, child_tidptr=0x7f44138ed9d0) = 3632 [pid 3625] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3624] <... futex resumed>) = 0 [pid 3631] memfd_create("syzkaller", 0 [pid 3630] <... prctl resumed>) = 0 [pid 3629] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3627] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] mkdir("./file1/file0", 000 [pid 3624] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3633 attached [pid 3631] <... memfd_create resumed>) = 3 [pid 3630] setpgid(0, 0 [pid 3629] <... futex resumed>) = 0 [pid 3628] <... mmap resumed>) = 0x7f44138cd000 [pid 3627] <... futex resumed>) = 0 [pid 3633] set_robust_list(0x7f44138ed9e0, 24 [pid 3631] ftruncate(3, 33077 [pid 3630] <... setpgid resumed>) = 0 [pid 3629] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=100000000} [pid 3628] mprotect(0x7f44138ce000, 131072, PROT_READ|PROT_WRITE [pid 3627] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=100000000} [pid 3625] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 3632 attached [pid 3633] <... set_robust_list resumed>) = 0 [pid 3631] <... ftruncate resumed>) = 0 [pid 3630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 3628] <... mprotect resumed>) = 0 [pid 3625] mkdir("./file1/file0", 000 [pid 3633] memfd_create("syzkaller", 0 [pid 3632] set_robust_list(0x7f44138ed9e0, 24 [pid 3631] pwrite64(3, "\x60\x1c\x6d\x6b\x64\x6f\x73\x66\x90\xe6\xb1\x00\x08\x01\x01\x00\x04\x40\x00\x20\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x7d\x92\xd6\xcb\xe5\xd9\x15\x00\x7b\xf7\xd7\xef\xdf\x73\x0c\x3d\x67\xac\x38\x9a\x1c\xda\x44\x0a\x25\xe1\xc3\x0c\x10\xfc\xd6\xdc", 88, 0 [pid 3630] <... openat resumed>) = 3 [pid 3628] clone(child_stack=0x7f44138ed2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3633] <... memfd_create resumed>) = 3 [pid 3632] <... set_robust_list resumed>) = 0 [pid 3631] <... pwrite64 resumed>) = 88 [pid 3630] write(3, "1000", 4 [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3633] ftruncate(3, 33077 [pid 3631] pwrite64(3, "\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x08\x00\x00\x07\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x00\x00\x00\x00\x00\x00\x41\x66\x00\x69\x00\x6c\x00\x65\x00\x30\x80\x0f\x00\xfc\x00\x01\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\xff\xdf\xf2\xff\x46\x49\x4c\x45\x30\x20\x20\x20\x20\x20\x20\x14\x00\x7f\x15\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x03\x00\x00\x00\x00\x00\x6f\x7a\x00\x69"..., 1079, 10240 [pid 3632] memfd_create("syzkaller", 0 [pid 3630] <... write resumed>) = 4 [pid 3628] <... clone resumed>, parent_tid=[3634], tls=0x7f44138ed700, child_tidptr=0x7f44138ed9d0) = 3634 [pid 3625] mkdir("./file1/file0", 000 [pid 3633] <... ftruncate resumed>) = 0 [pid 3632] <... memfd_create resumed>) = 3 [pid 3631] <... pwrite64 resumed>) = 1079 [pid 3630] close(3 [pid 3628] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3633] pwrite64(3, "\x60\x1c\x6d\x6b\x64\x6f\x73\x66\x90\xe6\xb1\x00\x08\x01\x01\x00\x04\x40\x00\x20\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x7d\x92\xd6\xcb\xe5\xd9\x15\x00\x7b\xf7\xd7\xef\xdf\x73\x0c\x3d\x67\xac\x38\x9a\x1c\xda\x44\x0a\x25\xe1\xc3\x0c\x10\xfc\xd6\xdc", 88, 0 [pid 3632] ftruncate(3, 33077 [pid 3631] pwrite64(3, "\x00\xba\x1f\x9d\xf7\x25\x7e\xb9\x87", 9, 16384 [pid 3630] <... close resumed>) = 0 [pid 3628] <... futex resumed>) = 0 [pid 3625] mkdir("./file1/file0", 000 [pid 3633] <... pwrite64 resumed>) = 88 [pid 3632] <... ftruncate resumed>) = 0 [pid 3631] <... pwrite64 resumed>) = 9 [pid 3630] symlink("/dev/binderfs", "./binderfs" [pid 3628] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=100000000} [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3633] pwrite64(3, "\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x08\x00\x00\x07\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x00\x00\x00\x00\x00\x00\x41\x66\x00\x69\x00\x6c\x00\x65\x00\x30\x80\x0f\x00\xfc\x00\x01\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\xff\xdf\xf2\xff\x46\x49\x4c\x45\x30\x20\x20\x20\x20\x20\x20\x14\x00\x7f\x15\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x03\x00\x00\x00\x00\x00\x6f\x7a\x00\x69"..., 1079, 10240 [pid 3632] pwrite64(3, "\x60\x1c\x6d\x6b\x64\x6f\x73\x66\x90\xe6\xb1\x00\x08\x01\x01\x00\x04\x40\x00\x20\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x7d\x92\xd6\xcb\xe5\xd9\x15\x00\x7b\xf7\xd7\xef\xdf\x73\x0c\x3d\x67\xac\x38\x9a\x1c\xda\x44\x0a\x25\xe1\xc3\x0c\x10\xfc\xd6\xdc", 88, 0 [pid 3631] pwrite64(3, "\xf8\xff\x07\x00\xf0\xff\x04\x40\xfe\x26\x84\x00\x09\xa0\x00\xc8\xe6\x00", 18, 16393 [pid 3630] <... symlink resumed>) = 0 [pid 3625] mkdir("./file1/file0", 000./strace-static-x86_64: Process 3634 attached [pid 3633] <... pwrite64 resumed>) = 1079 [pid 3632] <... pwrite64 resumed>) = 88 [pid 3631] <... pwrite64 resumed>) = 18 [pid 3630] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3634] set_robust_list(0x7f44138ed9e0, 24 [pid 3633] pwrite64(3, "\x00\xba\x1f\x9d\xf7\x25\x7e\xb9\x87", 9, 16384 [pid 3632] pwrite64(3, "\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x08\x00\x00\x07\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x00\x00\x00\x00\x00\x00\x41\x66\x00\x69\x00\x6c\x00\x65\x00\x30\x80\x0f\x00\xfc\x00\x01\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\xff\xdf\xf2\xff\x46\x49\x4c\x45\x30\x20\x20\x20\x20\x20\x20\x14\x00\x7f\x15\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x03\x00\x00\x00\x00\x00\x6f\x7a\x00\x69"..., 1079, 10240 [pid 3631] pwrite64(3, "\x73\xc0\xd2\x8b\xde\xef\xe2\x35\x25\x97\x75\xdb\xad\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\xec\x65\x72\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x6a\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\xb6\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x53\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\xee\x82\xc1\x1b\x5a\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x62\x6c\x6c\xdf\xd0\x57"..., 306, 32771 [pid 3630] <... futex resumed>) = 0 [pid 3625] mkdir("./file1/file0", 000 [pid 3634] <... set_robust_list resumed>) = 0 [pid 3633] <... pwrite64 resumed>) = 9 [pid 3632] <... pwrite64 resumed>) = 1079 [pid 3631] <... pwrite64 resumed>) = 306 [pid 3630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3634] memfd_create("syzkaller", 0 [pid 3633] pwrite64(3, "\xf8\xff\x07\x00\xf0\xff\x04\x40\xfe\x26\x84\x00\x09\xa0\x00\xc8\xe6\x00", 18, 16393 [pid 3632] pwrite64(3, "\x00\xba\x1f\x9d\xf7\x25\x7e\xb9\x87", 9, 16384 [pid 3631] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 3630] <... mmap resumed>) = 0x7f44138cd000 [pid 3625] mkdir("./file1/file0", 000 [pid 3634] <... memfd_create resumed>) = 3 [pid 3633] <... pwrite64 resumed>) = 18 [pid 3632] <... pwrite64 resumed>) = 9 [pid 3631] <... openat resumed>) = 4 [pid 3630] mprotect(0x7f44138ce000, 131072, PROT_READ|PROT_WRITE [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3634] ftruncate(3, 33077 [pid 3633] pwrite64(3, "\x73\xc0\xd2\x8b\xde\xef\xe2\x35\x25\x97\x75\xdb\xad\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\xec\x65\x72\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x6a\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\xb6\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x53\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\xee\x82\xc1\x1b\x5a\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x62\x6c\x6c\xdf\xd0\x57"..., 306, 32771 [pid 3632] pwrite64(3, "\xf8\xff\x07\x00\xf0\xff\x04\x40\xfe\x26\x84\x00\x09\xa0\x00\xc8\xe6\x00", 18, 16393 [pid 3631] ioctl(4, LOOP_SET_FD, 3 [pid 3630] <... mprotect resumed>) = 0 [pid 3625] mkdir("./file1/file0", 000 [pid 3634] <... ftruncate resumed>) = 0 [pid 3633] <... pwrite64 resumed>) = 306 [pid 3632] <... pwrite64 resumed>) = 18 [pid 3630] clone(child_stack=0x7f44138ed2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3634] pwrite64(3, "\x60\x1c\x6d\x6b\x64\x6f\x73\x66\x90\xe6\xb1\x00\x08\x01\x01\x00\x04\x40\x00\x20\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x7d\x92\xd6\xcb\xe5\xd9\x15\x00\x7b\xf7\xd7\xef\xdf\x73\x0c\x3d\x67\xac\x38\x9a\x1c\xda\x44\x0a\x25\xe1\xc3\x0c\x10\xfc\xd6\xdc", 88, 0 [pid 3632] pwrite64(3, "\x73\xc0\xd2\x8b\xde\xef\xe2\x35\x25\x97\x75\xdb\xad\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\xec\x65\x72\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x6a\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\xb6\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x53\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\xee\x82\xc1\x1b\x5a\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x62\x6c\x6c\xdf\xd0\x57"..., 306, 32771 [pid 3634] <... pwrite64 resumed>) = 88 [pid 3632] <... pwrite64 resumed>) = 306 [pid 3630] <... clone resumed>, parent_tid=[3635], tls=0x7f44138ed700, child_tidptr=0x7f44138ed9d0) = 3635 [pid 3634] pwrite64(3, "\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x08\x00\x00\x07\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x00\x00\x00\x00\x00\x00\x41\x66\x00\x69\x00\x6c\x00\x65\x00\x30\x80\x0f\x00\xfc\x00\x01\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\xff\xdf\xf2\xff\x46\x49\x4c\x45\x30\x20\x20\x20\x20\x20\x20\x14\x00\x7f\x15\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x03\x00\x00\x00\x00\x00\x6f\x7a\x00\x69"..., 1079, 10240 [pid 3632] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 3630] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... pwrite64 resumed>) = 1079 [pid 3632] <... openat resumed>) = 4 [pid 3630] <... futex resumed>) = 0 [pid 3634] pwrite64(3, "\x00\xba\x1f\x9d\xf7\x25\x7e\xb9\x87", 9, 16384 [pid 3633] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 3632] ioctl(4, LOOP_SET_FD, 3 [pid 3630] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=100000000} [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3634] <... pwrite64 resumed>) = 9 [pid 3633] <... openat resumed>) = 4 [pid 3631] <... ioctl resumed>) = 0 [pid 3625] mkdir("./file1/file0", 000./strace-static-x86_64: Process 3635 attached [pid 3634] pwrite64(3, "\xf8\xff\x07\x00\xf0\xff\x04\x40\xfe\x26\x84\x00\x09\xa0\x00\xc8\xe6\x00", 18, 16393 [pid 3633] ioctl(4, LOOP_SET_FD, 3 [pid 3632] <... ioctl resumed>) = 0 [pid 3631] mkdir("./file0", 0777 [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3635] set_robust_list(0x7f44138ed9e0, 24 [pid 3634] <... pwrite64 resumed>) = 18 [pid 3632] mkdir("./file0", 0777 [pid 3635] <... set_robust_list resumed>) = 0 [pid 3634] pwrite64(3, "\x73\xc0\xd2\x8b\xde\xef\xe2\x35\x25\x97\x75\xdb\xad\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\xec\x65\x72\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x6a\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\xb6\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x53\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\xee\x82\xc1\x1b\x5a\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x62\x6c\x6c\xdf\xd0\x57"..., 306, 32771 [pid 3632] <... mkdir resumed>) = 0 [pid 3635] memfd_create("syzkaller", 0 [pid 3634] <... pwrite64 resumed>) = 306 [pid 3632] mount("/dev/loop0", "./file0", "vfat", MS_SYNCHRONOUS|MS_SILENT, "" [pid 3635] <... memfd_create resumed>) = 3 [pid 3634] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 3624] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3635] ftruncate(3, 33077 [pid 3634] <... openat resumed>) = 4 [pid 3624] futex(0x7f44139c64bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... ftruncate resumed>) = 0 [pid 3634] ioctl(4, LOOP_SET_FD, 3 [pid 3624] <... futex resumed>) = 0 [pid 3635] pwrite64(3, "\x60\x1c\x6d\x6b\x64\x6f\x73\x66\x90\xe6\xb1\x00\x08\x01\x01\x00\x04\x40\x00\x20\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x7d\x92\xd6\xcb\xe5\xd9\x15\x00\x7b\xf7\xd7\xef\xdf\x73\x0c\x3d\x67\xac\x38\x9a\x1c\xda\x44\x0a\x25\xe1\xc3\x0c\x10\xfc\xd6\xdc", 88, 0 [pid 3634] <... ioctl resumed>) = 0 [pid 3631] <... mkdir resumed>) = 0 [pid 3625] mkdir("./file1/file0", 000 [pid 3624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3633] <... ioctl resumed>) = 0 [pid 3635] <... pwrite64 resumed>) = 88 [pid 3634] mkdir("./file0", 0777 [pid 3633] mkdir("./file0", 0777 [pid 3632] <... mount resumed>) = 0 [pid 3631] mount("/dev/loop3", "./file0", "vfat", MS_SYNCHRONOUS|MS_SILENT, "" [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3624] <... mmap resumed>) = 0x7f44138ac000 [pid 3635] pwrite64(3, "\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x08\x00\x00\x07\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x00\x00\x00\x00\x00\x00\x41\x66\x00\x69\x00\x6c\x00\x65\x00\x30\x80\x0f\x00\xfc\x00\x01\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\xff\xdf\xf2\xff\x46\x49\x4c\x45\x30\x20\x20\x20\x20\x20\x20\x14\x00\x7f\x15\x60\x2c\x55\x2c\x55\x00\x00\x15\x60\x2c\x55\x03\x00\x00\x00\x00\x00\x6f\x7a\x00\x69"..., 1079, 10240 [pid 3634] <... mkdir resumed>) = 0 [pid 3633] <... mkdir resumed>) = 0 [pid 3632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 3624] mprotect(0x7f44138ad000, 131072, PROT_READ|PROT_WRITE [pid 3635] <... pwrite64 resumed>) = 1079 [pid 3634] mount("/dev/loop2", "./file0", "vfat", MS_SYNCHRONOUS|MS_SILENT, "" [pid 3633] mount("/dev/loop5", "./file0", "vfat", MS_SYNCHRONOUS|MS_SILENT, "" [pid 3632] <... openat resumed>) = 5 [pid 3625] mkdir("./file1/file0", 000 [pid 3624] <... mprotect resumed>) = 0 [pid 3635] pwrite64(3, "\x00\xba\x1f\x9d\xf7\x25\x7e\xb9\x87", 9, 16384 [pid 3634] <... mount resumed>) = 0 [pid 3633] <... mount resumed>) = 0 [pid 3632] chdir("./file0" [pid 3631] <... mount resumed>) = 0 [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3624] clone(child_stack=0x7f44138cc2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3635] <... pwrite64 resumed>) = 9 [pid 3634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 3633] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 3632] <... chdir resumed>) = 0 [pid 3631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 3625] mkdir("./file1/file0", 000 [pid 3635] pwrite64(3, "\xf8\xff\x07\x00\xf0\xff\x04\x40\xfe\x26\x84\x00\x09\xa0\x00\xc8\xe6\x00", 18, 16393 [pid 3634] <... openat resumed>) = 5 [pid 3633] <... openat resumed>) = 5 [pid 3632] ioctl(4, LOOP_CLR_FD [pid 3631] <... openat resumed>) = 5 [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3624] <... clone resumed>, parent_tid=[3636], tls=0x7f44138cc700, child_tidptr=0x7f44138cc9d0) = 3636 ./strace-static-x86_64: Process 3636 attached [pid 3635] <... pwrite64 resumed>) = 18 [pid 3634] chdir("./file0" [pid 3633] chdir("./file0" [pid 3632] <... ioctl resumed>) = 0 [pid 3631] chdir("./file0" [pid 3625] mkdir("./file1/file0", 000 [pid 3624] futex(0x7f44139c64b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] set_robust_list(0x7f44138cc9e0, 24 [pid 3635] pwrite64(3, "\x73\xc0\xd2\x8b\xde\xef\xe2\x35\x25\x97\x75\xdb\xad\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\xec\x65\x72\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x6a\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\xb6\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x53\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\xee\x82\xc1\x1b\x5a\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x62\x6c\x6c\xdf\xd0\x57"..., 306, 32771 [pid 3634] <... chdir resumed>) = 0 [pid 3633] <... chdir resumed>) = 0 [pid 3632] close(4 [pid 3631] <... chdir resumed>) = 0 [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3624] <... futex resumed>) = 0 [pid 3636] <... set_robust_list resumed>) = 0 [pid 3635] <... pwrite64 resumed>) = 306 [pid 3634] ioctl(4, LOOP_CLR_FD [pid 3633] ioctl(4, LOOP_CLR_FD [pid 3632] <... close resumed>) = 0 [pid 3631] ioctl(4, LOOP_CLR_FD [pid 3625] mkdir("./file1/file0", 000 [pid 3624] futex(0x7f44139c64bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3636] rmdir("./file0/file0" [pid 3635] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 3634] <... ioctl resumed>) = 0 [pid 3633] <... ioctl resumed>) = 0 [pid 3632] close(3 [pid 3631] <... ioctl resumed>) = 0 [pid 3625] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3635] <... openat resumed>) = 4 [ 48.427329][ T3631] loop3: detected capacity change from 0 to 64 [ 48.436142][ T3632] loop0: detected capacity change from 0 to 64 [ 48.446331][ T3633] loop5: detected capacity change from 0 to 64 [ 48.453484][ T3634] loop2: detected capacity change from 0 to 64 [pid 3634] close(4 [pid 3632] <... close resumed>) = 0 [pid 3635] ioctl(4, LOOP_SET_FD, 3 [pid 3634] <... close resumed>) = 0 [pid 3632] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] close(3 [pid 3633] close(4 [pid 3632] <... futex resumed>) = 1 [pid 3631] close(4 [pid 3627] <... futex resumed>) = 0 [pid 3626] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3625] mkdir("./file1/file0", 000 [pid 3634] <... close resumed>) = 0 [pid 3633] <... close resumed>) = 0 [pid 3632] futex(0x7f44139c64a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3631] <... close resumed>) = 0 [pid 3627] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3626] futex(0x7f44139c64bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] close(3 [pid 3632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3631] close(3 [pid 3627] <... futex resumed>) = 0 [pid 3626] <... futex resumed>) = 0 [pid 3629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3636] <... rmdir resumed>) = 0 [pid 3635] <... ioctl resumed>) = 0 [pid 3634] <... futex resumed>) = 1 [pid 3633] <... close resumed>) = 0 [pid 3632] mkdir("./file1", 000 [pid 3631] <... close resumed>) = 0 [pid 3629] futex(0x7f44139c64bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3628] <... futex resumed>) = 0 [pid 3627] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3625] <... mkdir resumed>) = 0 [pid 3636] rmdir("./file0/file0" [pid 3635] mkdir("./file0", 0777 [pid 3634] futex(0x7f44139c64a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3633] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] <... mkdir resumed>) = 0 [pid 3631] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3629] <... futex resumed>) = 0 [pid 3628] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3626] <... mmap resumed>) = 0x7f44138ac000 [pid 3625] mkdir("./file1/file0", 000 [pid 3636] <... rmdir resumed>) = 0 [pid 3635] <... mkdir resumed>) = 0 [pid 3634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3633] <... futex resumed>) = 0 [pid 3632] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... futex resumed>) = 0 [pid 3629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3628] <... futex resumed>) = 0 [pid 3626] mprotect(0x7f44138ad000, 131072, PROT_READ|PROT_WRITE [pid 3636] rmdir("./file0/file0" [pid 3635] mount("/dev/loop4", "./file0", "vfat", MS_SYNCHRONOUS|MS_SILENT, "" [pid 3634] mkdir("./file1", 000 [pid 3633] futex(0x7f44139c64a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3632] <... futex resumed>) = 1 [pid 3631] futex(0x7f44139c64a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3629] <... mmap resumed>) = 0x7f44138ac000 [pid 3628] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3627] <... futex resumed>) = 0 [pid 3626] <... mprotect resumed>) = 0 [pid 3625] <... mkdir resumed>) = 0 [pid 3636] <... rmdir resumed>) = 0 [pid 3635] <... mount resumed>) = 0 [pid 3634] <... mkdir resumed>) = 0 [pid 3632] futex(0x7f44139c64a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3629] mprotect(0x7f44138ad000, 131072, PROT_READ|PROT_WRITE [pid 3627] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3626] clone(child_stack=0x7f44138cc2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3625] mkdir("./file1/file0", 000 [pid 3636] rmdir("./file0/file0" [pid 3635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 48.489277][ T3635] loop4: detected capacity change from 0 to 64 [pid 3634] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3629] <... mprotect resumed>) = 0 [pid 3627] <... futex resumed>) = 0 [pid 3635] <... openat resumed>) = 5 [pid 3634] <... futex resumed>) = 1 [pid 3632] mkdir("./file1/file0", 000 [pid 3628] <... futex resumed>) = 0 [pid 3627] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] <... clone resumed>, parent_tid=[3637], tls=0x7f44138cc700, child_tidptr=0x7f44138cc9d0) = 3637 [pid 3625] <... mkdir resumed>) = 0 [pid 3635] chdir("./file0" [pid 3634] futex(0x7f44139c64a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3632] <... mkdir resumed>) = 0 [pid 3628] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3626] futex(0x7f44139c64b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... chdir resumed>) = 0 [pid 3634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3632] mkdir("./file1/file0", 000 [pid 3628] <... futex resumed>) = 0 [pid 3626] <... futex resumed>) = 0 [pid 3635] ioctl(4, LOOP_CLR_FD [pid 3634] mkdir("./file1/file0", 000 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3629] clone(child_stack=0x7f44138cc2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3628] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] futex(0x7f44139c64bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3625] mkdir("./file1/file0", 000 [pid 3624] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3635] <... ioctl resumed>) = 0 [pid 3634] <... mkdir resumed>) = 0 [pid 3632] mkdir("./file1/file0", 000 [pid 3635] close(4 [pid 3634] mkdir("./file1/file0", 000 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) ./strace-static-x86_64: Process 3637 attached [pid 3635] <... close resumed>) = 0 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] mkdir("./file1/file0", 000 [pid 3630] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3629] <... clone resumed>, parent_tid=[3638], tls=0x7f44138cc700, child_tidptr=0x7f44138cc9d0) = 3638 [pid 3637] set_robust_list(0x7f44138cc9e0, 24 [pid 3635] close(3 [pid 3634] mkdir("./file1/file0", 000 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3630] futex(0x7f44139c64bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3629] futex(0x7f44139c64b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3638 attached [pid 3637] <... set_robust_list resumed>) = 0 [pid 3635] <... close resumed>) = 0 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] mkdir("./file1/file0", 000 [pid 3630] <... futex resumed>) = 0 [pid 3629] <... futex resumed>) = 0 [pid 3638] set_robust_list(0x7f44138cc9e0, 24 [pid 3637] mkdir("./file1", 000 [pid 3635] futex(0x7f44139c64ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] mkdir("./file1/file0", 000 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3629] futex(0x7f44139c64bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3638] <... set_robust_list resumed>) = 0 [pid 3637] <... mkdir resumed>) = 0 [pid 3635] <... futex resumed>) = 0 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] mkdir("./file1/file0", 000 [pid 3630] <... mmap resumed>) = 0x7f44138ac000 [pid 3638] mkdir("./file1", 000 [pid 3635] futex(0x7f44139c64a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3634] mkdir("./file1/file0", 000 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3630] mprotect(0x7f44138ad000, 131072, PROT_READ|PROT_WRITE [pid 3638] <... mkdir resumed>) = 0 [pid 3637] futex(0x7f44139c64bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] mkdir("./file1/file0", 000 [pid 3630] <... mprotect resumed>) = 0 [pid 3638] futex(0x7f44139c64bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... futex resumed>) = 1 [pid 3634] mkdir("./file1/file0", 000 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3630] clone(child_stack=0x7f44138cc2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3626] <... futex resumed>) = 0 [pid 3638] <... futex resumed>) = 1 [pid 3637] futex(0x7f44139c64b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] mkdir("./file1/file0", 000 [pid 3629] <... futex resumed>) = 0 [pid 3626] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] futex(0x7f44139c64b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3634] mkdir("./file1/file0", 000 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3630] <... clone resumed>, parent_tid=[3639], tls=0x7f44138cc700, child_tidptr=0x7f44138cc9d0) = 3639 [pid 3629] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3626] <... futex resumed>) = 1 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] mkdir("./file1/file0", 000 [pid 3630] futex(0x7f44139c64b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3629] <... futex resumed>) = 1 [pid 3626] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3634] mkdir("./file1/file0", 000 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3630] <... futex resumed>) = 0 [pid 3629] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] mkdir("./file1/file0", 000 [pid 3630] futex(0x7f44139c64bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3639 attached [pid 3634] mkdir("./file1/file0", 000 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3639] set_robust_list(0x7f44138cc9e0, 24 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] mkdir("./file1/file0", 000 [pid 3639] <... set_robust_list resumed>) = 0 [pid 3634] mkdir("./file1/file0", 000 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3639] mkdir("./file1", 000 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] mkdir("./file1/file0", 000 [pid 3639] <... mkdir resumed>) = 0 [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... futex resumed>) = 0 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3631] <... futex resumed>) = 0 [pid 3639] futex(0x7f44139c64bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3633] mkdir("./file1/file0", 000 [pid 3632] mkdir("./file1/file0", 000 [pid 3631] mkdir("./file1/file0", 000 [pid 3627] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3639] <... futex resumed>) = 1 [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... mkdir resumed>) = 0 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3630] <... futex resumed>) = 0 [pid 3627] futex(0x7f44139c64bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3639] futex(0x7f44139c64b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3633] mkdir("./file1/file0", 000 [pid 3632] mkdir("./file1/file0", 000 [pid 3631] <... mkdir resumed>) = 0 [pid 3630] futex(0x7f44139c64a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3628] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3627] <... futex resumed>) = 0 [pid 3635] <... futex resumed>) = 0 [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3631] mkdir("./file1/file0", 000 [pid 3630] <... futex resumed>) = 1 [pid 3628] futex(0x7f44139c64bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3635] mkdir("./file1/file0", 000 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3633] mkdir("./file1/file0", 000 [pid 3632] mkdir("./file1/file0", 000 [pid 3631] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3630] futex(0x7f44139c64ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3628] <... futex resumed>) = 0 [pid 3627] <... mmap resumed>) = 0x7f44138ac000 [pid 3635] <... mkdir resumed>) = 0 [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3627] mprotect(0x7f44138ad000, 131072, PROT_READ|PROT_WRITE [pid 3635] mkdir("./file1/file0", 000 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3633] mkdir("./file1/file0", 000 [pid 3632] mkdir("./file1/file0", 000 [pid 3631] mkdir("./file1/file0", 000 [pid 3628] <... mmap resumed>) = 0x7f44138ac000 [pid 3627] <... mprotect resumed>) = 0 [pid 3635] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3631] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3628] mprotect(0x7f44138ad000, 131072, PROT_READ|PROT_WRITE [pid 3627] clone(child_stack=0x7f44138cc2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3635] mkdir("./file1/file0", 000 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [ 48.529982][ T3636] ------------[ cut here ]------------ [ 48.539403][ T3636] WARNING: CPU: 0 PID: 3636 at fs/inode.c:330 drop_nlink+0xb9/0x100 [ 48.559335][ T3636] Modules linked in: [ 48.569312][ T3636] CPU: 0 PID: 3636 Comm: syz-executor301 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [pid 3633] mkdir("./file1/file0", 000 [pid 3632] mkdir("./file1/file0", 000 [pid 3631] mkdir("./file1/file0", 000 [pid 3628] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 3640 attached [pid 3635] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3631] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3628] clone(child_stack=0x7f44138cc2f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 3627] <... clone resumed>, parent_tid=[3640], tls=0x7f44138cc700, child_tidptr=0x7f44138cc9d0) = 3640 [pid 3640] set_robust_list(0x7f44138cc9e0, 24 [pid 3635] mkdir("./file1/file0", 000 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3633] mkdir("./file1/file0", 000 [pid 3632] mkdir("./file1/file0", 000 [pid 3631] mkdir("./file1/file0", 000 [pid 3627] futex(0x7f44139c64b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3640] <... set_robust_list resumed>) = 0 [pid 3635] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3631] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3628] <... clone resumed>, parent_tid=[3642], tls=0x7f44138cc700, child_tidptr=0x7f44138cc9d0) = 3642 [pid 3627] <... futex resumed>) = 0 [pid 3626] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 3642 attached [pid 3640] rmdir("./file0/file0" [pid 3635] mkdir("./file1/file0", 000 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3633] mkdir("./file1/file0", 000 [pid 3632] mkdir("./file1/file0", 000 [pid 3631] mkdir("./file1/file0", 000 [pid 3629] futex(0x7f44139c64b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3628] futex(0x7f44139c64b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] futex(0x7f44139c64bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] futex(0x7f44139c64b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] set_robust_list(0x7f44138cc9e0, 24 [pid 3640] <... rmdir resumed>) = 0 [pid 3638] <... futex resumed>) = 0 [pid 3635] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] <... mkdir resumed>) = 0 [pid 3631] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3629] <... futex resumed>) = 1 [pid 3628] <... futex resumed>) = 0 [pid 3626] <... futex resumed>) = 1 [pid 3642] <... set_robust_list resumed>) = 0 [pid 3638] rmdir("./file0/file0" [pid 3637] <... futex resumed>) = 0 [pid 3635] mkdir("./file1/file0", 000 [pid 3634] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3632] mkdir("./file1/file0", 000 [pid 3629] futex(0x7f44139c64bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3628] futex(0x7f44139c64bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] futex(0x7f44139c64bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3640] rmdir("./file0/file0" [pid 3633] mkdir("./file1/file0", 000 [pid 3631] mkdir("./file1/file0", 000 [pid 3642] rmdir("./file0/file0" [pid 3640] <... rmdir resumed>) = 0 [pid 3638] <... rmdir resumed>) = 0 [pid 3637] rmdir("./file0/file0" [pid 3635] <... mkdir resumed>) = -1 EEXIST (File exists) [ 48.608595][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 48.643917][ T3636] RIP: 0010:drop_nlink+0xb9/0x100 [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... mkdir resumed>) = 0 [pid 3632] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3631] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3642] <... rmdir resumed>) = 0 [pid 3640] rmdir("./file0/file0" [pid 3638] rmdir("./file0/file0" [pid 3637] <... rmdir resumed>) = 0 [pid 3635] mkdir("./file1/file0", 000 [pid 3634] <... mkdir resumed>) = 0 [pid 3633] mkdir("./file1/file0", 000 [pid 3632] mkdir("./file1/file0", 000 [pid 3630] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3642] rmdir("./file0/file0" [pid 3640] <... rmdir resumed>) = -1 ENOENT (No such file or directory) [pid 3638] <... rmdir resumed>) = 0 [pid 3637] rmdir("./file0/file0" [pid 3635] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... mkdir resumed>) = 0 [pid 3632] <... mkdir resumed>) = 0 [pid 3631] mkdir("./file1/file0", 000 [pid 3630] futex(0x7f44139c64b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] <... rmdir resumed>) = 0 [pid 3640] rmdir("./file0/file0" [pid 3639] <... futex resumed>) = 0 [pid 3638] rmdir("./file0/file0" [pid 3637] <... rmdir resumed>) = -1 ENOENT (No such file or directory) [pid 3635] mkdir("./file1/file0", 000 [pid 3634] <... mkdir resumed>) = 0 [pid 3633] mkdir("./file1/file0", 000 [pid 3632] mkdir("./file1/file0", 000 [pid 3630] <... futex resumed>) = 1 [pid 3642] rmdir("./file0/file0" [pid 3640] <... rmdir resumed>) = 0 [pid 3639] rmdir("./file0/file0" [pid 3638] <... rmdir resumed>) = 0 [pid 3637] rmdir("./file0/file0" [pid 3635] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 3634] mkdir("./file1/file0", 000 [pid 3633] <... mkdir resumed>) = 0 [pid 3632] <... mkdir resumed>) = 0 [pid 3630] futex(0x7f44139c64bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3627] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3642] <... rmdir resumed>) = 0 [ 48.650108][ T3636] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 8d f3 e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 27 f9 95 ff <0f> 0b eb 8a 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 63 ff ff ff 4c [ 48.674259][ T3636] RSP: 0018:ffffc90003dafc50 EFLAGS: 00010293 [ 48.681092][ T3636] RAX: ffffffff81f1e6f9 RBX: 1ffff1100e2a04ed RCX: ffff888021630000 [ 48.690108][ T3636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.699321][ T3636] RBP: 0000000000000000 R08: ffffffff81f1e67e R09: ffffed100e2915dd [pid 3640] rmdir("./file0/file0" [pid 3639] <... rmdir resumed>) = 0 [pid 3638] rmdir("./file0/file0" [pid 3635] mkdir("./file1/file0", 000 [pid 3634] <... mkdir resumed>) = 0 [pid 3633] mkdir("./file1/file0", 000 [pid 3632] mkdir("./file1/file0", 000 [pid 3629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3628] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3626] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3642] rmdir("./file0/file0" [ 48.700328][ T3640] ------------[ cut here ]------------ [ 48.707984][ T3636] R10: ffffed100e2915dd R11: 1ffff1100e2915dc R12: ffff888071502768 [ 48.714536][ T3638] ------------[ cut here ]------------ [ 48.721367][ T3636] R13: dffffc0000000000 R14: ffff888071502720 R15: dffffc0000000000 [ 48.730818][ T3642] ------------[ cut here ]------------ [ 48.735165][ T3636] FS: 00007f44138cc700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 48.740151][ T3642] WARNING: CPU: 1 PID: 3642 at fs/inode.c:330 drop_nlink+0xb9/0x100 [pid 3639] rmdir("./file0/file0" [pid 3635] <... mkdir resumed>) = 0 [pid 3634] mkdir("./file1/file0", 000 [pid 3639] <... rmdir resumed>) = 0 [pid 3637] <... rmdir resumed>) = 0 [pid 3635] mkdir("./file1/file0", 000 [pid 3631] <... mkdir resumed>) = 0 [pid 3630] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3639] rmdir("./file0/file0" [pid 3637] rmdir("./file0/file0" [pid 3635] <... mkdir resumed>) = 0 [pid 3637] <... rmdir resumed>) = -1 ENOENT (No such file or directory) [pid 3635] mkdir("./file1/file0", 000 [pid 3637] rmdir("./file0/file0") = -1 ENOENT (No such file or directory) [pid 3637] rmdir("./file0/file0") = -1 ENOENT (No such file or directory) [pid 3637] rmdir("./file0/file0") = -1 ENOENT (No such file or directory) [pid 3631] mkdir("./file1/file0", 000 [pid 3637] rmdir("./file0/file0") = -1 ENOENT (No such file or directory) [pid 3637] rmdir("./file0/file0") = -1 ENOENT (No such file or directory) [pid 3637] rmdir("./file0/file0") = -1 ENOENT (No such file or directory) [pid 3637] rmdir("./file0/file0") = -1 ENOENT (No such file or directory) [pid 3637] rmdir("./file0/file0" [pid 3639] <... rmdir resumed>) = 0 [pid 3639] rmdir("./file0/file0" [pid 3637] <... rmdir resumed>) = 0 [pid 3635] <... mkdir resumed>) = 0 [pid 3631] <... mkdir resumed>) = 0 [ 48.749772][ T3636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.764311][ T3638] WARNING: CPU: 0 PID: 3638 at fs/inode.c:330 drop_nlink+0xb9/0x100 [ 48.773486][ T3640] WARNING: CPU: 0 PID: 3640 at fs/inode.c:330 drop_nlink+0xb9/0x100 [ 48.782929][ T3636] CR2: 0000560984862088 CR3: 0000000018f51000 CR4: 00000000003506f0 [ 48.786099][ T3642] Modules linked in: [ 48.791397][ T3636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.799176][ T3639] ------------[ cut here ]------------ [pid 3637] rmdir("./file0/file0" [pid 3635] mkdir("./file1/file0", 000 [ 48.803983][ T3640] Modules linked in: [ 48.812918][ T3639] WARNING: CPU: 1 PID: 3639 at fs/inode.c:330 drop_nlink+0xb9/0x100 [ 48.813379][ T3636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.823355][ T3642] [ 48.829353][ T3640] CPU: 0 PID: 3640 Comm: syz-executor301 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 48.833655][ T3638] Modules linked in: [ 48.842200][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 48.844124][ T3642] CPU: 1 PID: 3642 Comm: syz-executor301 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 48.846361][ T3636] Call Trace: [ 48.857637][ T3638] [ 48.867504][ T3640] RIP: 0010:drop_nlink+0xb9/0x100 [ 48.871967][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 48.877670][ T3639] Modules linked in: [pid 3631] mkdir("./file1/file0", 000) = 0 [ 48.887803][ T3640] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 8d f3 e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 27 f9 95 ff <0f> 0b eb 8a 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 63 ff ff ff 4c [ 48.890027][ T3637] ------------[ cut here ]------------ [ 48.911672][ T3640] RSP: 0018:ffffc90003defc50 EFLAGS: 00010293 [ 48.919136][ T3638] CPU: 1 PID: 3638 Comm: syz-executor301 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 48.923617][ T3639] [ 48.935408][ T3636] [ 48.939044][ T3640] RAX: ffffffff81f1e6f9 RBX: 1ffff1100e2a0a73 RCX: ffff888018eeba80 [ 48.940144][ T3636] vfat_rmdir+0x2e8/0x490 [ 48.947371][ T3639] CPU: 0 PID: 3639 Comm: syz-executor301 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 48.953380][ T3642] RIP: 0010:drop_nlink+0xb9/0x100 [ 48.962153][ T3640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.968363][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 48.975331][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 48.986838][ T3636] ? vfat_mkdir+0x340/0x340 [ 48.995673][ T3640] RBP: 0000000000000000 R08: ffffffff81f1e67e R09: ffffed100e291c47 [ 49.001561][ T3637] WARNING: CPU: 1 PID: 3637 at fs/inode.c:330 drop_nlink+0xb9/0x100 [ 49.008121][ T3640] R10: ffffed100e291c47 R11: 1ffff1100e291c46 R12: ffff888071505398 [ 49.017321][ T3642] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 8d f3 e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 27 f9 95 ff <0f> 0b eb 8a 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 63 ff ff ff 4c [ 49.024261][ T3639] RIP: 0010:drop_nlink+0xb9/0x100 [ 49.045334][ T3636] ? down_write+0x1a5/0x270 [ 49.048943][ T3640] R13: dffffc0000000000 R14: ffff888071505350 R15: dffffc0000000000 [ 49.054658][ T3637] Modules linked in: [ 49.061650][ T3640] FS: 00007f44138cc700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 49.062976][ T3638] RIP: 0010:drop_nlink+0xb9/0x100 [ 49.074728][ T3639] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 8d f3 e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 27 f9 95 ff <0f> 0b eb 8a 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 63 ff ff ff 4c [ 49.081153][ T3636] ? down_read_killable+0x80/0x80 [ 49.104357][ T3640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.105999][ T3637] [ 49.111192][ T3640] CR2: 0000560984862088 CR3: 000000007a6a8000 CR4: 00000000003506f0 [ 49.114718][ T3638] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 8d f3 e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 27 f9 95 ff <0f> 0b eb 8a 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 63 ff ff ff 4c [ 49.121666][ T3640] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.142778][ T3637] CPU: 1 PID: 3637 Comm: syz-executor301 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 49.149612][ T3639] RSP: 0018:ffffc90003ddfc50 EFLAGS: 00010293 [ 49.159664][ T3640] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.161205][ T3642] RSP: 0018:ffffc90003e0fc50 EFLAGS: 00010293 [ 49.166008][ T3639] [ 49.175198][ T3636] ? do_raw_spin_unlock+0x134/0x8a0 [ 49.180143][ T3640] Call Trace: [ 49.183772][ T3642] [ 49.187781][ T3640] [ 49.192445][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 49.193498][ T3639] RAX: ffffffff81f1e6f9 RBX: 1ffff1100e29c8df RCX: ffff888018ee9d40 [ 49.197136][ T3642] RAX: ffffffff81f1e6f9 RBX: 1ffff1100e29c359 RCX: ffff888018eed7c0 [ 49.206678][ T3640] vfat_rmdir+0x2e8/0x490 [ 49.215650][ T3636] ? bpf_lsm_inode_rmdir+0x5/0x10 [ 49.231689][ T3639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.231704][ T3639] RBP: 0000000000000000 R08: ffffffff81f1e67e R09: ffffed100e291fc0 [ 49.231717][ T3639] R10: ffffed100e291fc0 R11: 1ffff1100e291fbf R12: ffff8880714e46f8 [ 49.231731][ T3639] R13: dffffc0000000000 R14: ffff8880714e46b0 R15: dffffc0000000000 [ 49.240920][ T3637] RIP: 0010:drop_nlink+0xb9/0x100 [ 49.263749][ T3640] ? vfat_mkdir+0x340/0x340 [ 49.270385][ T3638] RSP: 0018:ffffc90003dcfc50 EFLAGS: 00010293 [ 49.273822][ T3639] FS: 00007f44138cc700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 49.274886][ T3638] [ 49.280202][ T3640] ? down_write+0x1a5/0x270 [ 49.289928][ T3636] ? security_inode_rmdir+0xfa/0x130 [ 49.292024][ T3639] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.297635][ T3642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.301469][ T3640] ? down_read_killable+0x80/0x80 [ 49.309046][ T3636] vfs_rmdir+0x358/0x4b0 [ 49.316313][ T3639] CR2: 0000560984862088 CR3: 0000000078612000 CR4: 00000000003506f0 [ 49.322621][ T3638] RAX: ffffffff81f1e6f9 RBX: 1ffff1100e29c1c5 RCX: ffff888024c11d40 [ 49.325919][ T3639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.334834][ T3637] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 8d f3 e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 27 f9 95 ff <0f> 0b eb 8a 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 63 ff ff ff 4c [ 49.341746][ T3640] ? do_raw_spin_unlock+0x134/0x8a0 [ 49.350570][ T3642] RBP: 0000000000000000 R08: ffffffff81f1e67e R09: ffffed100e291dc0 [ 49.369443][ T3639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.375845][ T3636] do_rmdir+0x39d/0x610 [ 49.382689][ T3639] Call Trace: [ 49.392079][ T3638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.405918][ T3640] ? bpf_lsm_inode_rmdir+0x5/0x10 [ 49.405949][ T3640] ? security_inode_rmdir+0xfa/0x130 [ 49.412706][ T3636] ? d_delete_notify+0x150/0x150 [ 49.416544][ T3639] [ 49.422861][ T3637] RSP: 0018:ffffc90003dbfc50 EFLAGS: 00010293 [ 49.424679][ T3639] vfat_rmdir+0x2e8/0x490 [ 49.425738][ T3636] ? strncpy_from_user+0x1d6/0x330 [ 49.431103][ T3640] vfs_rmdir+0x358/0x4b0 [ 49.436913][ T3637] [ 49.440612][ T3639] ? vfat_mkdir+0x340/0x340 [ 49.446244][ T3637] RAX: ffffffff81f1e6f9 RBX: 1ffff1100e2a0b3d RCX: ffff8880232c8000 [ 49.447242][ T3640] do_rmdir+0x39d/0x610 [ 49.452939][ T3638] RBP: 0000000000000000 R08: ffffffff81f1e67e R09: ffffed100e28834c [ 49.459803][ T3639] ? down_write+0x1a5/0x270 [ 49.465192][ T3636] __x64_sys_rmdir+0x45/0x50 [ 49.471936][ T3640] ? d_delete_notify+0x150/0x150 [ 49.477667][ T3642] R10: ffffed100e291dc0 R11: 1ffff1100e291dbf R12: ffff8880714e1ac8 [ 49.481138][ T3639] ? down_read_killable+0x80/0x80 [ 49.487343][ T3637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.494235][ T3640] ? strncpy_from_user+0x1d6/0x330 [ 49.500521][ T3636] do_syscall_64+0x3d/0xb0 [ 49.507293][ T3639] ? do_raw_spin_unlock+0x134/0x8a0 [ 49.514064][ T3642] R13: dffffc0000000000 R14: ffff8880714e1a80 R15: dffffc0000000000 [ 49.516940][ T3640] __x64_sys_rmdir+0x45/0x50 [ 49.523581][ T3638] R10: ffffed100e28834c R11: 1ffff1100e28834b R12: ffff8880714e0e28 [ 49.530157][ T3639] ? bpf_lsm_inode_rmdir+0x5/0x10 [ 49.535975][ T3637] RBP: 0000000000000000 R08: ffffffff81f1e67e R09: ffffed100e287ddd [ 49.555804][ T3640] do_syscall_64+0x3d/0xb0 [ 49.557458][ T3642] FS: 00007f44138cc700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 49.560539][ T3640] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.570861][ T3636] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.581340][ T3639] ? security_inode_rmdir+0xfa/0x130 [ 49.583010][ T3638] R13: dffffc0000000000 R14: ffff8880714e0de0 R15: dffffc0000000000 [ 49.586999][ T3640] RIP: 0033:0x7f44139418c9 [ 49.596193][ T3636] RIP: 0033:0x7f44139418c9 [ 49.599247][ T3639] vfs_rmdir+0x358/0x4b0 [ 49.604779][ T3642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.608140][ T3639] do_rmdir+0x39d/0x610 [ 49.616016][ T3636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.618981][ T3640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.640036][ T3637] R10: ffffed100e287ddd R11: 1ffff1100e287ddc R12: ffff8880715059e8 [ 49.658218][ T3639] ? d_delete_notify+0x150/0x150 [ 49.667088][ T3638] FS: 00007f44138cc700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 49.671641][ T3639] ? strncpy_from_user+0x1d6/0x330 [ 49.681637][ T3642] CR2: 0000556e456c50c8 CR3: 000000007a72a000 CR4: 00000000003506e0 [ 49.693367][ T3639] __x64_sys_rmdir+0x45/0x50 [ 49.693394][ T3639] do_syscall_64+0x3d/0xb0 [ 49.699411][ T3638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.709229][ T3639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.710581][ T3638] CR2: 0000556e456c50c8 CR3: 0000000078611000 CR4: 00000000003506e0 [ 49.715618][ T3640] RSP: 002b:00007f44138cc208 EFLAGS: 00000246 [ 49.723273][ T3639] RIP: 0033:0x7f44139418c9 [ 49.724411][ T3642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.729588][ T3639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.735009][ T3636] RSP: 002b:00007f44138cc208 EFLAGS: 00000246 [ 49.742166][ T3640] ORIG_RAX: 0000000000000054 [ 49.763503][ T3642] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.768039][ T3639] RSP: 002b:00007f44138cc208 EFLAGS: 00000246 [ 49.773936][ T3638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.780684][ T3637] R13: dffffc0000000000 R14: ffff8880715059a0 R15: dffffc0000000000 [ 49.788057][ T3642] Call Trace: [ 49.794895][ T3639] ORIG_RAX: 0000000000000054 [ 49.804175][ T3638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.806293][ T3640] RAX: ffffffffffffffda RBX: 000000000000003d RCX: 00007f44139418c9 [ 49.812306][ T3638] Call Trace: [ 49.826840][ T3639] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 00007f44139418c9 [ 49.832304][ T3636] ORIG_RAX: 0000000000000054 [ 49.838274][ T3637] FS: 00007f44138cc700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 49.852042][ T3639] RDX: 00007f44139418c9 RSI: 00007f44139418c9 RDI: 00000000200000c0 [ 49.852996][ T3642] [ 49.860310][ T3640] RDX: 00007f44139418c9 RSI: ffffffffffffffb8 RDI: 00000000200000c0 [ 49.871315][ T3637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.878220][ T3640] RBP: 00007f44139c64b0 R08: 00007f44139c64b8 R09: 00007f44139c64b8 [ 49.886553][ T3639] RBP: 00007f44139c64b0 R08: 00007f44139c64b8 R09: 00007f44139c64b8 [ 49.887990][ T3636] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 00007f44139418c9 [ 49.894806][ T3640] R10: 00007f44139c64b8 R11: 0000000000000246 R12: 00007f44139c64bc [ 49.904537][ T3638] [ 49.910850][ T3639] R10: 00007f44139c64b8 R11: 0000000000000246 R12: 00007f44139c64bc [ 49.922095][ T3640] R13: 00007ffcd8bb6e0f R14: 00007f44138cc300 R15: 0000000000022000 [ 49.923207][ T3637] CR2: 0000560984862088 CR3: 00000000231d1000 CR4: 00000000003506f0 [ 49.930361][ T3639] R13: 00007ffcd8bb6e0f R14: 00007f44138cc300 R15: 0000000000022000 [ 49.939788][ T3642] vfat_rmdir+0x2e8/0x490 [ 49.946390][ T3640] [ 49.952253][ T3638] vfat_rmdir+0x2e8/0x490 [ 49.953833][ T3640] Kernel panic - not syncing: panic_on_warn set ... [ 49.953843][ T3640] CPU: 0 PID: 3640 Comm: syz-executor301 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 49.953860][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 49.953868][ T3640] Call Trace: [ 49.953874][ T3640] [ 49.953881][ T3640] dump_stack_lvl+0x1b1/0x28e [ 49.953907][ T3640] ? nf_tcp_handle_invalid+0x62e/0x62e [ 49.953927][ T3640] ? panic+0x710/0x710 [ 49.953957][ T3640] ? vscnprintf+0x59/0x80 [ 49.953972][ T3640] ? __destroy_inode+0x5a0/0x5e0 [ 49.953992][ T3640] panic+0x2d6/0x710 [ 49.954016][ T3640] ? __warn+0x131/0x220 [ 49.954036][ T3640] ? memcpy_page_flushcache+0xfc/0xfc [ 49.954074][ T3640] ? drop_nlink+0xb9/0x100 [ 49.954093][ T3640] __warn+0x1fa/0x220 [ 49.954113][ T3640] ? drop_nlink+0xb9/0x100 [ 49.954131][ T3640] report_bug+0x1b3/0x2d0 [ 49.954158][ T3640] handle_bug+0x3d/0x70 [ 49.954177][ T3640] exc_invalid_op+0x16/0x40 [ 49.954196][ T3640] asm_exc_invalid_op+0x16/0x20 [ 49.954215][ T3640] RIP: 0010:drop_nlink+0xb9/0x100 [ 49.954233][ T3640] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 8d f3 e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 27 f9 95 ff <0f> 0b eb 8a 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 63 ff ff ff 4c [ 49.954250][ T3640] RSP: 0018:ffffc90003defc50 EFLAGS: 00010293 [ 49.954266][ T3640] RAX: ffffffff81f1e6f9 RBX: 1ffff1100e2a0a73 RCX: ffff888018eeba80 [ 49.954277][ T3640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.954287][ T3640] RBP: 0000000000000000 R08: ffffffff81f1e67e R09: ffffed100e291c47 [ 49.954298][ T3640] R10: ffffed100e291c47 R11: 1ffff1100e291c46 R12: ffff888071505398 [ 49.954309][ T3640] R13: dffffc0000000000 R14: ffff888071505350 R15: dffffc0000000000 [ 49.954327][ T3640] ? drop_nlink+0x3e/0x100 [ 49.954343][ T3640] ? drop_nlink+0xb9/0x100 [ 49.954372][ T3640] vfat_rmdir+0x2e8/0x490 [ 49.954400][ T3640] ? vfat_mkdir+0x340/0x340 [ 49.954420][ T3640] ? down_write+0x1a5/0x270 [ 49.954439][ T3640] ? down_read_killable+0x80/0x80 [ 49.954455][ T3640] ? do_raw_spin_unlock+0x134/0x8a0 [ 49.954480][ T3640] ? bpf_lsm_inode_rmdir+0x5/0x10 [ 49.954498][ T3640] ? security_inode_rmdir+0xfa/0x130 [ 49.954518][ T3640] vfs_rmdir+0x358/0x4b0 [ 49.954542][ T3640] do_rmdir+0x39d/0x610 [ 49.954563][ T3640] ? d_delete_notify+0x150/0x150 [ 49.954581][ T3640] ? strncpy_from_user+0x1d6/0x330 [ 49.954617][ T3640] __x64_sys_rmdir+0x45/0x50 [ 49.954634][ T3640] do_syscall_64+0x3d/0xb0 [ 49.954655][ T3640] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.954673][ T3640] RIP: 0033:0x7f44139418c9 [ 49.954689][ T3640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.954701][ T3640] RSP: 002b:00007f44138cc208 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 49.954716][ T3640] RAX: ffffffffffffffda RBX: 000000000000003d RCX: 00007f44139418c9 [ 49.954727][ T3640] RDX: 00007f44139418c9 RSI: ffffffffffffffb8 RDI: 00000000200000c0 [ 49.954737][ T3640] RBP: 00007f44139c64b0 R08: 00007f44139c64b8 R09: 00007f44139c64b8 [ 49.954748][ T3640] R10: 00007f44139c64b8 R11: 0000000000000246 R12: 00007f44139c64bc [ 49.954758][ T3640] R13: 00007ffcd8bb6e0f R14: 00007f44138cc300 R15: 0000000000022000 [ 49.954787][ T3640] [ 49.958017][ T3640] Kernel Offset: disabled [ 50.283598][ T3640] Rebooting in 86400 seconds..