./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1621583012
<...>
Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts.
execve("./syz-executor1621583012", ["./syz-executor1621583012"], 0x7ffe63df5a30 /* 10 vars */) = 0
brk(NULL) = 0x555571f99000
brk(0x555571f99e00) = 0x555571f99e00
arch_prctl(ARCH_SET_FS, 0x555571f99480) = 0
set_tid_address(0x555571f99750) = 5219
set_robust_list(0x555571f99760, 24) = 0
rseq(0x555571f99da0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1621583012", 4096) = 28
getrandom("\xca\xb8\x6f\x41\xc4\x3f\xb8\x85", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555571f99e00
brk(0x555571fbae00) = 0x555571fbae00
brk(0x555571fbb000) = 0x555571fbb000
mprotect(0x7fdb13e77000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7fdb13dc9a50, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fdb13dd23e0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7fdb13dc9a50, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fdb13dd23e0}, NULL, 8) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5221 attached
, child_tidptr=0x555571f99750) = 5221
[pid 5221] set_robust_list(0x555571f99760, 24) = 0
[pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5221] setpgid(0, 0) = 0
[pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5221] write(3, "1000", 4) = 4
[pid 5221] close(3) = 0
executing program
[pid 5221] write(1, "executing program\n", 18) = 18
[pid 5221] memfd_create("syzkaller", 0) = 3
[pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdb0b800000
[pid 5221] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5221] munmap(0x7fdb0b800000, 138412032) = 0
[pid 5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5221] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5221] close(3) = 0
[pid 5221] close(4) = 0
[pid 5221] mkdir("./file1", 0777) = 0
[ 55.527192][ T5221] loop0: detected capacity change from 0 to 32768
[ 55.559386][ T5221] =======================================================
[ 55.559386][ T5221] WARNING: The mand mount option has been deprecated and
[ 55.559386][ T5221] and is ignored by this kernel. Remove the mand
[ 55.559386][ T5221] option from the mount to silence this warning.
[ 55.559386][ T5221] =======================================================
[ 55.607578][ T5221] JBD2: Ignoring recovery information on journal
[pid 5221] mount("/dev/loop0", "./file1", "ocfs2", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME, "acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=00000000000000000006,coherency=ful"...) = 0
[pid 5221] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 5221] chdir("./file1") = 0
[pid 5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5221] mkdir("./file0", 000) = 0
[pid 5221] mkdir("./file2", 0777) = 0
[pid 5221] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[ 55.631033][ T5221] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 55.680385][ T5221] overlayfs: upper fs does not support tmpfile.
[ 55.689213][ T5221] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 55.696659][ T5221]
[ 55.698981][ T5221] ======================================================
[ 55.705980][ T5221] WARNING: possible circular locking dependency detected
[ 55.712987][ T5221] 6.12.0-rc2-syzkaller-00100-geb952c47d154 #0 Not tainted
[ 55.720073][ T5221] ------------------------------------------------------
[ 55.727070][ T5221] syz-executor162/5221 is trying to acquire lock:
[ 55.733464][ T5221] ffff8880728d42c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x132/0x2870
[ 55.747330][ T5221]
[ 55.747330][ T5221] but task is already holding lock:
[ 55.754711][ T5221] ffff888072a086f8 (&oi->ip_xattr_sem){+.+.}-{3:3}, at: ocfs2_xattr_set+0x633/0x1930
[ 55.764194][ T5221]
[ 55.764194][ T5221] which lock already depends on the new lock.
[ 55.764194][ T5221]
[ 55.774580][ T5221]
[ 55.774580][ T5221] the existing dependency chain (in reverse order) is:
[ 55.783575][ T5221]
[ 55.783575][ T5221] -> #4 (&oi->ip_xattr_sem){+.+.}-{3:3}:
[ 55.791388][ T5221] lock_acquire+0x1ed/0x550
[ 55.796407][ T5221] down_write+0x99/0x220
[ 55.801166][ T5221] ocfs2_xattr_set_handle+0x539/0xa10
[ 55.807046][ T5221] ocfs2_init_security_set+0xbd/0xd0
[ 55.812842][ T5221] ocfs2_mknod+0x1ccf/0x2b40
[ 55.817940][ T5221] ocfs2_mkdir+0x1ab/0x480
[ 55.822865][ T5221] vfs_mkdir+0x2f9/0x4f0
[ 55.827616][ T5221] do_mkdirat+0x264/0x3a0
[ 55.832453][ T5221] __x64_sys_mkdir+0x6c/0x80
[ 55.837556][ T5221] do_syscall_64+0xf3/0x230
[ 55.842582][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 55.849012][ T5221]
[ 55.849012][ T5221] -> #3 (jbd2_handle){.+.+}-{0:0}:
[ 55.856311][ T5221] lock_acquire+0x1ed/0x550
[ 55.861330][ T5221] start_this_handle+0x1eb4/0x2110
[ 55.866950][ T5221] jbd2__journal_start+0x2da/0x5d0
[ 55.872575][ T5221] jbd2_journal_start+0x29/0x40
[ 55.877935][ T5221] ocfs2_start_trans+0x3c9/0x700
[ 55.883391][ T5221] ocfs2_reserve_suballoc_bits+0x9f6/0x4eb0
[ 55.889792][ T5221] ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0
[ 55.896625][ T5221] ocfs2_mknod+0x143a/0x2b40
[ 55.901722][ T5221] ocfs2_mkdir+0x1ab/0x480
[ 55.906647][ T5221] vfs_mkdir+0x2f9/0x4f0
[ 55.911398][ T5221] do_mkdirat+0x264/0x3a0
[ 55.916234][ T5221] __x64_sys_mkdir+0x6c/0x80
[ 55.921330][ T5221] do_syscall_64+0xf3/0x230
[ 55.926338][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 55.932743][ T5221]
[ 55.932743][ T5221] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[ 55.941329][ T5221] lock_acquire+0x1ed/0x550
[ 55.946343][ T5221] down_read+0xb1/0xa40
[ 55.951005][ T5221] ocfs2_start_trans+0x3be/0x700
[ 55.956452][ T5221] ocfs2_reserve_suballoc_bits+0x9f6/0x4eb0
[ 55.962850][ T5221] ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0
[ 55.969682][ T5221] ocfs2_mknod+0x143a/0x2b40
[ 55.974877][ T5221] ocfs2_mkdir+0x1ab/0x480
[ 55.979813][ T5221] vfs_mkdir+0x2f9/0x4f0
[ 55.984576][ T5221] do_mkdirat+0x264/0x3a0
[ 55.989421][ T5221] __x64_sys_mkdir+0x6c/0x80
[ 55.994523][ T5221] do_syscall_64+0xf3/0x230
[ 55.999536][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.005943][ T5221]
[ 56.005943][ T5221] -> #1 (sb_internal#2){.+.+}-{0:0}:
[ 56.013415][ T5221] lock_acquire+0x1ed/0x550
[ 56.018517][ T5221] ocfs2_start_trans+0x2b9/0x700
[ 56.023964][ T5221] ocfs2_mknod+0x150c/0x2b40
[ 56.029066][ T5221] ocfs2_mkdir+0x1ab/0x480
[ 56.033989][ T5221] vfs_mkdir+0x2f9/0x4f0
[ 56.038736][ T5221] do_mkdirat+0x264/0x3a0
[ 56.043574][ T5221] __x64_sys_mkdir+0x6c/0x80
[ 56.048807][ T5221] do_syscall_64+0xf3/0x230
[ 56.053817][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.060221][ T5221]
[ 56.060221][ T5221] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[ 56.070738][ T5221] validate_chain+0x18ef/0x5920
[ 56.076107][ T5221] __lock_acquire+0x1384/0x2050
[ 56.081471][ T5221] lock_acquire+0x1ed/0x550
[ 56.086483][ T5221] down_write+0x99/0x220
[ 56.091234][ T5221] ocfs2_reserve_local_alloc_bits+0x132/0x2870
[ 56.097987][ T5221] ocfs2_reserve_clusters_with_limit+0x1b8/0xb60
[ 56.104827][ T5221] ocfs2_init_xattr_set_ctxt+0x420/0x900
[ 56.110976][ T5221] ocfs2_xattr_set+0xf4e/0x1930
[ 56.116335][ T5221] __vfs_setxattr+0x468/0x4a0
[ 56.121520][ T5221] __vfs_setxattr_noperm+0x12e/0x660
[ 56.127317][ T5221] vfs_setxattr+0x221/0x430
[ 56.132332][ T5221] ovl_get_workdir+0xd90/0x1920
[ 56.137695][ T5221] ovl_fill_super+0x12a8/0x3560
[ 56.143054][ T5221] get_tree_nodev+0xb7/0x140
[ 56.148154][ T5221] vfs_get_tree+0x90/0x2b0
[ 56.153078][ T5221] do_new_mount+0x2be/0xb40
[ 56.158091][ T5221] __se_sys_mount+0x2d6/0x3c0
[ 56.163278][ T5221] do_syscall_64+0xf3/0x230
[ 56.168289][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.174694][ T5221]
[ 56.174694][ T5221] other info that might help us debug this:
[ 56.174694][ T5221]
[ 56.184904][ T5221] Chain exists of:
[ 56.184904][ T5221] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem
[ 56.184904][ T5221]
[ 56.200721][ T5221] Possible unsafe locking scenario:
[ 56.200721][ T5221]
[ 56.208159][ T5221] CPU0 CPU1
[ 56.213509][ T5221] ---- ----
[ 56.218857][ T5221] lock(&oi->ip_xattr_sem);
[ 56.223436][ T5221] lock(jbd2_handle);
[ 56.230012][ T5221] lock(&oi->ip_xattr_sem);
[ 56.237107][ T5221] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[ 56.244557][ T5221]
[ 56.244557][ T5221] *** DEADLOCK ***
[ 56.244557][ T5221]
[ 56.252690][ T5221] 4 locks held by syz-executor162/5221:
[ 56.258216][ T5221] #0: ffff8880297980e0 (&type->s_umount_key#44/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0
[ 56.268316][ T5221] #1: ffff888025166420 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[ 56.277451][ T5221] #2: ffff888072a089c0 (&sb->s_type->i_mutex_key#16){++++}-{3:3}, at: vfs_setxattr+0x1e1/0x430
[ 56.287889][ T5221] #3: ffff888072a086f8 (&oi->ip_xattr_sem){+.+.}-{3:3}, at: ocfs2_xattr_set+0x633/0x1930
[ 56.297810][ T5221]
[ 56.297810][ T5221] stack backtrace:
[ 56.303717][ T5221] CPU: 0 UID: 0 PID: 5221 Comm: syz-executor162 Not tainted 6.12.0-rc2-syzkaller-00100-geb952c47d154 #0
[ 56.314816][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 56.324867][ T5221] Call Trace:
[ 56.328131][ T5221]
[ 56.331050][ T5221] dump_stack_lvl+0x241/0x360
[ 56.335729][ T5221] ? __pfx_dump_stack_lvl+0x10/0x10
[ 56.340914][ T5221] ? __pfx__printk+0x10/0x10
[ 56.345588][ T5221] print_circular_bug+0x13a/0x1b0
[ 56.350601][ T5221] check_noncircular+0x36a/0x4a0
[ 56.355528][ T5221] ? __pfx_check_noncircular+0x10/0x10
[ 56.360972][ T5221] ? lockdep_lock+0x123/0x2b0
[ 56.365644][ T5221] validate_chain+0x18ef/0x5920
[ 56.370496][ T5221] ? __pfx_validate_chain+0x10/0x10
[ 56.375691][ T5221] ? mark_lock+0x9a/0x360
[ 56.380013][ T5221] ? ocfs2_get_system_file_inode+0x1d4/0x7b0
[ 56.385982][ T5221] ? __pfx_lock_release+0x10/0x10
[ 56.391019][ T5221] ? mark_lock+0x9a/0x360
[ 56.395334][ T5221] __lock_acquire+0x1384/0x2050
[ 56.400181][ T5221] lock_acquire+0x1ed/0x550
[ 56.404674][ T5221] ? ocfs2_reserve_local_alloc_bits+0x132/0x2870
[ 56.410999][ T5221] ? __pfx_lock_acquire+0x10/0x10
[ 56.416016][ T5221] ? __pfx___might_resched+0x10/0x10
[ 56.421292][ T5221] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10
[ 56.427607][ T5221] ? __pfx_validate_chain+0x10/0x10
[ 56.432795][ T5221] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 56.438764][ T5221] down_write+0x99/0x220
[ 56.442994][ T5221] ? ocfs2_reserve_local_alloc_bits+0x132/0x2870
[ 56.449317][ T5221] ? __pfx_down_write+0x10/0x10
[ 56.454156][ T5221] ocfs2_reserve_local_alloc_bits+0x132/0x2870
[ 56.460302][ T5221] ? mark_lock+0x9a/0x360
[ 56.464619][ T5221] ? __lock_acquire+0x1384/0x2050
[ 56.469637][ T5221] ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10
[ 56.476219][ T5221] ? __pfx_lock_acquire+0x10/0x10
[ 56.481239][ T5221] ? ocfs2_alloc_should_use_local+0x155/0x320
[ 56.487298][ T5221] ? __pfx_lock_release+0x10/0x10
[ 56.492316][ T5221] ? do_raw_spin_lock+0x14f/0x370
[ 56.497332][ T5221] ? do_raw_spin_unlock+0x13c/0x8b0
[ 56.502519][ T5221] ? _raw_spin_unlock+0x28/0x50
[ 56.507359][ T5221] ? ocfs2_alloc_should_use_local+0x155/0x320
[ 56.513415][ T5221] ocfs2_reserve_clusters_with_limit+0x1b8/0xb60
[ 56.519737][ T5221] ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10
[ 56.526578][ T5221] ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[ 56.532723][ T5221] ? ocfs2_xattr_set+0xf00/0x1930
[ 56.537741][ T5221] ocfs2_init_xattr_set_ctxt+0x420/0x900
[ 56.543367][ T5221] ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[ 56.549517][ T5221] ? up_write+0x1a9/0x590
[ 56.553836][ T5221] ? __pfx_ocfs2_truncate_log_needs_flush+0x10/0x10
[ 56.560502][ T5221] ? __pfx_up_write+0x10/0x10
[ 56.565170][ T5221] ? __kmalloc_cache_noprof+0x19c/0x2c0
[ 56.570706][ T5221] ocfs2_xattr_set+0xf4e/0x1930
[ 56.575553][ T5221] ? __pfx_ocfs2_xattr_set+0x10/0x10
[ 56.580830][ T5221] ? lockdep_hardirqs_on+0x99/0x150
[ 56.586021][ T5221] ? raw_spin_rq_unlock_irq+0x17/0x90
[ 56.591384][ T5221] ? mark_lock+0x9a/0x360
[ 56.595705][ T5221] ? smk_tskacc+0x300/0x370
[ 56.600208][ T5221] ? posix_xattr_acl+0xa9/0xd0
[ 56.604963][ T5221] ? evm_protect_xattr+0x4be/0xb30
[ 56.610065][ T5221] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[ 56.616037][ T5221] __vfs_setxattr+0x468/0x4a0
[ 56.620709][ T5221] __vfs_setxattr_noperm+0x12e/0x660
[ 56.625989][ T5221] vfs_setxattr+0x221/0x430
[ 56.630482][ T5221] ? __pfx_vfs_setxattr+0x10/0x10
[ 56.635496][ T5221] ? _raw_spin_unlock+0x28/0x50
[ 56.640339][ T5221] ? dput+0x37/0x2b0
[ 56.644221][ T5221] ovl_get_workdir+0xd90/0x1920
[ 56.649067][ T5221] ? __pfx_ovl_get_workdir+0x10/0x10
[ 56.654345][ T5221] ? ovl_inuse_trylock+0xab/0xf0
[ 56.659359][ T5221] ? do_raw_spin_lock+0x14f/0x370
[ 56.664379][ T5221] ? _raw_spin_unlock+0x28/0x50
[ 56.669217][ T5221] ? ovl_inuse_trylock+0xab/0xf0
[ 56.674145][ T5221] ovl_fill_super+0x12a8/0x3560
[ 56.679012][ T5221] ? __pfx___might_resched+0x10/0x10
[ 56.684301][ T5221] ? shrinker_register+0x118/0x230
[ 56.689417][ T5221] ? __pfx_lock_release+0x10/0x10
[ 56.694447][ T5221] ? __pfx_ovl_fill_super+0x10/0x10
[ 56.699640][ T5221] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 56.705442][ T5221] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 56.711413][ T5221] ? sget_fc+0x909/0x9c0
[ 56.715647][ T5221] ? __pfx_set_anon_super_fc+0x10/0x10
[ 56.721093][ T5221] ? __pfx_ovl_fill_super+0x10/0x10
[ 56.726285][ T5221] get_tree_nodev+0xb7/0x140
[ 56.730877][ T5221] vfs_get_tree+0x90/0x2b0
[ 56.735537][ T5221] do_new_mount+0x2be/0xb40
[ 56.740333][ T5221] ? __pfx_do_new_mount+0x10/0x10
[ 56.745573][ T5221] __se_sys_mount+0x2d6/0x3c0
[ 56.750347][ T5221] ? __pfx___se_sys_mount+0x10/0x10
[ 56.755558][ T5221] ? exc_page_fault+0x590/0x8c0
[ 56.760417][ T5221] ? __x64_sys_mount+0x20/0xc0
[ 56.765176][ T5221] do_syscall_64+0xf3/0x230
[ 56.769690][ T5221] ? clear_bhb_loop+0x35/0x90
[ 56.774378][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.780286][ T5221] RIP: 0033:0x7fdb13dff499
[ 56.784696][ T5221] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 56.804306][ T5221] RSP: 002b:00007ffec6c8d8f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 56.812734][ T5221] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb13dff499
[ 56.820702][ T5221] RDX: 0000000020000000 RSI: 0000000020000380 RDI: 0000000000000000
[pid 5221] mount(NULL, "./file0", "overlay", 0, "workdir=./file0,lowerdir=.,upperdir=./file2,,") = -1 EINVAL (Invalid argument)
[pid 5221] exit_group(0) = ?
[pid 5221] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5224 attached
, child_tidptr=0x555571f99750) = 5224
[pid 5224] set_robust_list(0x555571f99760, 24) = 0
[pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5224] setpgid(0, 0) = 0
[pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5224] write(3, "1000", 4) = 4
[pid 5224] close(3) = 0
[pid 5224] write(1, "executing program\n", 18executing program
) = 18
[pid 5224] memfd_create("syzkaller", 0) = 3
[pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdb0b800000
[ 56.828665][ T5221] RBP: 0000000000000000 R08: 0000000020000140 R09: 00007ffec6c8d930
[ 56.836628][ T5221] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec6c8d930
[ 56.844590][ T5221] R13: 00007ffec6c8dbb8 R14: 431bde82d7b634db R15: 00007fdb13e4803b
[ 56.852655][ T5221]
[ 56.856469][ T5221] overlayfs: upper fs missing required features.
[pid 5224] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5224] munmap(0x7fdb0b800000, 138412032) = 0
[pid 5224] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5224] close(3) = 0
[pid 5224] mkdir("./file0", 000) = 0
[pid 5224] mkdir("./file2", 0777) = 0
[pid 5224] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5224] mount(NULL, "./file0", "overlay", 0, "workdir=./file0,lowerdir=.,upperdir=./file2,,") = 0
[pid 5224] exit_group(0) = ?
[pid 5224] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5225 attached
, child_tidptr=0x555571f99750) = 5225
[pid 5225] set_robust_list(0x555571f99760, 24) = 0
[pid 5225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5225] setpgid(0, 0) = 0
[pid 5225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5225] write(3, "1000", 4) = 4
[pid 5225] close(3) = 0
[pid 5225] write(1, "executing program\n", 18executing program
) = 18
[pid 5225] memfd_create("syzkaller", 0) = 3
[pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdb0b800000
[pid 5225] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5225] munmap(0x7fdb0b800000, 138412032) = 0
[pid 5225] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5225] close(3) = 0
[pid 5225] mkdir("./file0", 000) = -1 EEXIST (File exists)
[pid 5225] mkdir("./file2", 0777) = -1 EEXIST (File exists)
[pid 5225] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5225] mount(NULL, "./file0", "overlay", 0, "workdir=./file0,lowerdir=.,upperdir=./file2,,") = -1 EINVAL (Invalid argument)
[pid 5225] exit_group(0) = ?
[pid 5225] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5225, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=8 /* 0.08 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5226 attached
, child_tidptr=0x555571f99750) = 5226
[pid 5226] set_robust_list(0x555571f99760, 24) = 0
[pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5226] setpgid(0, 0) = 0
[pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5226] write(3, "1000", 4) = 4
[pid 5226] close(3) = 0
executing program
[pid 5226] write(1, "executing program\n", 18) = 18
[pid 5226] memfd_create("syzkaller", 0) = 3
[pid 5226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdb0b800000
[ 57.310201][ T5225] overlay: filesystem on ./file0 not supported as upperdir
[pid 5226] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5226] munmap(0x7fdb0b800000, 138412032) = 0
[pid 5226] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5226] close(3) = 0
[pid 5226] mkdir("./file0", 000) = -1 EEXIST (File exists)
[pid 5226] mkdir("./file2", 0777) = -1 EEXIST (File exists)
[pid 5226] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5226] mount(NULL, "./file0", "overlay", 0, "workdir=./file0,lowerdir=.,upperdir=./file2,,") = -1 EINVAL (Invalid argument)
[pid 5226] exit_group(0) = ?
[pid 5226] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} ---
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5227 attached
, child_tidptr=0x555571f99750) = 5227
[pid 5227] set_robust_list(0x555571f99760, 24) = 0
[pid 5227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5227] setpgid(0, 0) = 0
[pid 5227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5227] write(3, "1000", 4) = 4
[pid 5227] close(3) = 0
[pid 5227] write(1, "executing program\n", 18executing program
) = 18
[ 57.508089][ T5226] overlay: filesystem on ./file0 not supported as upperdir
[pid 5227] memfd_create("syzkaller", 0) = 3
[pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdb0b800000
[pid 5227] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5227] munmap(0x7fdb0b800000, 138412032) = 0
[pid 5227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5227] close(3) = 0
[pid 5227] mkdir("./file0", 000) = -1 EEXIST (File exists)
[pid 5227] mkdir("./file2", 0777) = -1 EEXIST (File exists)
[pid 5227] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5227] mount(NULL, "./file0", "overlay", 0, "workdir=./file0,lowerdir=.,upperdir=./file2,,") = -1 EINVAL (Invalid argument)
[pid 5227] exit_group(0) = ?
[pid 5227] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5227, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=7 /* 0.07 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
[ 57.735575][ T5227] overlay: filesystem on ./file0 not supported as upperdir
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5229 attached
[pid 5229] set_robust_list(0x555571f99760, 24) = 0
[pid 5219] <... clone resumed>, child_tidptr=0x555571f99750) = 5229
[pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5229] setpgid(0, 0) = 0
[pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5229] write(3, "1000", 4) = 4
[pid 5229] close(3) = 0
executing program
[pid 5229] write(1, "executing program\n", 18) = 18
[pid 5229] memfd_create("syzkaller", 0) = 3
[pid 5229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdb0b800000
[pid 5229] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5229] munmap(0x7fdb0b800000, 138412032) = 0
[pid 5229] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5229] close(3) = 0
[pid 5229] mkdir("./file0", 000) = -1 EEXIST (File exists)
[pid 5229] mkdir("./file2", 0777) = -1 EEXIST (File exists)
[pid 5229] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5229] mount(NULL, "./file0", "overlay", 0, "workdir=./file0,lowerdir=.,upperdir=./file2,,") = -1 EINVAL (Invalid argument)
[pid 5229] exit_group(0) = ?
[pid 5229] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5229, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571f99750) = 5230
./strace-static-x86_64: Process 5230 attached
[pid 5230] set_robust_list(0x555571f99760, 24) = 0
[pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5230] setpgid(0, 0) = 0
[pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5230] write(3, "1000", 4) = 4
[pid 5230] close(3) = 0
[pid 5230] write(1, "executing program\n", 18executing program
) = 18
[pid 5230] memfd_create("syzkaller", 0) = 3
[pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdb0b800000
[ 58.054093][ T5229] overlay: filesystem on ./file0 not supported as upperdir
[pid 5230] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5230] munmap(0x7fdb0b800000, 138412032) = 0
[pid 5230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5230] close(3) = 0
[pid 5230] mkdir("./file0", 000) = -1 EEXIST (File exists)
[pid 5230] mkdir("./file2", 0777) = -1 EEXIST (File exists)
[pid 5230] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5230] mount(NULL, "./file0", "overlay", 0, "workdir=./file0,lowerdir=.,upperdir=./file2,,") = -1 EINVAL (Invalid argument)
[pid 5230] exit_group(0) = ?
[pid 5230] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5230, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=9 /* 0.09 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
[ 58.243431][ T5230] overlay: filesystem on ./file0 not supported as upperdir
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5231 attached
, child_tidptr=0x555571f99750) = 5231
[pid 5231] set_robust_list(0x555571f99760, 24) = 0
[pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5231] setpgid(0, 0) = 0
[pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5231] write(3, "1000", 4) = 4
[pid 5231] close(3) = 0
executing program
[pid 5231] write(1, "executing program\n", 18) = 18
[pid 5231] memfd_create("syzkaller", 0) = 3
[pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdb0b800000
[pid 5231] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5231] munmap(0x7fdb0b800000, 138412032) = 0
[pid 5231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5231] close(3) = 0
[pid 5231] mkdir("./file0", 000) = -1 EEXIST (File exists)
[pid 5231] mkdir("./file2", 0777) = -1 EEXIST (File exists)
[pid 5231] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5231] mount(NULL, "./file0", "overlay", 0, "workdir=./file0,lowerdir=.,upperdir=./file2,,") = -1 EINVAL (Invalid argument)
[pid 5231] exit_group(0) = ?
[pid 5231] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>Connection to 10.128.0.146 closed by remote host.
Stopping sshd: [ 58.688400][ T5231] overlay: filesystem on ./file0 not supported as upperdir
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 4888)
Stopping network: OK
Stopping iptables: OK
Stopping system message bus: done
Stopping klogd: OK
Stopping acpid: OK
Stopping syslogd: OK
[ 60.564645][ T5284] ocfs2: Unmounting device (7,0) on (node local)
umount: devtmpfs busy - remounted read-only
[ 61.015586][ T5284] EXT4-fs (sda1): re-mounted b4773fba-1738-4da0-8a90-0fe043d0a496 ro. Quota mode: none.
The system is going down NOW!
Sent SIGKILL to all processes
Requesting system poweroff
[ 63.059732][ T5285] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[ 63.065817][ T1171] cfg80211: failed to load regulatory.db
[ 63.073335][ T5285] ACPI: PM: Preparing to enter system sleep state S5
[ 63.080229][ T5285] kvm: exiting hardware virtualization
[ 63.085756][ T5285] reboot: Power down
serialport: VM disconnected.