./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2695771364 <...> forked to background, child pid 3187 no interfaces have a carrier [ 35.370740][ T3188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.385827][ T3188] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. execve("./syz-executor2695771364", ["./syz-executor2695771364"], 0x7ffcfc988d70 /* 10 vars */) = 0 brk(NULL) = 0x555556e8a000 brk(0x555556e8ac40) = 0x555556e8ac40 arch_prctl(ARCH_SET_FS, 0x555556e8a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2695771364", 4096) = 28 brk(0x555556eabc40) = 0x555556eabc40 brk(0x555556eac000) = 0x555556eac000 mprotect(0x7f85c3759000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 chmod("/dev/raw-gadget", 0666) = 0 getpid() = 3608 mkdir("./syzkaller.Vjdgc3", 0700) = 0 chmod("./syzkaller.Vjdgc3", 0777) = 0 chdir("./syzkaller.Vjdgc3") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3609 attached , child_tidptr=0x555556e8a5d0) = 3609 [pid 3609] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3609] setsid() = 1 [pid 3609] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3609] unshare(CLONE_NEWNS) = 0 [pid 3609] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3609] unshare(CLONE_NEWIPC) = 0 [pid 3609] unshare(CLONE_NEWCGROUP) = 0 [pid 3609] unshare(CLONE_NEWUTS) = 0 [pid 3609] unshare(CLONE_SYSVSEM) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "16777216", 8) = 8 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "536870912", 9) = 9 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "8192", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3609] close(3) = 0 [pid 3609] getpid() = 1 [pid 3609] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 3612] +++ killed by SIGSEGV (core dumped) +++ [pid 3610] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 3610] close(20) = -1 EBADF (Bad file descriptor) [pid 3610] close(21) = -1 EBADF (Bad file descriptor) [pid 3610] close(22) = -1 EBADF (Bad file descriptor) [pid 3610] close(23) = -1 EBADF (Bad file descriptor) [pid 3610] close(24) = -1 EBADF (Bad file descriptor) [pid 3610] close(25) = -1 EBADF (Bad file descriptor) [pid 3610] close(26) = -1 EBADF (Bad file descriptor) [pid 3610] close(27) = -1 EBADF (Bad file descriptor) [pid 3610] close(28) = -1 EBADF (Bad file descriptor) [pid 3610] close(29) = -1 EBADF (Bad file descriptor) [pid 3610] exit_group(0) = ? [pid 3610] +++ exited with 0 +++ [pid 3609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=3, si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=1} --- [pid 3609] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3609] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3609] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] getdents64(3, 0x555556e8b620 /* 4 entries */, 32768) = 112 [pid 3609] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3609] unlink("./0/binderfs") = 0 [pid 3609] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 3609] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] getdents64(4, 0x555556e93660 /* 2 entries */, 32768) = 48 [pid 3609] getdents64(4, 0x555556e93660 /* 0 entries */, 32768) = 0 [pid 3609] close(4) = 0 [pid 3609] rmdir("./0/file0") = 0 [pid 3609] getdents64(3, 0x555556e8b620 /* 0 entries */, 32768) = 0 [pid 3609] close(3) = 0 [pid 3609] rmdir("./0") = 0 [pid 3609] mkdir("./1", 0777) = 0 [pid 3609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 3609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3609] close(3) = 0 [pid 3609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e8a5d0) = 4 ./strace-static-x86_64: Process 3613 attached [pid 3613] chdir("./1") = 0 [pid 3613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3613] setpgid(0, 0) = 0 [pid 3613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3613] write(3, "1000", 4) = 4 [pid 3613] close(3) = 0 [pid 3613] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3613] memfd_create("syzkaller", 0) = 3 [pid 3613] ftruncate(3, 32768) = 0 [pid 3613] pwrite64(3, "\xce\xfa\xad\x1b\x00\x31\x00\x00\xff\x7f\x00\x00\x9b\x96\xdb\x94\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\x73\x79\x7a\x6b\x61\x6c\x73\x79\x7a\x6b\x61\x6c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 64, 0) = 64 [pid 3613] pwrite64(3, "\x02\x00\x00\x00\x07\x00\x00\x00\x08\x00\x00\x00\x1f\x0e\x00\x00\x02\x00\x00\x00\xed\x41\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\x6b\x1f\x1f\x63\x6b\x1f\x1f\x63\x6b\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 64, 512) = 64 [pid 3613] pwrite64(3, "\x02\x00\x2e\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x2e\x2e\x00\x00\x00\x00\x00\x00\x00\x00\x1e\x0c\x00\x00\x00\x00\x00\x00\x6c\x28\xfe\x64\x6a\xc0\x29\x81\xb4\x2f\x99\xa4\xce\x27\x76\xef\x24\x38\x5f\xa6\x6d\xf9\xa0\x12\x67\xa7\xa8\x42\x3c\xeb", 66, 3584) = 66 [pid 3613] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3613] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3613] mkdir("./file0", 0777) = 0 [pid 3613] mount("/dev/loop0", "./file0", "bfs", 0, "\x62\x66\x73\x38\xc7\x61\x40\x5b\x26\x2c\x2c\x66\x66\x73") = 0 [pid 3613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 3613] chdir("./file0") = 0 [pid 3613] ioctl(4, LOOP_CLR_FD) = 0 [pid 3613] close(4) = 0 [pid 3613] close(3) = 0 [pid 3613] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 3613] clone(child_stack=0x200000c0, flags=CLONE_FILES) = 5 [pid 3613] write(3, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 24576 [pid 3613] close(3) = 0 [pid 3613] close(4) = -1 EBADF (Bad file descriptor) [pid 3613] close(5) = 0 [pid 3613] close(6) = -1 EBADF (Bad file descriptor) [pid 3613] close(7) = -1 EBADF (Bad file descriptor) [pid 3613] close(8) = -1 EBADF (Bad file descriptor) [pid 3613] close(9) = -1 EBADF (Bad file descriptor) [pid 3613] close(10) = -1 EBADF (Bad file descriptor) [pid 3613] close(11) = -1 EBADF (Bad file descriptor) [pid 3613] close(12) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 3614 attached [pid 3613] close(13) = -1 EBADF (Bad file descriptor) [pid 3614] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 3613] close(14) = -1 EBADF (Bad file descriptor) [pid 3613] close(15) = -1 EBADF (Bad file descriptor) [pid 3613] close(16) = -1 EBADF (Bad file descriptor) [pid 3614] +++ killed by SIGSEGV (core dumped) +++ [pid 3613] close(17) = -1 EBADF (Bad file descriptor) [pid 3613] close(18) = -1 EBADF (Bad file descriptor) [pid 3613] close(19) = -1 EBADF (Bad file descriptor) [pid 3613] close(20) = -1 EBADF (Bad file descriptor) [pid 3613] close(21) = -1 EBADF (Bad file descriptor) [pid 3613] close(22) = -1 EBADF (Bad file descriptor) [pid 3613] close(23) = -1 EBADF (Bad file descriptor) [pid 3613] close(24) = -1 EBADF (Bad file descriptor) [pid 3613] close(25) = -1 EBADF (Bad file descriptor) [pid 3613] close(26) = -1 EBADF (Bad file descriptor) [pid 3613] close(27) = -1 EBADF (Bad file descriptor) [pid 3613] close(28) = -1 EBADF (Bad file descriptor) [pid 3613] close(29) = -1 EBADF (Bad file descriptor) [pid 3613] exit_group(0) = ? [pid 3613] +++ exited with 0 +++ [pid 3609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=5, si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=1} --- [pid 3609] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3609] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3609] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] getdents64(3, 0x555556e8b620 /* 4 entries */, 32768) = 112 [pid 3609] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3609] unlink("./1/binderfs") = 0 [ 56.393127][ T3613] loop0: detected capacity change from 0 to 64 [pid 3609] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 3609] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] getdents64(4, 0x555556e93660 /* 2 entries */, 32768) = 48 [pid 3609] getdents64(4, 0x555556e93660 /* 0 entries */, 32768) = 0 [pid 3609] close(4) = 0 [pid 3609] rmdir("./1/file0") = 0 [pid 3609] getdents64(3, 0x555556e8b620 /* 0 entries */, 32768) = 0 [pid 3609] close(3) = 0 [pid 3609] rmdir("./1") = 0 [pid 3609] mkdir("./2", 0777) = 0 [pid 3609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 3609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3609] close(3) = 0 [pid 3609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e8a5d0) = 6 ./strace-static-x86_64: Process 3615 attached [pid 3615] chdir("./2") = 0 [pid 3615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3615] setpgid(0, 0) = 0 [pid 3615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3615] write(3, "1000", 4) = 4 [pid 3615] close(3) = 0 [pid 3615] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3615] memfd_create("syzkaller", 0) = 3 [pid 3615] ftruncate(3, 32768) = 0 [pid 3615] pwrite64(3, "\xce\xfa\xad\x1b\x00\x31\x00\x00\xff\x7f\x00\x00\x9b\x96\xdb\x94\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\x73\x79\x7a\x6b\x61\x6c\x73\x79\x7a\x6b\x61\x6c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 64, 0) = 64 [pid 3615] pwrite64(3, "\x02\x00\x00\x00\x07\x00\x00\x00\x08\x00\x00\x00\x1f\x0e\x00\x00\x02\x00\x00\x00\xed\x41\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\x6b\x1f\x1f\x63\x6b\x1f\x1f\x63\x6b\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 64, 512) = 64 [pid 3615] pwrite64(3, "\x02\x00\x2e\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x2e\x2e\x00\x00\x00\x00\x00\x00\x00\x00\x1e\x0c\x00\x00\x00\x00\x00\x00\x6c\x28\xfe\x64\x6a\xc0\x29\x81\xb4\x2f\x99\xa4\xce\x27\x76\xef\x24\x38\x5f\xa6\x6d\xf9\xa0\x12\x67\xa7\xa8\x42\x3c\xeb", 66, 3584) = 66 [pid 3615] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3615] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3615] mkdir("./file0", 0777) = 0 [pid 3615] mount("/dev/loop0", "./file0", "bfs", 0, "\x62\x66\x73\x38\xc7\x61\x40\x5b\x26\x2c\x2c\x66\x66\x73") = 0 [pid 3615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 3615] chdir("./file0") = 0 [pid 3615] ioctl(4, LOOP_CLR_FD) = 0 [pid 3615] close(4) = 0 [pid 3615] close(3) = 0 [pid 3615] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 3615] clone(child_stack=0x200000c0, flags=CLONE_FILES) = 7 [pid 3615] write(3, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 24576 [pid 3615] close(3) = 0 [pid 3615] close(4) = -1 EBADF (Bad file descriptor) [pid 3615] close(5) = 0 [pid 3615] close(6) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 3616 attached [pid 3615] close(7 [pid 3616] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 3615] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 3615] close(8) = -1 EBADF (Bad file descriptor) [pid 3615] close(9) = -1 EBADF (Bad file descriptor) [pid 3615] close(10) = -1 EBADF (Bad file descriptor) [pid 3615] close(11) = -1 EBADF (Bad file descriptor) [pid 3615] close(12) = -1 EBADF (Bad file descriptor) [pid 3615] close(13) = -1 EBADF (Bad file descriptor) [pid 3615] close(14) = -1 EBADF (Bad file descriptor) [pid 3615] close(15) = -1 EBADF (Bad file descriptor) [pid 3615] close(16) = -1 EBADF (Bad file descriptor) [pid 3615] close(17) = -1 EBADF (Bad file descriptor) [pid 3615] close(18) = -1 EBADF (Bad file descriptor) [pid 3615] close(19) = -1 EBADF (Bad file descriptor) [pid 3615] close(20) = -1 EBADF (Bad file descriptor) [pid 3615] close(21) = -1 EBADF (Bad file descriptor) [pid 3615] close(22) = -1 EBADF (Bad file descriptor) [pid 3615] close(23) = -1 EBADF (Bad file descriptor) [pid 3615] close(24) = -1 EBADF (Bad file descriptor) [pid 3615] close(25) = -1 EBADF (Bad file descriptor) [pid 3615] close(26 [pid 3616] +++ killed by SIGSEGV (core dumped) +++ [pid 3615] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 3615] close(27) = -1 EBADF (Bad file descriptor) [pid 3615] close(28) = -1 EBADF (Bad file descriptor) [pid 3615] close(29) = -1 EBADF (Bad file descriptor) [pid 3615] exit_group(0) = ? [pid 3615] +++ exited with 0 +++ [pid 3609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=7, si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=0} --- [pid 3609] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3609] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] getdents64(3, 0x555556e8b620 /* 4 entries */, 32768) = 112 [pid 3609] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 56.495009][ T3615] loop0: detected capacity change from 0 to 64 [pid 3609] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3609] unlink("./2/binderfs") = 0 [pid 3609] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 3609] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] getdents64(4, 0x555556e93660 /* 2 entries */, 32768) = 48 [pid 3609] getdents64(4, 0x555556e93660 /* 0 entries */, 32768) = 0 [pid 3609] close(4) = 0 [pid 3609] rmdir("./2/file0") = 0 [pid 3609] getdents64(3, 0x555556e8b620 /* 0 entries */, 32768) = 0 [pid 3609] close(3) = 0 [pid 3609] rmdir("./2") = 0 [pid 3609] mkdir("./3", 0777) = 0 [pid 3609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 3609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3609] close(3) = 0 [pid 3609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e8a5d0) = 8 ./strace-static-x86_64: Process 3617 attached [pid 3617] chdir("./3") = 0 [pid 3617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3617] setpgid(0, 0) = 0 [pid 3617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3617] write(3, "1000", 4) = 4 [pid 3617] close(3) = 0 [pid 3617] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3617] memfd_create("syzkaller", 0) = 3 [pid 3617] ftruncate(3, 32768) = 0 [pid 3617] pwrite64(3, "\xce\xfa\xad\x1b\x00\x31\x00\x00\xff\x7f\x00\x00\x9b\x96\xdb\x94\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\x73\x79\x7a\x6b\x61\x6c\x73\x79\x7a\x6b\x61\x6c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 64, 0) = 64 [pid 3617] pwrite64(3, "\x02\x00\x00\x00\x07\x00\x00\x00\x08\x00\x00\x00\x1f\x0e\x00\x00\x02\x00\x00\x00\xed\x41\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\x6b\x1f\x1f\x63\x6b\x1f\x1f\x63\x6b\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 64, 512) = 64 [pid 3617] pwrite64(3, "\x02\x00\x2e\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x2e\x2e\x00\x00\x00\x00\x00\x00\x00\x00\x1e\x0c\x00\x00\x00\x00\x00\x00\x6c\x28\xfe\x64\x6a\xc0\x29\x81\xb4\x2f\x99\xa4\xce\x27\x76\xef\x24\x38\x5f\xa6\x6d\xf9\xa0\x12\x67\xa7\xa8\x42\x3c\xeb", 66, 3584) = 66 [pid 3617] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3617] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3617] mkdir("./file0", 0777) = 0 [pid 3617] mount("/dev/loop0", "./file0", "bfs", 0, "\x62\x66\x73\x38\xc7\x61\x40\x5b\x26\x2c\x2c\x66\x66\x73") = 0 [pid 3617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 3617] chdir("./file0") = 0 [pid 3617] ioctl(4, LOOP_CLR_FD) = 0 [pid 3617] close(4) = 0 [pid 3617] close(3) = 0 [pid 3617] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 3617] clone(child_stack=0x200000c0, flags=CLONE_FILES./strace-static-x86_64: Process 3618 attached ) = 9 [pid 3617] write(3, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 24576 [pid 3617] close(3) = 0 [pid 3617] close(4) = -1 EBADF (Bad file descriptor) [pid 3617] close(5) = 0 [pid 3617] close(6) = -1 EBADF (Bad file descriptor) [pid 3617] close(7 [pid 3618] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 3617] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 3617] close(8) = -1 EBADF (Bad file descriptor) [pid 3617] close(9) = -1 EBADF (Bad file descriptor) [pid 3617] close(10) = -1 EBADF (Bad file descriptor) [pid 3617] close(11) = -1 EBADF (Bad file descriptor) [pid 3617] close(12) = -1 EBADF (Bad file descriptor) [pid 3618] +++ killed by SIGSEGV (core dumped) +++ [pid 3617] close(13) = -1 EBADF (Bad file descriptor) [pid 3617] close(14) = -1 EBADF (Bad file descriptor) [pid 3617] close(15) = -1 EBADF (Bad file descriptor) [pid 3617] close(16) = -1 EBADF (Bad file descriptor) [pid 3617] close(17) = -1 EBADF (Bad file descriptor) [pid 3617] close(18) = -1 EBADF (Bad file descriptor) [pid 3617] close(19) = -1 EBADF (Bad file descriptor) [pid 3617] close(20) = -1 EBADF (Bad file descriptor) [pid 3617] close(21) = -1 EBADF (Bad file descriptor) [pid 3617] close(22) = -1 EBADF (Bad file descriptor) [pid 3617] close(23) = -1 EBADF (Bad file descriptor) [pid 3617] close(24) = -1 EBADF (Bad file descriptor) [pid 3617] close(25) = -1 EBADF (Bad file descriptor) [pid 3617] close(26) = -1 EBADF (Bad file descriptor) [pid 3617] close(27) = -1 EBADF (Bad file descriptor) [pid 3617] close(28) = -1 EBADF (Bad file descriptor) [pid 3617] close(29) = -1 EBADF (Bad file descriptor) [pid 3617] exit_group(0) = ? [pid 3617] +++ exited with 0 +++ [pid 3609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=9, si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=0} --- [pid 3609] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 3609] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3609] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] getdents64(3, 0x555556e8b620 /* 4 entries */, 32768) = 112 [pid 3609] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3609] unlink("./3/binderfs") = 0 [ 56.599742][ T3617] loop0: detected capacity change from 0 to 64 [pid 3609] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 3609] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] getdents64(4, 0x555556e93660 /* 2 entries */, 32768) = 48 [pid 3609] getdents64(4, 0x555556e93660 /* 0 entries */, 32768) = 0 [pid 3609] close(4) = 0 [pid 3609] rmdir("./3/file0") = 0 [pid 3609] getdents64(3, 0x555556e8b620 /* 0 entries */, 32768) = 0 [pid 3609] close(3) = 0 [pid 3609] rmdir("./3") = 0 [pid 3609] mkdir("./4", 0777) = 0 [pid 3609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 3609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3609] close(3) = 0 [pid 3609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e8a5d0) = 10 ./strace-static-x86_64: Process 3619 attached [pid 3619] chdir("./4") = 0 [pid 3619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3619] setpgid(0, 0) = 0 [pid 3619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3619] write(3, "1000", 4) = 4 [pid 3619] close(3) = 0 [pid 3619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3619] memfd_create("syzkaller", 0) = 3 [pid 3619] ftruncate(3, 32768) = 0 [pid 3619] pwrite64(3, "\xce\xfa\xad\x1b\x00\x31\x00\x00\xff\x7f\x00\x00\x9b\x96\xdb\x94\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\x73\x79\x7a\x6b\x61\x6c\x73\x79\x7a\x6b\x61\x6c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 64, 0) = 64 [pid 3619] pwrite64(3, "\x02\x00\x00\x00\x07\x00\x00\x00\x08\x00\x00\x00\x1f\x0e\x00\x00\x02\x00\x00\x00\xed\x41\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\x6b\x1f\x1f\x63\x6b\x1f\x1f\x63\x6b\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 64, 512) = 64 [pid 3619] pwrite64(3, "\x02\x00\x2e\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x2e\x2e\x00\x00\x00\x00\x00\x00\x00\x00\x1e\x0c\x00\x00\x00\x00\x00\x00\x6c\x28\xfe\x64\x6a\xc0\x29\x81\xb4\x2f\x99\xa4\xce\x27\x76\xef\x24\x38\x5f\xa6\x6d\xf9\xa0\x12\x67\xa7\xa8\x42\x3c\xeb", 66, 3584) = 66 [pid 3619] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3619] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3619] mkdir("./file0", 0777) = 0 [pid 3619] mount("/dev/loop0", "./file0", "bfs", 0, "\x62\x66\x73\x38\xc7\x61\x40\x5b\x26\x2c\x2c\x66\x66\x73") = 0 [pid 3619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 3619] chdir("./file0") = 0 [pid 3619] ioctl(4, LOOP_CLR_FD) = 0 [pid 3619] close(4) = 0 [pid 3619] close(3) = 0 [pid 3619] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 3619] clone(child_stack=0x200000c0, flags=CLONE_FILES) = 11 [pid 3619] write(3, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 24576 [pid 3619] close(3) = 0 [pid 3619] close(4) = -1 EBADF (Bad file descriptor) [pid 3619] close(5) = 0 [pid 3619] close(6) = -1 EBADF (Bad file descriptor) [pid 3619] close(7) = -1 EBADF (Bad file descriptor) [pid 3619] close(8) = -1 EBADF (Bad file descriptor) [pid 3619] close(9) = -1 EBADF (Bad file descriptor) [pid 3619] close(10) = -1 EBADF (Bad file descriptor) [pid 3619] close(11) = -1 EBADF (Bad file descriptor) [pid 3619] close(12) = -1 EBADF (Bad file descriptor) [pid 3619] close(13) = -1 EBADF (Bad file descriptor) [pid 3619] close(14) = -1 EBADF (Bad file descriptor) [pid 3619] close(15) = -1 EBADF (Bad file descriptor) [pid 3619] close(16) = -1 EBADF (Bad file descriptor) [pid 3619] close(17) = -1 EBADF (Bad file descriptor) [pid 3619] close(18) = -1 EBADF (Bad file descriptor) [pid 3619] close(19) = -1 EBADF (Bad file descriptor) [pid 3619] close(20) = -1 EBADF (Bad file descriptor) [pid 3619] close(21) = -1 EBADF (Bad file descriptor) [pid 3619] close(22) = -1 EBADF (Bad file descriptor) [pid 3619] close(23) = -1 EBADF (Bad file descriptor) [pid 3619] close(24) = -1 EBADF (Bad file descriptor) [pid 3619] close(25) = -1 EBADF (Bad file descriptor) [pid 3619] close(26) = -1 EBADF (Bad file descriptor) [pid 3619] close(27) = -1 EBADF (Bad file descriptor) [pid 3619] close(28) = -1 EBADF (Bad file descriptor) [pid 3619] close(29) = -1 EBADF (Bad file descriptor) [pid 3619] exit_group(0) = ? [pid 3619] +++ exited with 0 +++ ./strace-static-x86_64: Process 3620 attached [pid 3609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 3620] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 3609] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3609] fstat(3, [pid 3620] +++ killed by SIGSEGV (core dumped) +++ [pid 3609] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_DUMPED, si_pid=11, si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=0} --- [pid 3609] getdents64(3, 0x555556e8b620 /* 4 entries */, 32768) = 112 [pid 3609] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 3609] unlink("./4/binderfs") = 0 [pid 3609] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 3609] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 3609] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 3609] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 3609] getdents64(4, 0x555556e93660 /* 2 entries */, 32768) = 48 [pid 3609] getdents64(4, 0x555556e93660 /* 0 entries */, 32768) = 0 [pid 3609] close(4) = 0 [pid 3609] rmdir("./4/file0") = 0 [pid 3609] getdents64(3, 0x555556e8b620 /* 0 entries */, 32768) = 0 [pid 3609] close(3) = 0 [pid 3609] rmdir("./4") = 0 [ 56.692711][ T3619] loop0: detected capacity change from 0 to 64 [pid 3609] mkdir("./5", 0777) = 0 [pid 3609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 3609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 3609] close(3) = 0 [pid 3609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e8a5d0) = 12 ./strace-static-x86_64: Process 3621 attached [pid 3621] chdir("./5") = 0 [pid 3621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3621] setpgid(0, 0) = 0 [pid 3621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3621] write(3, "1000", 4) = 4 [pid 3621] close(3) = 0 [pid 3621] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3621] memfd_create("syzkaller", 0) = 3 [pid 3621] ftruncate(3, 32768) = 0 [pid 3621] pwrite64(3, "\xce\xfa\xad\x1b\x00\x31\x00\x00\xff\x7f\x00\x00\x9b\x96\xdb\x94\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\x73\x79\x7a\x6b\x61\x6c\x73\x79\x7a\x6b\x61\x6c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 64, 0) = 64 [pid 3621] pwrite64(3, "\x02\x00\x00\x00\x07\x00\x00\x00\x08\x00\x00\x00\x1f\x0e\x00\x00\x02\x00\x00\x00\xed\x41\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\x6b\x1f\x1f\x63\x6b\x1f\x1f\x63\x6b\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 64, 512) = 64 [pid 3621] pwrite64(3, "\x02\x00\x2e\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x2e\x2e\x00\x00\x00\x00\x00\x00\x00\x00\x1e\x0c\x00\x00\x00\x00\x00\x00\x6c\x28\xfe\x64\x6a\xc0\x29\x81\xb4\x2f\x99\xa4\xce\x27\x76\xef\x24\x38\x5f\xa6\x6d\xf9\xa0\x12\x67\xa7\xa8\x42\x3c\xeb", 66, 3584) = 66 [pid 3621] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3621] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3621] mkdir("./file0", 0777) = 0 [pid 3621] mount("/dev/loop0", "./file0", "bfs", 0, "\x62\x66\x73\x38\xc7\x61\x40\x5b\x26\x2c\x2c\x66\x66\x73") = 0 [pid 3621] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 3621] chdir("./file0") = 0 [pid 3621] ioctl(4, LOOP_CLR_FD) = 0 [pid 3621] close(4) = 0 [pid 3621] close(3) = 0 [pid 3621] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 3621] clone(child_stack=0x200000c0, flags=CLONE_FILES./strace-static-x86_64: Process 3622 attached ) = 13 [pid 3621] write(3, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 3622] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [ 56.763110][ T3621] loop0: detected capacity change from 0 to 64 [ 56.767279][ T3611] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.796718][ T3622] ------------[ cut here ]------------ [ 56.802992][ T3622] WARNING: CPU: 0 PID: 3622 at fs/buffer.c:1081 mark_buffer_dirty+0x67b/0xa40 [ 56.812253][ T3622] Modules linked in: [ 56.816291][ T3622] CPU: 0 PID: 3622 Comm: syz-executor269 Not tainted 6.1.0-rc3-syzkaller-00152-gf2f32f8af2b0 #0 [ 56.827277][ T3622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 56.837730][ T3622] RIP: 0010:mark_buffer_dirty+0x67b/0xa40 [ 56.843574][ T3622] Code: 89 f5 41 83 e5 01 4c 89 ee e8 e1 6b 94 ff 4d 85 ed 0f 84 d3 fd ff ff e8 e3 6e 94 ff 49 8d 5e ff e9 c5 fd ff ff e8 d5 6e 94 ff <0f> 0b e9 b4 f9 ff ff e8 c9 6e 94 ff 0f 0b e9 06 fa ff ff e8 bd 6e [ 56.863591][ T3622] RSP: 0018:ffffc90003b9ef28 EFLAGS: 00010293 [ 56.870225][ T3622] RAX: 0000000000000000 RBX: ffff8880723d7cb0 RCX: 0000000000000000 [ 56.878771][ T3622] RDX: ffff88801e9e3a80 RSI: ffffffff81e83dbb RDI: 0000000000000001 [ 56.886952][ T3622] RBP: ffff88806f068a00 R08: 0000000000000001 R09: 0000000000000000 [ 56.895021][ T3622] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888022480000 [ 56.903128][ T3622] R13: ffffed100449002c R14: ffff8880723d7cb0 R15: 0000000000000012 [ 56.911220][ T3622] FS: 0000555556e8a300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 56.920283][ T3622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.926884][ T3622] CR2: 0000000000000000 CR3: 000000001c514000 CR4: 0000000000350ef0 [ 56.934952][ T3622] Call Trace: [ 56.938311][ T3622] [ 56.941251][ T3622] bfs_get_block+0x394/0xdc0 [ 56.945965][ T3622] __block_write_begin_int+0x3b9/0x14b0 [ 56.951695][ T3622] ? bfs_write_begin+0xd0/0xd0 [ 56.956539][ T3622] ? mark_held_locks+0x9f/0xe0 [ 56.961471][ T3622] ? invalidate_bh_lrus_cpu+0x140/0x140 [ 56.967076][ T3622] ? PageHeadHuge+0x19e/0x200 [ 56.971954][ T3622] ? bfs_write_begin+0xd0/0xd0 [ 56.976780][ T3622] block_write_begin+0xb5/0x4d0 [ 56.981876][ T3622] bfs_write_begin+0x2d/0xd0 [ 56.986521][ T3622] generic_perform_write+0x252/0x570 [ 56.991965][ T3622] ? folio_add_wait_queue+0x1b0/0x1b0 [ 56.997401][ T3622] ? new_inode+0x270/0x270 [ 57.001931][ T3622] ? generic_write_checks+0x2bc/0x3f0 [ 57.007417][ T3622] __generic_file_write_iter+0x2aa/0x4d0 [ 57.013198][ T3622] ? up_write+0x1ac/0x520 [ 57.017636][ T3622] generic_file_write_iter+0xdf/0x350 [ 57.023026][ T3622] ? __stack_depot_save+0x3a/0x560 [ 57.028269][ T3622] __kernel_write_iter+0x25e/0x730 [ 57.033411][ T3622] ? vfs_read+0x930/0x930 [ 57.037916][ T3622] ? kasan_save_stack+0x31/0x40 [ 57.042895][ T3622] ? arch_do_signal_or_restart+0x82/0x2300 [ 57.048894][ T3622] ? exit_to_user_mode_prepare+0x15f/0x250 [ 57.054792][ T3622] ? irqentry_exit_to_user_mode+0x5/0x30 [ 57.060599][ T3622] ? exc_page_fault+0xbc/0x170 [ 57.065393][ T3622] ? asm_exc_page_fault+0x22/0x30 [ 57.070993][ T3622] __kernel_write+0xc7/0x110 [ 57.075654][ T3622] ? __kernel_write_iter+0x730/0x730 [ 57.081063][ T3622] ? find_held_lock+0x2d/0x110 [ 57.085888][ T3622] dump_emit+0x219/0x340 [ 57.090298][ T3622] ? __dump_skip+0x5c0/0x5c0 [ 57.095027][ T3622] elf_core_dump+0x2006/0x3510 [ 57.099931][ T3622] ? load_elf_phdrs+0x210/0x210 [ 57.104807][ T3622] ? kvmalloc_node+0x3f/0x1b0 [ 57.109656][ T3622] ? kasan_save_stack+0x1e/0x40 [ 57.114596][ T3622] ? kasan_set_track+0x21/0x30 [ 57.119528][ T3622] ? __kasan_kmalloc+0xa1/0xb0 [ 57.124358][ T3622] ? __lock_acquire+0x166e/0x56d0 [ 57.129501][ T3622] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.135622][ T3622] do_coredump+0x26c5/0x3bc0 [ 57.140312][ T3622] ? dump_emit+0x340/0x340 [ 57.144755][ T3622] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.150912][ T3622] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.156916][ T3622] ? __switch_to+0x5cc/0x10e0 [ 57.161707][ T3622] ? find_held_lock+0x2d/0x110 [ 57.166495][ T3622] ? io_files_update+0x150/0x7f0 [ 57.171636][ T3622] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.176880][ T3622] get_signal+0x1be1/0x2430 [ 57.181651][ T3622] ? exit_signals+0x8b0/0x8b0 [ 57.186455][ T3622] ? force_sig_info_to_task+0x363/0x4a0 [ 57.192119][ T3622] arch_do_signal_or_restart+0x82/0x2300 [ 57.197826][ T3622] ? force_sig+0xe0/0xe0 [ 57.202079][ T3622] ? pgtable_bad+0x90/0x90 [ 57.206598][ T3622] ? get_sigframe_size+0x10/0x10 [ 57.211617][ T3622] ? lockdep_hardirqs_off+0x90/0xd0 [ 57.216868][ T3622] ? trace_hardirqs_off+0xe/0x150 [ 57.222099][ T3622] ? __bad_area+0x5f/0xa0 [ 57.226478][ T3622] exit_to_user_mode_prepare+0x15f/0x250 [ 57.232245][ T3622] irqentry_exit_to_user_mode+0x5/0x30 [ 57.237863][ T3622] exc_page_fault+0xbc/0x170 [ 57.242473][ T3622] asm_exc_page_fault+0x22/0x30 [ 57.247377][ T3622] RIP: 0033:0x0 [ 57.251030][ T3622] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 57.258446][ T3622] RSP: 002b:00000000200000c8 EFLAGS: 00010217 [ 57.264514][ T3622] RAX: 0000000000000000 RBX: 000000000000dd4d RCX: 00007f85c36eb2b9 [ 57.272565][ T3622] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000400 [ 57.280620][ T3622] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd87f84c10 [ 57.288670][ T3622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd87f84c0c [ 57.296680][ T3622] R13: 00007ffd87f84c40 R14: 00007ffd87f84c20 R15: 0000000000000005 [ 57.304807][ T3622] [ 57.308029][ T3622] Kernel panic - not syncing: panic_on_warn set ... [ 57.314651][ T3622] CPU: 0 PID: 3622 Comm: syz-executor269 Not tainted 6.1.0-rc3-syzkaller-00152-gf2f32f8af2b0 #0 [ 57.325075][ T3622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 57.335144][ T3622] Call Trace: [ 57.338429][ T3622] [ 57.341362][ T3622] dump_stack_lvl+0xcd/0x134 [ 57.346052][ T3622] panic+0x2c8/0x622 [ 57.350008][ T3622] ? panic_print_sys_info.part.0+0x110/0x110 [ 57.356038][ T3622] ? __warn.cold+0x24b/0x350 [ 57.360644][ T3622] ? mark_buffer_dirty+0x67b/0xa40 [ 57.365770][ T3622] __warn.cold+0x25c/0x350 [ 57.370189][ T3622] ? mark_buffer_dirty+0x67b/0xa40 [ 57.375316][ T3622] report_bug+0x1bc/0x210 [ 57.379691][ T3622] handle_bug+0x3c/0x70 [ 57.383858][ T3622] exc_invalid_op+0x14/0x40 [ 57.388360][ T3622] asm_exc_invalid_op+0x16/0x20 [ 57.393300][ T3622] RIP: 0010:mark_buffer_dirty+0x67b/0xa40 [ 57.399032][ T3622] Code: 89 f5 41 83 e5 01 4c 89 ee e8 e1 6b 94 ff 4d 85 ed 0f 84 d3 fd ff ff e8 e3 6e 94 ff 49 8d 5e ff e9 c5 fd ff ff e8 d5 6e 94 ff <0f> 0b e9 b4 f9 ff ff e8 c9 6e 94 ff 0f 0b e9 06 fa ff ff e8 bd 6e [ 57.418731][ T3622] RSP: 0018:ffffc90003b9ef28 EFLAGS: 00010293 [ 57.424792][ T3622] RAX: 0000000000000000 RBX: ffff8880723d7cb0 RCX: 0000000000000000 [ 57.432765][ T3622] RDX: ffff88801e9e3a80 RSI: ffffffff81e83dbb RDI: 0000000000000001 [ 57.440735][ T3622] RBP: ffff88806f068a00 R08: 0000000000000001 R09: 0000000000000000 [ 57.448703][ T3622] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888022480000 [ 57.456754][ T3622] R13: ffffed100449002c R14: ffff8880723d7cb0 R15: 0000000000000012 [ 57.464735][ T3622] ? mark_buffer_dirty+0x67b/0xa40 [ 57.469948][ T3622] ? mark_buffer_dirty+0x67b/0xa40 [ 57.475064][ T3622] bfs_get_block+0x394/0xdc0 [ 57.479668][ T3622] __block_write_begin_int+0x3b9/0x14b0 [ 57.485218][ T3622] ? bfs_write_begin+0xd0/0xd0 [ 57.490076][ T3622] ? mark_held_locks+0x9f/0xe0 [ 57.494838][ T3622] ? invalidate_bh_lrus_cpu+0x140/0x140 [ 57.500432][ T3622] ? PageHeadHuge+0x19e/0x200 [ 57.505146][ T3622] ? bfs_write_begin+0xd0/0xd0 [ 57.509914][ T3622] block_write_begin+0xb5/0x4d0 [ 57.514773][ T3622] bfs_write_begin+0x2d/0xd0 [ 57.519368][ T3622] generic_perform_write+0x252/0x570 [ 57.524701][ T3622] ? folio_add_wait_queue+0x1b0/0x1b0 [ 57.530077][ T3622] ? new_inode+0x270/0x270 [ 57.534489][ T3622] ? generic_write_checks+0x2bc/0x3f0 [ 57.539864][ T3622] __generic_file_write_iter+0x2aa/0x4d0 [ 57.545599][ T3622] ? up_write+0x1ac/0x520 [ 57.550029][ T3622] generic_file_write_iter+0xdf/0x350 [ 57.555399][ T3622] ? __stack_depot_save+0x3a/0x560 [ 57.560517][ T3622] __kernel_write_iter+0x25e/0x730 [ 57.565843][ T3622] ? vfs_read+0x930/0x930 [ 57.570195][ T3622] ? kasan_save_stack+0x31/0x40 [ 57.575138][ T3622] ? arch_do_signal_or_restart+0x82/0x2300 [ 57.581002][ T3622] ? exit_to_user_mode_prepare+0x15f/0x250 [ 57.586801][ T3622] ? irqentry_exit_to_user_mode+0x5/0x30 [ 57.592435][ T3622] ? exc_page_fault+0xbc/0x170 [ 57.597193][ T3622] ? asm_exc_page_fault+0x22/0x30 [ 57.602229][ T3622] __kernel_write+0xc7/0x110 [ 57.606827][ T3622] ? __kernel_write_iter+0x730/0x730 [ 57.612118][ T3622] ? find_held_lock+0x2d/0x110 [ 57.616891][ T3622] dump_emit+0x219/0x340 [ 57.621142][ T3622] ? __dump_skip+0x5c0/0x5c0 [ 57.625742][ T3622] elf_core_dump+0x2006/0x3510 [ 57.630550][ T3622] ? load_elf_phdrs+0x210/0x210 [ 57.635428][ T3622] ? kvmalloc_node+0x3f/0x1b0 [ 57.640118][ T3622] ? kasan_save_stack+0x1e/0x40 [ 57.644969][ T3622] ? kasan_set_track+0x21/0x30 [ 57.649734][ T3622] ? __kasan_kmalloc+0xa1/0xb0 [ 57.654535][ T3622] ? __lock_acquire+0x166e/0x56d0 [ 57.659579][ T3622] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.665604][ T3622] do_coredump+0x26c5/0x3bc0 [ 57.670217][ T3622] ? dump_emit+0x340/0x340 [ 57.674646][ T3622] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.680635][ T3622] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 57.686615][ T3622] ? __switch_to+0x5cc/0x10e0 [ 57.691321][ T3622] ? find_held_lock+0x2d/0x110 [ 57.696094][ T3622] ? io_files_update+0x150/0x7f0 [ 57.701130][ T3622] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.706334][ T3622] get_signal+0x1be1/0x2430 [ 57.710847][ T3622] ? exit_signals+0x8b0/0x8b0 [ 57.715523][ T3622] ? force_sig_info_to_task+0x363/0x4a0 [ 57.721071][ T3622] arch_do_signal_or_restart+0x82/0x2300 [ 57.726701][ T3622] ? force_sig+0xe0/0xe0 [ 57.730939][ T3622] ? pgtable_bad+0x90/0x90 [ 57.735364][ T3622] ? get_sigframe_size+0x10/0x10 [ 57.740299][ T3622] ? lockdep_hardirqs_off+0x90/0xd0 [ 57.745521][ T3622] ? trace_hardirqs_off+0xe/0x150 [ 57.750553][ T3622] ? __bad_area+0x5f/0xa0 [ 57.754901][ T3622] exit_to_user_mode_prepare+0x15f/0x250 [ 57.760543][ T3622] irqentry_exit_to_user_mode+0x5/0x30 [ 57.766005][ T3622] exc_page_fault+0xbc/0x170 [ 57.770596][ T3622] asm_exc_page_fault+0x22/0x30 [ 57.775454][ T3622] RIP: 0033:0x0 [ 57.778908][ T3622] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 57.786262][ T3622] RSP: 002b:00000000200000c8 EFLAGS: 00010217 [ 57.792413][ T3622] RAX: 0000000000000000 RBX: 000000000000dd4d RCX: 00007f85c36eb2b9 [ 57.800392][ T3622] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000400 [ 57.808358][ T3622] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd87f84c10 [ 57.816327][ T3622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd87f84c0c [ 57.824383][ T3622] R13: 00007ffd87f84c40 R14: 00007ffd87f84c20 R15: 0000000000000005 [ 57.832382][ T3622] [ 57.836458][ T3622] Kernel Offset: disabled [ 57.841170][ T3622] Rebooting in 86400 seconds..