./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor931741776 <...> Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. execve("./syz-executor931741776", ["./syz-executor931741776"], 0x7ffd8c08ad90 /* 10 vars */) = 0 brk(NULL) = 0x555555e75000 brk(0x555555e75d00) = 0x555555e75d00 arch_prctl(ARCH_SET_FS, 0x555555e75380) = 0 set_tid_address(0x555555e75650) = 5060 set_robust_list(0x555555e75660, 24) = 0 rseq(0x555555e75ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor931741776", 4096) = 27 getrandom("\x20\x26\xce\x59\x7d\x9e\xe5\x8b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555e75d00 brk(0x555555e96d00) = 0x555555e96d00 brk(0x555555e97000) = 0x555555e97000 mprotect(0x7f9536999000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5061 attached , child_tidptr=0x555555e75650) = 5061 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] set_robust_list(0x555555e75660, 24) = 0 ./strace-static-x86_64: Process 5062 attached [pid 5060] <... clone resumed>, child_tidptr=0x555555e75650) = 5062 [pid 5062] set_robust_list(0x555555e75660, 24 [pid 5061] mkdir("./syzkaller.TPKP4n", 0700 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5063 attached [pid 5062] mkdir("./syzkaller.SiRXO2", 0700 [pid 5063] set_robust_list(0x555555e75660, 24) = 0 [pid 5063] getrandom( [pid 5061] <... mkdir resumed>) = 0 [pid 5060] <... clone resumed>, child_tidptr=0x555555e75650) = 5063 [pid 5063] <... getrandom resumed>"\x36\x6e\x24\x28\xf9\x56\x71\x48", 8, GRND_NONBLOCK) = 8 [pid 5061] chmod("./syzkaller.TPKP4n", 0777 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... mkdir resumed>) = 0 [pid 5062] chmod("./syzkaller.SiRXO2", 0777 [pid 5063] mkdir("./syzkaller.4f012m", 0700 [pid 5062] <... chmod resumed>) = 0 [pid 5061] <... chmod resumed>) = 0 [pid 5062] chdir("./syzkaller.SiRXO2"./strace-static-x86_64: Process 5064 attached [pid 5063] <... mkdir resumed>) = 0 [pid 5061] chdir("./syzkaller.TPKP4n" [pid 5060] <... clone resumed>, child_tidptr=0x555555e75650) = 5064 [pid 5064] set_robust_list(0x555555e75660, 24 [pid 5063] chmod("./syzkaller.4f012m", 0777 [pid 5062] <... chdir resumed>) = 0 [pid 5061] <... chdir resumed>) = 0 [pid 5060] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... set_robust_list resumed>) = 0 [pid 5061] mkdir("./0", 0777 [pid 5063] <... chmod resumed>) = 0 [pid 5062] mkdir("./0", 0777 [pid 5064] mkdir("./syzkaller.crebO3", 0700 [pid 5063] chdir("./syzkaller.4f012m" [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5065 attached [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... chdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] set_robust_list(0x555555e75660, 24 [pid 5060] <... clone resumed>, child_tidptr=0x555555e75650) = 5065 [pid 5065] <... set_robust_list resumed>) = 0 [pid 5063] mkdir("./0", 0777 [pid 5061] <... openat resumed>) = 3 [pid 5064] chmod("./syzkaller.crebO3", 0777 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] mkdir("./syzkaller.bQC8Ts", 0700 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... chmod resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] close(3 [pid 5061] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] chmod("./syzkaller.bQC8Ts", 0777 [pid 5064] chdir("./syzkaller.crebO3" [pid 5063] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5061] close(3 [pid 5064] <... chdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5064] mkdir("./0", 0777 [pid 5065] <... chmod resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] chdir("./syzkaller.bQC8Ts") = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] mkdir("./0", 0777 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x555555e75650) = 5066 ./strace-static-x86_64: Process 5066 attached [pid 5062] <... clone resumed>, child_tidptr=0x555555e75650) = 5067 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5066] set_robust_list(0x555555e75660, 24./strace-static-x86_64: Process 5069 attached ./strace-static-x86_64: Process 5067 attached ) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... clone resumed>, child_tidptr=0x555555e75650) = 5069 [pid 5069] set_robust_list(0x555555e75660, 24 [pid 5067] set_robust_list(0x555555e75660, 24 [pid 5066] chdir("./0" [pid 5065] <... openat resumed>) = 3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... set_robust_list resumed>) = 0 [pid 5066] <... chdir resumed>) = 0 [pid 5069] <... set_robust_list resumed>) = 0 [pid 5067] chdir("./0" [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] chdir("./0" [pid 5067] <... chdir resumed>) = 0 [pid 5066] <... prctl resumed>) = 0 [pid 5069] <... chdir resumed>) = 0 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] setpgid(0, 0 [pid 5064] close(3 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... prctl resumed>) = 0 [pid 5066] <... setpgid resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... close resumed>) = 0 [pid 5069] <... prctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] setpgid(0, 0 [pid 5066] <... openat resumed>) = 3 [pid 5067] <... setpgid resumed>) = 0 [pid 5066] write(3, "1000", 4 [pid 5069] setpgid(0, 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... write resumed>) = 4 [pid 5065] close(3 [pid 5069] <... setpgid resumed>) = 0 [pid 5066] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5070 attached [pid 5067] write(3, "1000", 4 [pid 5066] symlink("/dev/binderfs", "./binderfs" [pid 5070] set_robust_list(0x555555e75660, 24 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... write resumed>) = 4 [pid 5066] <... symlink resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x555555e75650) = 5070 [pid 5070] <... set_robust_list resumed>) = 0 [pid 5069] write(3, "1000", 4 [pid 5067] close(3./strace-static-x86_64: Process 5071 attached [pid 5070] chdir("./0" [pid 5069] <... write resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5066] memfd_create("syzkaller", 0 [pid 5071] set_robust_list(0x555555e75660, 24 [pid 5070] <... chdir resumed>) = 0 [pid 5069] close(3 [pid 5067] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... clone resumed>, child_tidptr=0x555555e75650) = 5071 [pid 5071] <... set_robust_list resumed>) = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... close resumed>) = 0 [pid 5070] <... prctl resumed>) = 0 [pid 5067] <... symlink resumed>) = 0 [pid 5066] <... memfd_create resumed>) = 3 [pid 5071] chdir("./0" [pid 5069] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... chdir resumed>) = 0 [pid 5070] setpgid(0, 0 [pid 5069] <... symlink resumed>) = 0 [pid 5067] memfd_create("syzkaller", 0 [pid 5066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] <... setpgid resumed>) = 0 [pid 5066] <... mmap resumed>) = 0x7f952e400000 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] memfd_create("syzkaller", 0) = 3 [pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... prctl resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5067] <... memfd_create resumed>) = 3 [pid 5071] setpgid(0, 0 [pid 5070] write(3, "1000", 4 [pid 5071] <... setpgid resumed>) = 0 [pid 5070] <... write resumed>) = 4 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] close(3 [pid 5069] <... mmap resumed>) = 0x7f952e400000 [pid 5067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5070] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... mmap resumed>) = 0x7f952e400000 [pid 5071] write(3, "1000", 4) = 4 [pid 5070] <... symlink resumed>) = 0 [pid 5071] close(3) = 0 [pid 5071] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5070] memfd_create("syzkaller", 0 [pid 5071] memfd_create("syzkaller", 0 [pid 5070] <... memfd_create resumed>) = 3 [pid 5071] <... memfd_create resumed>) = 3 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5070] <... mmap resumed>) = 0x7f952e400000 [pid 5066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5069] <... write resumed>) = 16777216 [pid 5069] munmap(0x7f952e400000, 138412032 [pid 5070] <... write resumed>) = 16777216 [pid 5070] munmap(0x7f952e400000, 138412032 [pid 5069] <... munmap resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5069] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5066] <... write resumed>) = 16777216 [pid 5066] munmap(0x7f952e400000, 138412032 [pid 5069] close(3) = 0 [pid 5069] close(4 [pid 5070] <... munmap resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5069] mkdir("./file0", 0777 [pid 5070] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5069] <... mkdir resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [ 78.600181][ T5069] loop2: detected capacity change from 0 to 32768 [pid 5069] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... munmap resumed>) = 0 [pid 5070] <... ioctl resumed>) = 0 [pid 5070] close(3 [pid 5066] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5066] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... close resumed>) = 0 [pid 5066] <... ioctl resumed>) = 0 [pid 5071] <... write resumed>) = 16777216 [pid 5066] close(3 [pid 5070] close(4) = 0 [pid 5070] mkdir("./file0", 0777 [pid 5071] munmap(0x7f952e400000, 138412032 [pid 5070] <... mkdir resumed>) = 0 [pid 5067] <... write resumed>) = 16777216 [pid 5066] <... close resumed>) = 0 [pid 5070] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5069] <... mount resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5069] chdir("./file0") = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5066] close(4 [pid 5069] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5066] <... close resumed>) = 0 [ 78.660028][ T5070] loop3: detected capacity change from 0 to 32768 [ 78.683716][ T5066] loop0: detected capacity change from 0 to 32768 [ 78.684080][ T5069] [ 78.684080][ T5069] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.684080][ T5069] [pid 5067] munmap(0x7f952e400000, 138412032 [pid 5066] mkdir("./file0", 0777 [pid 5071] <... munmap resumed>) = 0 [pid 5070] <... mount resumed>) = 0 [pid 5069] <... openat resumed>) = 4 [pid 5066] <... mkdir resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5069] exit_group(0 [pid 5066] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5070] <... openat resumed>) = 3 [pid 5069] <... exit_group resumed>) = ? [pid 5069] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=38 /* 0.38 s */} --- [pid 5070] chdir("./file0") = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5070] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5063] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 78.742516][ T5070] [ 78.742516][ T5070] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.742516][ T5070] [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./0/binderfs") = 0 [pid 5067] <... munmap resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5071] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... openat resumed>) = 4 [pid 5071] <... ioctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] <... mount resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5066] chdir("./file0") = 0 [pid 5070] exit_group(0 [pid 5066] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5070] <... exit_group resumed>) = ? [pid 5066] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5070] +++ exited with 0 +++ [pid 5066] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5071] close(3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=24 /* 0.24 s */} --- [pid 5071] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [ 78.788730][ T5066] [ 78.788730][ T5066] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.788730][ T5066] [ 78.807641][ T5071] loop4: detected capacity change from 0 to 32768 [ 78.820075][ T37] [ 78.820075][ T37] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.820075][ T37] [pid 5064] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] close(4 [pid 5067] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] mkdir("./file0", 0777 [pid 5064] newfstatat(3, "", [pid 5071] <... mkdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5064] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5067] <... ioctl resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5064] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./0/binderfs") = 0 [pid 5066] exit_group(0 [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... exit_group resumed>) = ? [pid 5066] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=28 /* 0.28 s */} --- [pid 5061] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 78.846363][ T37] [ 78.846363][ T37] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.846363][ T37] [ 78.860903][ T5067] loop1: detected capacity change from 0 to 32768 [ 78.861826][ T110] [ 78.861826][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.861826][ T110] [ 78.880917][ T1553] [ 78.880917][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.880917][ T1553] [pid 5061] unlink("./0/binderfs") = 0 [pid 5061] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3) = 0 [pid 5067] close(4) = 0 [ 78.896791][ T1553] [ 78.896791][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.896791][ T1553] [ 78.899767][ T5063] [ 78.899767][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.899767][ T5063] [ 78.919080][ T5064] [ 78.919080][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.919080][ T5064] [ 78.936393][ T2450] [ 78.936393][ T2450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.936393][ T2450] [pid 5067] mkdir("./file0", 0777) = 0 [pid 5067] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5071] <... mount resumed>) = 0 [ 78.937635][ T5071] [ 78.937635][ T5071] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.937635][ T5071] [ 78.948361][ T109] [ 78.948361][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.948361][ T109] [ 78.974970][ T5063] [ 78.974970][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.974970][ T5063] [ 78.985213][ T2450] [ 78.985213][ T2450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 78.985213][ T2450] [pid 5071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] chdir("./file0") = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5071] exit_group(0) = ? [pid 5071] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=26 /* 0.26 s */} --- [pid 5065] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./0/binderfs") = 0 [ 79.000049][ T5064] [ 79.000049][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.000049][ T5064] [ 79.017415][ T1553] [ 79.017415][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.017415][ T1553] [ 79.019042][ T109] [ 79.019042][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.019042][ T109] [ 79.034088][ T1553] [ 79.034088][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.034088][ T1553] [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] chdir("./file0" [pid 5064] newfstatat(AT_FDCWD, "./0/file0", [pid 5067] <... chdir resumed>) = 0 [ 79.042960][ T5067] [ 79.042960][ T5067] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.042960][ T5067] [ 79.063844][ T5061] [ 79.063844][ T5061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.063844][ T5061] [ 79.075160][ T5065] [ 79.075160][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.075160][ T5065] [ 79.089644][ T109] [ 79.089644][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.089644][ T109] [pid 5067] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./0/file0" [pid 5067] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5067] exit_group(0 [pid 5064] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5067] <... exit_group resumed>) = ? [pid 5063] close(3 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] rmdir("./0" [pid 5064] getdents64(4, [pid 5067] +++ exited with 0 +++ [pid 5064] <... getdents64 resumed>0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=36 /* 0.36 s */} --- [pid 5064] close(4 [pid 5062] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./0/file0" [pid 5062] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] mkdir("./1", 0777 [pid 5062] <... openat resumed>) = 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5064] getdents64(3, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... getdents64 resumed>0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5064] close(3 [pid 5062] <... getdents64 resumed>0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 5062] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] unlink("./0/binderfs" [pid 5064] mkdir("./1", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... unlink resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [ 79.090004][ T5061] [ 79.090004][ T5061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.090004][ T5061] [ 79.109688][ T5065] [ 79.109688][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.109688][ T5065] [ 79.139065][ T1553] [ 79.139065][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.139065][ T1553] [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./0/file0", [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(4, "", [pid 5061] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(4, "", [pid 5065] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... getdents64 resumed>0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5065] getdents64(4, [pid 5061] <... getdents64 resumed>0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, [pid 5065] close(4) = 0 [pid 5065] rmdir("./0/file0" [pid 5061] <... getdents64 resumed>0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./0/file0" [pid 5065] getdents64(3, [pid 5061] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5061] getdents64(3, [pid 5065] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./0" [pid 5061] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [ 79.150508][ T1553] [ 79.150508][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.150508][ T1553] [ 79.162412][ T110] [ 79.162412][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.162412][ T110] [ 79.174736][ T5062] [ 79.174736][ T5062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.174736][ T5062] [pid 5061] rmdir("./0" [pid 5065] mkdir("./1", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5061] mkdir("./1", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = 0 [ 79.209425][ T5062] [ 79.209425][ T5062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 79.209425][ T5062] [pid 5062] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./0/file0") = 0 [pid 5062] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./0") = 0 [pid 5062] mkdir("./1", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5074 ./strace-static-x86_64: Process 5074 attached [pid 5074] set_robust_list(0x555555e75660, 24) = 0 [pid 5074] chdir("./1") = 0 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] setpgid(0, 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5074] <... setpgid resumed>) = 0 [pid 5063] close(3 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5075 [pid 5074] <... openat resumed>) = 3 [pid 5074] write(3, "1000", 4./strace-static-x86_64: Process 5075 attached ) = 4 [pid 5074] close(3 [pid 5075] set_robust_list(0x555555e75660, 24) = 0 [pid 5075] chdir("./1") = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] symlink("/dev/binderfs", "./binderfs" [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setpgid(0, 0) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... symlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] write(3, "1000", 4 [pid 5074] memfd_create("syzkaller", 0 [pid 5075] <... write resumed>) = 4 [pid 5075] close(3) = 0 [pid 5075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] <... memfd_create resumed>) = 3 [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] memfd_create("syzkaller", 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5074] <... mmap resumed>) = 0x7f952e400000 [pid 5075] <... memfd_create resumed>) = 3 [pid 5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5065] close(3) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5076 ./strace-static-x86_64: Process 5076 attached [pid 5076] set_robust_list(0x555555e75660, 24) = 0 [pid 5076] chdir("./1" [pid 5065] <... clone resumed>, child_tidptr=0x555555e75650) = 5077 [pid 5076] <... chdir resumed>) = 0 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] setpgid(0, 0) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5077 attached ) = 3 [pid 5077] set_robust_list(0x555555e75660, 24 [pid 5076] write(3, "1000", 4 [pid 5077] <... set_robust_list resumed>) = 0 [pid 5076] <... write resumed>) = 4 [pid 5077] chdir("./1" [pid 5076] close(3 [pid 5077] <... chdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] symlink("/dev/binderfs", "./binderfs" [pid 5077] <... prctl resumed>) = 0 [pid 5077] setpgid(0, 0 [pid 5076] <... symlink resumed>) = 0 [pid 5077] <... setpgid resumed>) = 0 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] memfd_create("syzkaller", 0 [pid 5077] write(3, "1000", 4) = 4 [pid 5077] close(3) = 0 [pid 5076] <... memfd_create resumed>) = 3 [pid 5076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5077] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5077] memfd_create("syzkaller", 0) = 3 [pid 5077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5078 ./strace-static-x86_64: Process 5078 attached [pid 5078] set_robust_list(0x555555e75660, 24) = 0 [pid 5078] chdir("./1") = 0 [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5078] setpgid(0, 0) = 0 [pid 5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "1000", 4) = 4 [pid 5078] close(3) = 0 [pid 5078] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5078] memfd_create("syzkaller", 0) = 3 [pid 5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5074] <... write resumed>) = 16777216 [pid 5074] munmap(0x7f952e400000, 138412032) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5074] close(3) = 0 [pid 5074] close(4) = 0 [pid 5074] mkdir("./file0", 0777) = 0 [pid 5074] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5077] <... write resumed>) = 16777216 [ 80.420678][ T5074] loop3: detected capacity change from 0 to 32768 [pid 5077] munmap(0x7f952e400000, 138412032) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5077] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5077] close(3) = 0 [pid 5077] close(4 [pid 5074] <... mount resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5074] chdir("./file0") = 0 [pid 5077] <... close resumed>) = 0 [pid 5077] mkdir("./file0", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5077] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 80.512471][ T5074] [ 80.512471][ T5074] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.512471][ T5074] [ 80.535789][ T5077] loop4: detected capacity change from 0 to 32768 [pid 5077] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5074] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5074] exit_group(0) = ? [pid 5074] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=20 /* 0.20 s */} --- [pid 5064] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... mount resumed>) = 0 [pid 5077] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5077] chdir("./file0" [pid 5064] newfstatat(3, "", [pid 5077] <... chdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 80.613769][ T5077] [ 80.613769][ T5077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.613769][ T5077] [pid 5064] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5077] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5077] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5064] unlink("./1/binderfs" [pid 5075] <... write resumed>) = 16777216 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5077] <... openat resumed>) = 4 [pid 5077] exit_group(0) = ? [pid 5075] munmap(0x7f952e400000, 138412032 [pid 5077] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=38 /* 0.38 s */} --- [ 80.690332][ T2420] [ 80.690332][ T2420] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.690332][ T2420] [ 80.719588][ T2420] [ 80.719588][ T2420] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.719588][ T2420] [ 80.734392][ T5064] [pid 5076] <... write resumed>) = 16777216 [pid 5075] <... munmap resumed>) = 0 [pid 5076] munmap(0x7f952e400000, 138412032 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5075] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... write resumed>) = 16777216 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] munmap(0x7f952e400000, 138412032 [pid 5065] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 5076] <... munmap resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] close(4) = 0 [pid 5075] mkdir("./file0", 0777) = 0 [pid 5065] newfstatat(3, "", [pid 5075] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... getdents64 resumed>0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5076] <... openat resumed>) = 4 [pid 5076] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 80.734392][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.734392][ T5064] [ 80.746229][ T5075] loop2: detected capacity change from 0 to 32768 [ 80.754122][ T110] [ 80.754122][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.754122][ T110] [ 80.766639][ T5064] [ 80.766639][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.766639][ T5064] [ 80.782333][ T5076] loop0: detected capacity change from 0 to 32768 [pid 5076] <... ioctl resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5076] close(3) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(4 [pid 5065] unlink("./1/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5076] mkdir("./file0", 0777) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5076] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... munmap resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [ 80.806937][ T1553] [ 80.806937][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.806937][ T1553] [ 80.832051][ T5075] [ 80.832051][ T5075] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.832051][ T5075] [ 80.844893][ T5076] [ 80.844893][ T5076] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.844893][ T5076] [pid 5078] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... mount resumed>) = 0 [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5078] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5078] ioctl(4, LOOP_SET_FD, 3 [pid 5076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] newfstatat(AT_FDCWD, "./1/file0", [pid 5076] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] chdir("./file0" [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 5075] <... mount resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] chdir("./file0") = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5075] exit_group(0) = ? [pid 5076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] +++ exited with 0 +++ [pid 5078] <... ioctl resumed>) = 0 [pid 5076] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... getdents64 resumed>0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5076] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5078] close(3) = 0 [pid 5078] close(4) = 0 [pid 5078] mkdir("./file0", 0777) = 0 [pid 5078] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=29 /* 0.29 s */} --- [pid 5076] <... openat resumed>) = 4 [pid 5064] getdents64(4, [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5076] exit_group(0 [pid 5064] <... getdents64 resumed>0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5064] close(4) = 0 [pid 5063] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] rmdir("./1/file0" [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [ 80.852023][ T1553] [ 80.852023][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.852023][ T1553] [ 80.874241][ T5078] loop1: detected capacity change from 0 to 32768 [ 80.893612][ T110] [ 80.893612][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.893612][ T110] [pid 5076] <... exit_group resumed>) = ? [pid 5064] <... rmdir resumed>) = 0 [pid 5063] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./1/binderfs") = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] +++ exited with 0 +++ [pid 5064] getdents64(3, [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 5064] <... getdents64 resumed>0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5078] <... mount resumed>) = 0 [pid 5064] close(3 [pid 5061] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [ 80.920564][ T2450] [ 80.920564][ T2450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.920564][ T2450] [ 80.922315][ T5078] [ 80.922315][ T5078] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.922315][ T5078] [ 80.943775][ T5065] [ 80.943775][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.943775][ T5065] [ 80.950191][ T2450] [ 80.950191][ T2450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.950191][ T2450] [ 80.966609][ T5065] [pid 5078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./1" [pid 5078] chdir("./file0") = 0 [pid 5078] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5078] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5078] exit_group(0 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] mkdir("./2", 0777 [pid 5078] <... exit_group resumed>) = ? [pid 5078] +++ exited with 0 +++ [pid 5064] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5078, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=36 /* 0.36 s */} --- [pid 5061] newfstatat(3, "", [pid 5064] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] getdents64(3, [pid 5062] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5062] newfstatat(3, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] unlink("./1/binderfs" [pid 5062] getdents64(3, [pid 5061] <... unlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./1/binderfs") = 0 [ 80.966609][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.966609][ T5065] [ 80.972197][ T110] [ 80.972197][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.972197][ T110] [ 80.992820][ T5063] [ 80.992820][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.992820][ T5063] [ 81.005079][ T5063] [ 81.005079][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.005079][ T5063] [pid 5062] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./1/file0", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./1/file0") = 0 [pid 5065] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./1") = 0 [pid 5065] mkdir("./2", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 81.020133][ T37] [ 81.020133][ T37] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.020133][ T37] [ 81.036198][ T1553] [ 81.036198][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.036198][ T1553] [ 81.046997][ T37] [ 81.046997][ T37] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.046997][ T37] [ 81.068790][ T1553] [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 81.068790][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.068790][ T1553] [ 81.075511][ T5062] [ 81.075511][ T5062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.075511][ T5062] [ 81.109896][ T5061] [ 81.109896][ T5061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.109896][ T5061] [pid 5063] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./1/file0") = 0 [ 81.128829][ T110] [ 81.128829][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.128829][ T110] [ 81.132341][ T109] [ 81.132341][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.132341][ T109] [ 81.150729][ T5062] [ 81.150729][ T5062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.150729][ T5062] [ 81.172037][ T5061] [pid 5063] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./1") = 0 [pid 5063] mkdir("./2", 0777 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./1/file0", [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./1/file0") = 0 [pid 5062] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./1") = 0 [pid 5062] mkdir("./2", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 81.172037][ T5061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.172037][ T5061] [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./1/file0") = 0 [pid 5061] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./1") = 0 [pid 5061] mkdir("./2", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5079 ./strace-static-x86_64: Process 5079 attached [pid 5079] set_robust_list(0x555555e75660, 24) = 0 [pid 5079] chdir("./2") = 0 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5079] memfd_create("syzkaller", 0) = 3 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5080 attached [pid 5080] set_robust_list(0x555555e75660, 24) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555e75650) = 5080 [pid 5080] chdir("./2") = 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5080] setpgid(0, 0) = 0 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5080] write(3, "1000", 4) = 4 [pid 5080] close(3) = 0 [pid 5080] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5080] memfd_create("syzkaller", 0) = 3 [pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5081 attached [pid 5081] set_robust_list(0x555555e75660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x555555e75650) = 5081 [pid 5081] <... set_robust_list resumed>) = 0 [pid 5081] chdir("./2") = 0 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5081] setpgid(0, 0) = 0 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1000", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5081] memfd_create("syzkaller", 0) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] close(3) = 0 [pid 5081] <... mmap resumed>) = 0x7f952e400000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5082 ./strace-static-x86_64: Process 5082 attached [pid 5082] set_robust_list(0x555555e75660, 24) = 0 [pid 5082] chdir("./2") = 0 [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5082] setpgid(0, 0 [pid 5061] close(3 [pid 5082] <... setpgid resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5083 attached ) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x555555e75650) = 5083 [pid 5083] set_robust_list(0x555555e75660, 24 [pid 5082] write(3, "1000", 4) = 4 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5082] close(3 [pid 5083] chdir("./2" [pid 5082] <... close resumed>) = 0 [pid 5083] <... chdir resumed>) = 0 [pid 5082] symlink("/dev/binderfs", "./binderfs" [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] <... symlink resumed>) = 0 [pid 5083] setpgid(0, 0) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5082] memfd_create("syzkaller", 0 [pid 5083] <... openat resumed>) = 3 [pid 5083] write(3, "1000", 4 [pid 5082] <... memfd_create resumed>) = 3 [pid 5083] <... write resumed>) = 4 [pid 5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] close(3) = 0 [pid 5082] <... mmap resumed>) = 0x7f952e400000 [pid 5083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5083] memfd_create("syzkaller", 0) = 3 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5079] <... write resumed>) = 16777216 [pid 5079] munmap(0x7f952e400000, 138412032) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5079] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5079] close(3) = 0 [pid 5079] close(4) = 0 [ 82.454271][ T5079] loop3: detected capacity change from 0 to 32768 [pid 5079] mkdir("./file0", 0777) = 0 [pid 5079] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000,") = 0 [ 82.539206][ T5079] [ 82.539206][ T5079] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.539206][ T5079] [pid 5079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5081] <... write resumed>) = 16777216 [pid 5079] chdir("./file0" [pid 5081] munmap(0x7f952e400000, 138412032 [pid 5079] <... chdir resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5079] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5079] exit_group(0) = ? [pid 5079] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] <... munmap resumed>) = 0 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./2/binderfs") = 0 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5081] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5080] <... write resumed>) = 16777216 [ 82.673730][ T1553] [ 82.673730][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.673730][ T1553] [ 82.689438][ T5081] loop1: detected capacity change from 0 to 32768 [pid 5080] munmap(0x7f952e400000, 138412032 [pid 5081] close(3) = 0 [pid 5081] close(4) = 0 [pid 5081] mkdir("./file0", 0777) = 0 [ 82.716141][ T1553] [ 82.716141][ T1553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.716141][ T1553] [pid 5081] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5080] <... munmap resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5080] close(3) = 0 [pid 5080] close(4) = 0 [pid 5080] mkdir("./file0", 0777) = 0 [ 82.765049][ T109] [ 82.765049][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.765049][ T109] [ 82.769671][ T5081] [ 82.769671][ T5081] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.769671][ T5081] [ 82.791890][ T5080] loop4: detected capacity change from 0 to 32768 [ 82.801658][ T5064] [ 82.801658][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.801658][ T5064] [pid 5080] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5081] <... mount resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5081] chdir("./file0") = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5064] <... umount2 resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./2/file0", [pid 5081] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5080] <... mount resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5081] exit_group(0 [pid 5080] <... openat resumed>) = 3 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... exit_group resumed>) = ? [pid 5080] chdir("./file0" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5080] <... chdir resumed>) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5080] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5081] +++ exited with 0 +++ [pid 5080] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} --- [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5080] exit_group(0 [pid 5064] getdents64(4, [pid 5062] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5062] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5080] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5080] +++ exited with 0 +++ [pid 5064] close(4 [pid 5062] <... getdents64 resumed>0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5080, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=35 /* 0.35 s */} --- [pid 5062] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5065] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./2/binderfs" [pid 5065] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [ 82.838809][ T5064] [ 82.838809][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.838809][ T5064] [ 82.867997][ T5080] [ 82.867997][ T5080] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.867997][ T5080] [pid 5064] rmdir("./2/file0" [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5062] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5065] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] unlink("./2/binderfs") = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./2") = 0 [pid 5064] mkdir("./3", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5082] <... write resumed>) = 16777216 [ 82.938609][ T2840] [ 82.938609][ T2840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.938609][ T2840] [ 82.967847][ T2450] [ 82.967847][ T2450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.967847][ T2450] [pid 5082] munmap(0x7f952e400000, 138412032 [pid 5083] <... write resumed>) = 16777216 [pid 5083] munmap(0x7f952e400000, 138412032 [pid 5082] <... munmap resumed>) = 0 [ 82.996137][ T2840] [ 82.996137][ T2840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.996137][ T2840] [ 83.002898][ T2450] [ 83.002898][ T2450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.002898][ T2450] [ 83.031115][ T110] [ 83.031115][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.031115][ T110] [pid 5082] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5082] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5083] <... munmap resumed>) = 0 [pid 5082] close(3) = 0 [pid 5082] close(4) = 0 [pid 5082] mkdir("./file0", 0777) = 0 [pid 5082] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 83.060060][ T5082] loop2: detected capacity change from 0 to 32768 [ 83.066791][ T5065] [ 83.066791][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.066791][ T5065] [ 83.077486][ T5062] [ 83.077486][ T5062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.077486][ T5062] [pid 5083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5083] close(3) = 0 [pid 5083] close(4) = 0 [pid 5083] mkdir("./file0", 0777) = 0 [pid 5083] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5082] <... mount resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 83.120174][ T5082] [ 83.120174][ T5082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.120174][ T5082] [ 83.129035][ T5062] [ 83.129035][ T5062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.129035][ T5062] [ 83.141638][ T5083] loop0: detected capacity change from 0 to 32768 [ 83.156696][ T110] [ 83.156696][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.156696][ T110] [pid 5082] chdir("./file0") = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5082] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5082] exit_group(0) = ? [pid 5082] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=31 /* 0.31 s */} --- [pid 5063] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5083] <... openat resumed>) = 3 [pid 5083] chdir("./file0" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./2/binderfs" [pid 5083] <... chdir resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5083] exit_group(0 [pid 5062] <... umount2 resumed>) = 0 [pid 5083] <... exit_group resumed>) = ? [pid 5062] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5061] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(AT_FDCWD, "./2/file0", [pid 5061] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(3, "", [pid 5062] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, [pid 5062] <... openat resumed>) = 4 [pid 5061] <... getdents64 resumed>0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(4, "", [pid 5061] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5062] <... getdents64 resumed>0x555555e7e730 /* 2 entries */, 32768) = 48 [ 83.189705][ T5083] [ 83.189705][ T5083] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.189705][ T5083] [ 83.213165][ T5065] [ 83.213165][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.213165][ T5065] [pid 5065] <... umount2 resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./2/binderfs") = 0 [pid 5062] <... getdents64 resumed>0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5061] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./2/file0" [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./2/file0") = 0 [pid 5065] getdents64(3, [pid 5062] getdents64(3, [pid 5065] <... getdents64 resumed>0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./2") = 0 [pid 5062] <... getdents64 resumed>0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5065] mkdir("./3", 0777 [ 83.272176][ T2840] [ 83.272176][ T2840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.272176][ T2840] [ 83.299229][ T37] [ 83.299229][ T37] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.299229][ T37] [ 83.318553][ T2840] [pid 5062] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] rmdir("./2") = 0 [pid 5062] mkdir("./3", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5064] <... ioctl resumed>) = 0 [ 83.318553][ T2840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.318553][ T2840] [ 83.331637][ T37] [ 83.331637][ T37] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.331637][ T37] [ 83.355138][ T109] [ 83.355138][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.355138][ T109] [ 83.355908][ T110] [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5084 [pid 5063] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5084 attached [pid 5084] set_robust_list(0x555555e75660, 24 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... set_robust_list resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] chdir("./3" [pid 5063] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 83.355908][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.355908][ T110] [ 83.367530][ T5063] [ 83.367530][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.367530][ T5063] [ 83.386908][ T5061] [ 83.386908][ T5061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.386908][ T5061] [ 83.397961][ T5063] [ 83.397961][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.397961][ T5063] [pid 5063] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5084] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./2/file0") = 0 [pid 5063] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./2") = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] setpgid(0, 0 [pid 5063] mkdir("./3", 0777 [pid 5084] <... setpgid resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... mkdir resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] write(3, "1000", 4) = 4 [pid 5063] <... openat resumed>) = 3 [pid 5084] close(3) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] memfd_create("syzkaller", 0) = 3 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [ 83.458715][ T5061] [ 83.458715][ T5061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.458715][ T5061] [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./2/file0") = 0 [pid 5061] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./2") = 0 [pid 5061] mkdir("./3", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5085 attached , child_tidptr=0x555555e75650) = 5085 [pid 5085] set_robust_list(0x555555e75660, 24) = 0 [pid 5085] chdir("./3") = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5065] close(3 [pid 5085] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... close resumed>) = 0 [pid 5085] <... symlink resumed>) = 0 [pid 5085] memfd_create("syzkaller", 0) = 3 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5086 ./strace-static-x86_64: Process 5086 attached [pid 5086] set_robust_list(0x555555e75660, 24) = 0 [pid 5086] chdir("./3") = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5086] setpgid(0, 0) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5086] write(3, "1000", 4) = 4 [pid 5086] close(3) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5086] memfd_create("syzkaller", 0 [pid 5063] close(3 [pid 5086] <... memfd_create resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... clone resumed>, child_tidptr=0x555555e75650) = 5087 [pid 5086] <... mmap resumed>) = 0x7f952e400000 ./strace-static-x86_64: Process 5087 attached [pid 5087] set_robust_list(0x555555e75660, 24) = 0 [pid 5087] chdir("./3") = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5087] setpgid(0, 0) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1000", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] memfd_create("syzkaller", 0) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5088 ./strace-static-x86_64: Process 5088 attached [pid 5088] set_robust_list(0x555555e75660, 24) = 0 [pid 5088] chdir("./3") = 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] setpgid(0, 0) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5088] memfd_create("syzkaller", 0) = 3 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5084] <... write resumed>) = 16777216 [pid 5084] munmap(0x7f952e400000, 138412032) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5084] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5084] close(3) = 0 [pid 5084] close(4) = 0 [pid 5084] mkdir("./file0", 0777) = 0 [ 84.680981][ T5084] loop3: detected capacity change from 0 to 32768 [pid 5084] mount("/dev/loop3", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000,") = 0 [pid 5084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5084] chdir("./file0") = 0 [ 84.771872][ T5084] [ 84.771872][ T5084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.771872][ T5084] [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5084] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5086] <... write resumed>) = 16777216 [pid 5084] exit_group(0) = ? [pid 5086] munmap(0x7f952e400000, 138412032 [pid 5084] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=32 /* 0.32 s */} --- [pid 5064] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./3/binderfs") = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] <... write resumed>) = 16777216 [pid 5086] <... munmap resumed>) = 0 [pid 5087] munmap(0x7f952e400000, 138412032 [pid 5086] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5086] close(3 [pid 5085] <... write resumed>) = 16777216 [pid 5086] <... close resumed>) = 0 [pid 5085] munmap(0x7f952e400000, 138412032 [pid 5086] close(4) = 0 [pid 5086] mkdir("./file0", 0777) = 0 [ 84.920052][ T2840] [ 84.920052][ T2840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.920052][ T2840] [ 84.941274][ T5086] loop4: detected capacity change from 0 to 32768 [ 84.946353][ T2840] [ 84.946353][ T2840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.946353][ T2840] [pid 5087] <... munmap resumed>) = 0 [pid 5086] mount("/dev/loop4", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5087] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... munmap resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 84.979976][ T109] [ 84.979976][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.979976][ T109] [ 85.003467][ T5064] [ 85.003467][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.003467][ T5064] [ 85.015095][ T5087] loop2: detected capacity change from 0 to 32768 [pid 5085] ioctl(4, LOOP_SET_FD, 3 [pid 5087] <... ioctl resumed>) = 0 [pid 5087] close(3 [pid 5085] <... ioctl resumed>) = 0 [pid 5087] <... close resumed>) = 0 [pid 5085] close(3 [pid 5087] close(4 [pid 5085] <... close resumed>) = 0 [pid 5087] <... close resumed>) = 0 [pid 5087] mkdir("./file0", 0777 [pid 5085] close(4 [pid 5087] <... mkdir resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5085] mkdir("./file0", 0777 [pid 5087] mount("/dev/loop2", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5085] <... mkdir resumed>) = 0 [pid 5085] mount("/dev/loop1", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5086] <... mount resumed>) = 0 [pid 5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5086] chdir("./file0") = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5086] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [ 85.028078][ T5085] loop1: detected capacity change from 0 to 32768 [ 85.029632][ T5086] [ 85.029632][ T5086] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.029632][ T5086] [ 85.055336][ T5064] [ 85.055336][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.055336][ T5064] [pid 5086] exit_group(0) = ? [pid 5086] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=32 /* 0.32 s */} --- [pid 5065] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(3, "", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] newfstatat(AT_FDCWD, "./3/file0", [pid 5065] getdents64(3, [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... write resumed>) = 16777216 [pid 5065] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5088] munmap(0x7f952e400000, 138412032 [pid 5087] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5064] rmdir("./3/file0" [pid 5087] <... openat resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5087] chdir("./file0" [ 85.101633][ T5087] [ 85.101633][ T5087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.101633][ T5087] [ 85.135718][ T5085] [ 85.135718][ T5085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.135718][ T5085] [pid 5065] unlink("./3/binderfs" [pid 5064] getdents64(3, [pid 5088] <... munmap resumed>) = 0 [pid 5087] <... chdir resumed>) = 0 [pid 5085] <... mount resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5087] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3 [pid 5088] <... openat resumed>) = 4 [pid 5087] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5085] <... openat resumed>) = 3 [pid 5088] ioctl(4, LOOP_SET_FD, 3 [pid 5087] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5085] chdir("./file0" [pid 5087] <... openat resumed>) = 4 [pid 5085] <... chdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5087] exit_group(0 [pid 5085] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] rmdir("./3" [pid 5087] <... exit_group resumed>) = ? [pid 5085] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5085] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4 [pid 5088] <... ioctl resumed>) = 0 [pid 5087] +++ exited with 0 +++ [pid 5085] exit_group(0 [pid 5064] <... rmdir resumed>) = 0 [pid 5085] <... exit_group resumed>) = ? [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=29 /* 0.29 s */} --- [pid 5088] close(3 [pid 5085] +++ exited with 0 +++ [pid 5064] mkdir("./4", 0777 [pid 5088] <... close resumed>) = 0 [ 85.171954][ T2840] [ 85.171954][ T2840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.171954][ T2840] [ 85.184519][ T5088] loop0: detected capacity change from 0 to 32768 [ 85.196037][ T2840] [ 85.196037][ T2840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.196037][ T2840] [ 85.209756][ T110] [ 85.209756][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.209756][ T110] [pid 5088] close(4) = 0 [pid 5088] mkdir("./file0", 0777) = 0 [pid 5088] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID|MS_NODIRATIME|MS_STRICTATIME, "iocharset=cp850,errors=continue,resize,errors=continue,resize=0x0000000000000000," [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=33 /* 0.33 s */} --- [pid 5064] <... openat resumed>) = 3 [pid 5063] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... restart_syscall resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 5062] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(3, "", [pid 5063] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(3, [pid 5063] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... getdents64 resumed>0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5063] unlink("./3/binderfs" [ 85.221016][ T5065] [ 85.221016][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.221016][ T5065] [ 85.234868][ T5065] [ 85.234868][ T5065] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.234868][ T5065] [pid 5062] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5088] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5088] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./3/binderfs" [pid 5065] newfstatat(AT_FDCWD, "./3/file0", [pid 5062] <... unlink resumed>) = 0 [pid 5088] chdir("./file0" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... chdir resumed>) = 0 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5088] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] newfstatat(4, "", [pid 5088] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5088] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 [pid 5065] rmdir("./3/file0") = 0 [pid 5065] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [ 85.271376][ T5088] [ 85.271376][ T5088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.271376][ T5088] [ 85.286730][ T2840] [ 85.286730][ T2840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.286730][ T2840] [ 85.302418][ T2450] [ 85.302418][ T2450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.302418][ T2450] [pid 5065] rmdir("./3") = 0 [pid 5065] mkdir("./4", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5088] <... openat resumed>) = 4 [pid 5088] exit_group(0) = ? [pid 5088] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=33 /* 0.33 s */} --- [pid 5061] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x555555e766f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./3/binderfs") = 0 [ 85.319799][ T2840] [ 85.319799][ T2840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.319799][ T2840] [ 85.324361][ T2450] [ 85.324361][ T2450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.324361][ T2450] [ 85.353664][ T5062] [ 85.353664][ T5062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.353664][ T5062] [ 85.358890][ T2420] [ 85.358890][ T2420] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.358890][ T2420] [ 85.365622][ T5063] [ 85.365622][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.365622][ T5063] [ 85.386573][ T5062] [ 85.386573][ T5062] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.386573][ T5062] [ 85.419242][ T109] [ 85.419242][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.419242][ T109] [ 85.427452][ T2420] [ 85.427452][ T2420] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.427452][ T2420] [ 85.433789][ T5063] [ 85.433789][ T5063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.433789][ T5063] [pid 5061] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./3/file0") = 0 [pid 5062] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./3") = 0 [pid 5062] mkdir("./4", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 85.467977][ T5061] [ 85.467977][ T5061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.467977][ T5061] [ 85.489302][ T109] [ 85.489302][ T109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.489302][ T109] [ 85.510239][ T110] [ 85.510239][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.510239][ T110] [ 85.527428][ T5061] [ 85.527428][ T5061] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.527428][ T5061] [ 85.529518][ T110] ================================================================== [ 85.545996][ T110] BUG: KASAN: slab-use-after-free in txEnd+0x354/0x560 [ 85.552934][ T110] Write of size 8 at addr ffff88802b178840 by task jfsCommit/110 [ 85.560680][ T110] [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./3/file0") = 0 [pid 5061] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./3") = 0 [pid 5061] mkdir("./4", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 85.563024][ T110] CPU: 1 PID: 110 Comm: jfsCommit Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 85.572861][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 85.582955][ T110] Call Trace: [ 85.586266][ T110] [ 85.589220][ T110] dump_stack_lvl+0x1e7/0x2e0 [ 85.593953][ T110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.600232][ T110] ? __pfx__printk+0x10/0x10 [ 85.604859][ T110] ? _printk+0xd5/0x120 [ 85.609047][ T110] ? __virt_addr_valid+0x183/0x520 [ 85.614197][ T110] ? __virt_addr_valid+0x183/0x520 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5089 [ 85.619342][ T110] print_report+0x167/0x540 [ 85.623877][ T110] ? __virt_addr_valid+0x183/0x520 [ 85.629026][ T110] ? __virt_addr_valid+0x183/0x520 [ 85.634183][ T110] ? __virt_addr_valid+0x44e/0x520 [ 85.639439][ T110] ? __phys_addr+0xba/0x170 [ 85.643992][ T110] ? txEnd+0x354/0x560 [ 85.648099][ T110] kasan_report+0x142/0x180 [ 85.652652][ T110] ? txEnd+0x354/0x560 [ 85.656765][ T110] kasan_check_range+0x282/0x290 [ 85.661752][ T110] txEnd+0x354/0x560 [ 85.665792][ T110] jfs_lazycommit+0x619/0xb70 [ 85.670515][ T110] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 85.676452][ T110] ? lockdep_hardirqs_on+0x98/0x140 [ 85.681700][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 85.686963][ T110] ? __pfx_default_wake_function+0x10/0x10 [ 85.692821][ T110] ? __kthread_parkme+0x168/0x1d0 [ 85.697899][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 85.703137][ T110] kthread+0x2ef/0x390 [ 85.707237][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 85.712468][ T110] ? __pfx_kthread+0x10/0x10 [ 85.717088][ T110] ret_from_fork+0x4b/0x80 [ 85.721537][ T110] ? __pfx_kthread+0x10/0x10 [ 85.726163][ T110] ret_from_fork_asm+0x1b/0x30 [ 85.730983][ T110] [ 85.734023][ T110] [ 85.736361][ T110] Allocated by task 5087: [ 85.740709][ T110] kasan_save_track+0x3f/0x80 [ 85.745420][ T110] __kasan_kmalloc+0x98/0xb0 [ 85.750046][ T110] kmalloc_trace+0x1d6/0x360 [ 85.754683][ T110] lmLogOpen+0x335/0x1050 [ 85.759053][ T110] jfs_mount_rw+0xf1/0x6a0 [ 85.763526][ T110] jfs_fill_super+0x681/0xc50 [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [ 85.768254][ T110] mount_bdev+0x20a/0x2d0 [ 85.772708][ T110] legacy_get_tree+0xee/0x190 [ 85.777421][ T110] vfs_get_tree+0x90/0x2a0 [ 85.781881][ T110] do_new_mount+0x2be/0xb40 [ 85.786424][ T110] __se_sys_mount+0x2d9/0x3c0 [ 85.791253][ T110] do_syscall_64+0xf9/0x240 [ 85.795808][ T110] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 85.801743][ T110] [ 85.804087][ T110] Freed by task 5063: [ 85.808091][ T110] kasan_save_track+0x3f/0x80 [ 85.812908][ T110] kasan_save_free_info+0x4e/0x60 [ 85.817985][ T110] poison_slab_object+0xa6/0xe0 [ 85.822875][ T110] __kasan_slab_free+0x34/0x70 [ 85.827670][ T110] kfree+0x14a/0x380 [ 85.831621][ T110] lmLogClose+0x2a1/0x530 [ 85.836036][ T110] jfs_umount+0x2ce/0x3a0 [ 85.840408][ T110] jfs_put_super+0x8a/0x190 [ 85.845048][ T110] generic_shutdown_super+0x136/0x2d0 [ 85.850458][ T110] kill_block_super+0x44/0x90 [ 85.855343][ T110] deactivate_locked_super+0xc4/0x130 [ 85.860754][ T110] cleanup_mnt+0x426/0x4c0 [ 85.865226][ T110] task_work_run+0x24e/0x310 [ 85.869949][ T110] ptrace_notify+0x2d1/0x380 [ 85.874588][ T110] syscall_exit_work+0xbb/0x170 [ 85.879493][ T110] syscall_exit_to_user_mode+0x27f/0x370 [ 85.885169][ T110] do_syscall_64+0x108/0x240 [ 85.889882][ T110] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 85.895833][ T110] [ 85.898208][ T110] The buggy address belongs to the object at ffff88802b178800 [ 85.898208][ T110] which belongs to the cache kmalloc-1k of size 1024 [ 85.912297][ T110] The buggy address is located 64 bytes inside of [ 85.912297][ T110] freed 1024-byte region [ffff88802b178800, ffff88802b178c00) [ 85.926217][ T110] [ 85.928568][ T110] The buggy address belongs to the physical page: [ 85.935002][ T110] page:ffffea0000ac5e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b178 [ 85.945274][ T110] head:ffffea0000ac5e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.954237][ T110] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 85.962767][ T110] page_type: 0xffffffff() [ 85.967216][ T110] raw: 00fff00000000840 ffff888014c41dc0 0000000000000000 0000000000000001 [ 85.975859][ T110] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 85.984653][ T110] page dumped because: kasan: bad access detected [ 85.991099][ T110] page_owner tracks the page as allocated [ 85.996846][ T110] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4730, tgid 4730 (dhcpcd-run-hook), ts 48153319566, free_ts 48146068988 [ 86.017752][ T110] post_alloc_hook+0x1ea/0x210 [ 86.022588][ T110] get_page_from_freelist+0x33ea/0x3580 [ 86.028171][ T110] __alloc_pages+0x255/0x680 [ 86.032805][ T110] alloc_slab_page+0x5f/0x160 [ 86.037600][ T110] new_slab+0x84/0x2f0 [ 86.041700][ T110] ___slab_alloc+0xd17/0x13e0 [ 86.046584][ T110] __kmalloc+0x2e0/0x490 [ 86.050869][ T110] tomoyo_init_log+0x1b3d/0x2050 [ 86.055863][ T110] tomoyo_supervisor+0x38a/0x11f0 [ 86.061086][ T110] tomoyo_env_perm+0x178/0x210 [ 86.065903][ T110] tomoyo_find_next_domain+0x1383/0x1cf0 [ 86.071571][ T110] tomoyo_bprm_check_security+0x114/0x180 [ 86.077333][ T110] security_bprm_check+0x66/0xa0 [ 86.082312][ T110] bprm_execve+0xa55/0x1790 [ 86.086859][ T110] do_execveat_common+0x552/0x6f0 [ 86.091926][ T110] __x64_sys_execve+0x92/0xb0 [ 86.096643][ T110] page last free pid 4728 tgid 4728 stack trace: [ 86.103077][ T110] free_unref_page_prepare+0x95d/0xa80 [ 86.108588][ T110] free_unref_page+0x37/0x3f0 [ 86.113389][ T110] __put_partials+0xeb/0x130 [ 86.118016][ T110] put_cpu_partial+0x17b/0x250 [ 86.122902][ T110] __slab_free+0x302/0x410 [ 86.127353][ T110] qlist_free_all+0x6d/0xd0 [ 86.132058][ T110] kasan_quarantine_reduce+0x14f/0x170 [ 86.137637][ T110] __kasan_slab_alloc+0x23/0x80 [ 86.142509][ T110] kmem_cache_alloc+0x16f/0x340 [ 86.147403][ T110] getname_flags+0xbc/0x4f0 [ 86.152026][ T110] vfs_fstatat+0x11c/0x190 [ 86.156480][ T110] __x64_sys_newfstatat+0x117/0x190 [ 86.161712][ T110] do_syscall_64+0xf9/0x240 [ 86.166257][ T110] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 86.172204][ T110] [ 86.174554][ T110] Memory state around the buggy address: [ 86.180208][ T110] ffff88802b178700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.188293][ T110] ffff88802b178780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.196371][ T110] >ffff88802b178800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.204446][ T110] ^ [ 86.210706][ T110] ffff88802b178880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e75650) = 5090 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555555e7e730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555555e7e730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./3/file0") = 0 [pid 5063] getdents64(3, 0x555555e766f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./3") = 0 [pid 5063] mkdir("./4", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5090 attached ./strace-static-x86_64: Process 5089 attached [pid 5062] close(3 [pid 5090] set_robust_list(0x555555e75660, 24 [pid 5089] set_robust_list(0x555555e75660, 24 [pid 5062] <... close resumed>) = 0 [pid 5090] <... set_robust_list resumed>) = 0 [pid 5090] chdir("./4" [pid 5089] <... set_robust_list resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5090] <... chdir resumed>) = 0 [pid 5089] chdir("./4" [pid 5062] <... clone resumed>, child_tidptr=0x555555e75650) = 5091 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5090] setpgid(0, 0 [pid 5089] <... chdir resumed>) = 0 [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5090] <... setpgid resumed>) = 0 [pid 5089] <... prctl resumed>) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] setpgid(0, 0 [pid 5090] <... openat resumed>) = 3 [pid 5089] <... setpgid resumed>) = 0 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5090] write(3, "1000", 4) = 4 [pid 5089] <... openat resumed>) = 3 [pid 5090] close(3) = 0 [pid 5089] write(3, "1000", 4 [pid 5090] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5089] <... write resumed>) = 4 [pid 5089] close(3) = 0 [pid 5089] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5090] memfd_create("syzkaller", 0 [pid 5089] memfd_create("syzkaller", 0) = 3 [pid 5090] <... memfd_create resumed>) = 3 [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 [pid 5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f952e400000 ./strace-static-x86_64: Process 5091 attached [pid 5091] set_robust_list(0x555555e75660, 24) = 0 [pid 5091] chdir("./4") = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 86.218794][ T110] ffff88802b178900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.226867][ T110] ================================================================== [ 86.256728][ T110] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.264078][ T110] CPU: 1 PID: 110 Comm: jfsCommit Not tainted 6.8.0-rc4-syzkaller-00267-g0f1dd5e91e2b #0 [ 86.273925][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 86.284022][ T110] Call Trace: [ 86.287332][ T110] [ 86.290289][ T110] dump_stack_lvl+0x1e7/0x2e0 [ 86.295020][ T110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.300336][ T110] ? __pfx__printk+0x10/0x10 [ 86.304965][ T110] ? vscnprintf+0x5d/0x90 [ 86.309324][ T110] panic+0x349/0x860 [ 86.313254][ T110] ? check_panic_on_warn+0x21/0xb0 [ 86.318401][ T110] ? __pfx_panic+0x10/0x10 [ 86.322962][ T110] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 86.328982][ T110] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.335348][ T110] ? print_report+0x4ff/0x540 [ 86.340079][ T110] check_panic_on_warn+0x86/0xb0 [ 86.345070][ T110] ? txEnd+0x354/0x560 [ 86.349209][ T110] end_report+0x6e/0x140 [ 86.353505][ T110] kasan_report+0x153/0x180 [ 86.358156][ T110] ? txEnd+0x354/0x560 [ 86.362273][ T110] kasan_check_range+0x282/0x290 [ 86.367463][ T110] txEnd+0x354/0x560 [ 86.371409][ T110] jfs_lazycommit+0x619/0xb70 [ 86.376142][ T110] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 86.382193][ T110] ? lockdep_hardirqs_on+0x98/0x140 [ 86.387433][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 86.392673][ T110] ? __pfx_default_wake_function+0x10/0x10 [ 86.398513][ T110] ? __kthread_parkme+0x168/0x1d0 [ 86.403575][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 86.408810][ T110] kthread+0x2ef/0x390 [ 86.412918][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 86.418174][ T110] ? __pfx_kthread+0x10/0x10 [ 86.422818][ T110] ret_from_fork+0x4b/0x80 [ 86.427275][ T110] ? __pfx_kthread+0x10/0x10 [ 86.431909][ T110] ret_from_fork_asm+0x1b/0x30 [ 86.436741][ T110] [ 86.440149][ T110] Kernel Offset: disabled [ 86.444478][ T110] Rebooting in 86400 seconds..