./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1361089734 <...> Warning: Permanently added '10.128.10.50' (ED25519) to the list of known hosts. execve("./syz-executor1361089734", ["./syz-executor1361089734"], 0x7fffbda216f0 /* 10 vars */) = 0 brk(NULL) = 0x555590da8000 brk(0x555590da8d00) = 0x555590da8d00 arch_prctl(ARCH_SET_FS, 0x555590da8380) = 0 set_tid_address(0x555590da8650) = 5832 set_robust_list(0x555590da8660, 24) = 0 rseq(0x555590da8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1361089734", 4096) = 28 getrandom("\x5e\xce\x9e\x64\x08\x87\x7f\x33", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555590da8d00 brk(0x555590dc9d00) = 0x555590dc9d00 brk(0x555590dca000) = 0x555590dca000 mprotect(0x7fbea47f3000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5833 attached , child_tidptr=0x555590da8650) = 5833 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] set_robust_list(0x555590da8660, 24./strace-static-x86_64: Process 5835 attached ) = 0 [pid 5833] mkdir("./syzkaller.GLuHUL", 0700 [pid 5832] <... clone resumed>, child_tidptr=0x555590da8650) = 5835 [pid 5835] set_robust_list(0x555590da8660, 24 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5835] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5836 attached [pid 5835] getrandom( [pid 5836] set_robust_list(0x555590da8660, 24 [pid 5833] <... mkdir resumed>) = 0 [pid 5835] <... getrandom resumed>"\x48\xd9\x34\xd5\x03\xd5\x07\x94", 8, GRND_NONBLOCK) = 8 [pid 5832] <... clone resumed>, child_tidptr=0x555590da8650) = 5836 [pid 5833] chmod("./syzkaller.GLuHUL", 0777 [pid 5835] mkdir("./syzkaller.MxkLRj", 0700 [pid 5836] <... set_robust_list resumed>) = 0 [pid 5836] mkdir("./syzkaller.nYfzCV", 0700 [pid 5835] <... mkdir resumed>) = 0 [pid 5833] <... chmod resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5836] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5837 attached [pid 5835] chmod("./syzkaller.MxkLRj", 0777 [pid 5833] chdir("./syzkaller.GLuHUL" [pid 5832] <... clone resumed>, child_tidptr=0x555590da8650) = 5837 [pid 5837] set_robust_list(0x555590da8660, 24 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5836] chmod("./syzkaller.nYfzCV", 0777 [pid 5835] <... chmod resumed>) = 0 [pid 5833] <... chdir resumed>) = 0 [pid 5837] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5838 attached [pid 5836] <... chmod resumed>) = 0 [pid 5835] chdir("./syzkaller.MxkLRj" [pid 5833] mkdir("./0", 0777 [pid 5832] <... clone resumed>, child_tidptr=0x555590da8650) = 5838 [pid 5838] set_robust_list(0x555590da8660, 24 [pid 5835] <... chdir resumed>) = 0 [pid 5832] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5838] <... set_robust_list resumed>) = 0 [pid 5837] mkdir("./syzkaller.3Y1LyD", 0700./strace-static-x86_64: Process 5839 attached [pid 5836] chdir("./syzkaller.nYfzCV" [pid 5835] mkdir("./0", 0777 [pid 5833] <... mkdir resumed>) = 0 [pid 5832] <... clone resumed>, child_tidptr=0x555590da8650) = 5839 [pid 5839] set_robust_list(0x555590da8660, 24 [pid 5837] <... mkdir resumed>) = 0 [pid 5836] <... chdir resumed>) = 0 [pid 5835] <... mkdir resumed>) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5839] <... set_robust_list resumed>) = 0 [pid 5838] mkdir("./syzkaller.kBuyuM", 0700 [pid 5837] chmod("./syzkaller.3Y1LyD", 0777 [pid 5836] mkdir("./0", 0777 [ 91.184682][ T1201] cfg80211: failed to load regulatory.db [pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5839] mkdir("./syzkaller.zXKkU4", 0700 [pid 5835] <... openat resumed>) = 3 [pid 5835] ioctl(3, LOOP_CLR_FD [pid 5839] <... mkdir resumed>) = 0 [pid 5838] <... mkdir resumed>) = 0 [pid 5837] <... chmod resumed>) = 0 [pid 5836] <... mkdir resumed>) = 0 [pid 5833] <... openat resumed>) = 3 [pid 5839] chmod("./syzkaller.zXKkU4", 0777 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5833] ioctl(3, LOOP_CLR_FD [pid 5838] chmod("./syzkaller.kBuyuM", 0777 [pid 5837] chdir("./syzkaller.3Y1LyD" [pid 5835] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5839] <... chmod resumed>) = 0 [pid 5838] <... chmod resumed>) = 0 [pid 5837] <... chdir resumed>) = 0 [pid 5836] <... openat resumed>) = 3 [pid 5837] mkdir("./0", 0777 [pid 5839] chdir("./syzkaller.zXKkU4" [pid 5833] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5839] <... chdir resumed>) = 0 [pid 5838] chdir("./syzkaller.kBuyuM" [pid 5836] ioctl(3, LOOP_CLR_FD [pid 5835] close(3 [pid 5839] mkdir("./0", 0777 [pid 5833] close(3 [pid 5838] <... chdir resumed>) = 0 [pid 5836] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5835] <... close resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5837] <... mkdir resumed>) = 0 [pid 5839] <... mkdir resumed>) = 0 [pid 5838] mkdir("./0", 0777 [pid 5837] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5836] close(3 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5833] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5840 attached [pid 5839] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5838] <... mkdir resumed>) = 0 [pid 5837] <... openat resumed>) = 3 [pid 5836] <... close resumed>) = 0 [pid 5840] set_robust_list(0x555590da8660, 24) = 0 [pid 5840] chdir("./0" [pid 5839] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5841 attached [pid 5838] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5837] ioctl(3, LOOP_CLR_FD [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5835] <... clone resumed>, child_tidptr=0x555590da8650) = 5840 [pid 5840] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5842 attached [pid 5841] set_robust_list(0x555590da8660, 24 [pid 5838] <... openat resumed>) = 3 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5837] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5841] <... set_robust_list resumed>) = 0 [pid 5839] ioctl(3, LOOP_CLR_FD [pid 5841] chdir("./0" [pid 5839] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5837] close(3 [pid 5833] <... clone resumed>, child_tidptr=0x555590da8650) = 5841 [pid 5841] <... chdir resumed>) = 0 [pid 5839] close(3 [pid 5837] <... close resumed>) = 0 [pid 5842] set_robust_list(0x555590da8660, 24 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5840] <... prctl resumed>) = 0 [pid 5839] <... close resumed>) = 0 [pid 5838] ioctl(3, LOOP_CLR_FD [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached [pid 5842] <... set_robust_list resumed>) = 0 [pid 5841] <... prctl resumed>) = 0 [pid 5840] setpgid(0, 0 [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5838] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5836] <... clone resumed>, child_tidptr=0x555590da8650) = 5842 [pid 5842] chdir("./0" [pid 5841] setpgid(0, 0 [pid 5840] <... setpgid resumed>) = 0 [pid 5838] close(3 [pid 5843] set_robust_list(0x555590da8660, 24 [pid 5842] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5844 attached [pid 5843] <... set_robust_list resumed>) = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5841] <... setpgid resumed>) = 0 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5838] <... close resumed>) = 0 [pid 5842] <... prctl resumed>) = 0 [pid 5843] chdir("./0" [pid 5838] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] setpgid(0, 0 [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5845 attached [pid 5844] set_robust_list(0x555590da8660, 24 [pid 5843] <... chdir resumed>) = 0 [pid 5842] <... setpgid resumed>) = 0 [pid 5841] <... openat resumed>) = 3 [pid 5840] <... openat resumed>) = 3 [pid 5839] <... clone resumed>, child_tidptr=0x555590da8650) = 5844 [pid 5837] <... clone resumed>, child_tidptr=0x555590da8650) = 5843 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5845] set_robust_list(0x555590da8660, 24 [pid 5844] <... set_robust_list resumed>) = 0 [pid 5843] <... prctl resumed>) = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5840] write(3, "1000", 4 [pid 5838] <... clone resumed>, child_tidptr=0x555590da8650) = 5845 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5844] chdir("./0" [pid 5843] setpgid(0, 0 [pid 5840] <... write resumed>) = 4 [pid 5842] <... openat resumed>) = 3 [pid 5843] <... setpgid resumed>) = 0 [pid 5840] close(3 [pid 5842] write(3, "1000", 4 [pid 5844] <... chdir resumed>) = 0 [pid 5841] write(3, "1000", 4 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5845] chdir("./0" [pid 5844] <... prctl resumed>) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5842] <... write resumed>) = 4 [pid 5840] <... close resumed>) = 0 [pid 5845] <... chdir resumed>) = 0 [pid 5844] setpgid(0, 0 [pid 5842] close(3 [pid 5841] <... write resumed>) = 4 [pid 5840] symlink("/dev/binderfs", "./binderfs" [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5844] <... setpgid resumed>) = 0 [pid 5842] <... close resumed>) = 0 [pid 5841] close(3 [pid 5845] <... prctl resumed>) = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5843] <... openat resumed>) = 3 [pid 5842] symlink("/dev/binderfs", "./binderfs" [pid 5841] <... close resumed>) = 0 executing program executing program [pid 5840] <... symlink resumed>) = 0 [pid 5845] setpgid(0, 0 [pid 5844] <... openat resumed>) = 3 [pid 5843] write(3, "1000", 4 [pid 5842] <... symlink resumed>) = 0 [pid 5841] symlink("/dev/binderfs", "./binderfs" [pid 5845] <... setpgid resumed>) = 0 [pid 5843] <... write resumed>) = 4 [pid 5842] write(1, "executing program\n", 18 [pid 5840] write(1, "executing program\n", 18 [pid 5843] close(3 [pid 5842] <... write resumed>) = 18 [pid 5840] <... write resumed>) = 18 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5843] <... close resumed>) = 0 [pid 5842] memfd_create("syzkaller", 0 [pid 5841] <... symlink resumed>) = 0 [pid 5844] write(3, "1000", 4 [pid 5841] write(1, "executing program\n", 18 [pid 5840] memfd_create("syzkaller", 0executing program [pid 5845] <... openat resumed>) = 3 [pid 5843] symlink("/dev/binderfs", "./binderfs" [pid 5842] <... memfd_create resumed>) = 3 [pid 5841] <... write resumed>) = 18 [pid 5840] <... memfd_create resumed>) = 3 [pid 5845] write(3, "1000", 4) = 4 [pid 5844] <... write resumed>) = 4 [pid 5843] <... symlink resumed>) = 0 [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5841] memfd_create("syzkaller", 0 [pid 5840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5845] close(3) = 0 [pid 5844] close(3 [pid 5840] <... mmap resumed>) = 0x7fbe9c200000 [pid 5845] symlink("/dev/binderfs", "./binderfs" [pid 5844] <... close resumed>) = 0 [pid 5844] symlink("/dev/binderfs", "./binderfs" [pid 5842] <... mmap resumed>) = 0x7fbe9c200000 [pid 5841] <... memfd_create resumed>) = 3 [pid 5845] <... symlink resumed>) = 0 [pid 5844] <... symlink resumed>) = 0 executing program [pid 5844] write(1, "executing program\n", 18 [pid 5841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 executing program [pid 5845] write(1, "executing program\n", 18 [pid 5844] <... write resumed>) = 18 [pid 5841] <... mmap resumed>) = 0x7fbe9c200000 [pid 5845] <... write resumed>) = 18 [pid 5844] memfd_create("syzkaller", 0) = 3 [pid 5844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbe9c200000 [pid 5845] memfd_create("syzkaller", 0 [pid 5843] write(1, "executing program\n", 18executing program [pid 5845] <... memfd_create resumed>) = 3 [pid 5843] <... write resumed>) = 18 [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5843] memfd_create("syzkaller", 0 [pid 5845] <... mmap resumed>) = 0x7fbe9c200000 [pid 5843] <... memfd_create resumed>) = 3 [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbe9c200000 [pid 5841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5844] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5844] <... write resumed>) = 16777216 [pid 5841] <... write resumed>) = 16777216 [pid 5844] munmap(0x7fbe9c200000, 138412032 [pid 5841] munmap(0x7fbe9c200000, 138412032 [pid 5840] <... write resumed>) = 16777216 [pid 5840] munmap(0x7fbe9c200000, 138412032 [pid 5841] <... munmap resumed>) = 0 [pid 5844] <... munmap resumed>) = 0 [pid 5842] <... write resumed>) = 16777216 [pid 5841] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5840] <... munmap resumed>) = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5841] <... openat resumed>) = 4 [pid 5844] <... openat resumed>) = 4 [pid 5840] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5844] ioctl(4, LOOP_SET_FD, 3 [pid 5842] munmap(0x7fbe9c200000, 138412032 [pid 5841] ioctl(4, LOOP_SET_FD, 3 [pid 5840] <... openat resumed>) = 4 [pid 5843] <... write resumed>) = 16777216 [pid 5845] <... write resumed>) = 16777216 [pid 5844] <... ioctl resumed>) = 0 [pid 5842] <... munmap resumed>) = 0 [pid 5841] <... ioctl resumed>) = 0 [pid 5840] ioctl(4, LOOP_SET_FD, 3 [pid 5845] munmap(0x7fbe9c200000, 138412032 [pid 5844] close(3 [pid 5841] close(3 [pid 5844] <... close resumed>) = 0 [pid 5841] <... close resumed>) = 0 [pid 5840] <... ioctl resumed>) = 0 [pid 5844] close(4 [pid 5841] close(4 [pid 5844] <... close resumed>) = 0 [pid 5841] <... close resumed>) = 0 [pid 5844] mkdir("./file1", 0777 [pid 5841] mkdir("./file1", 0777 [pid 5843] munmap(0x7fbe9c200000, 138412032 [ 92.165581][ T5844] loop5: detected capacity change from 0 to 32768 [ 92.185240][ T5841] loop0: detected capacity change from 0 to 32768 [ 92.203369][ T5840] loop1: detected capacity change from 0 to 32768 [pid 5842] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5844] <... mkdir resumed>) = 0 [pid 5842] <... openat resumed>) = 4 [pid 5841] <... mkdir resumed>) = 0 [pid 5842] ioctl(4, LOOP_SET_FD, 3 [pid 5841] mount("/dev/loop0", "./file1", "jfs", MS_NODIRATIME|MS_SILENT, "nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity" [pid 5844] mount("/dev/loop5", "./file1", "jfs", MS_NODIRATIME|MS_SILENT, "nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity" [pid 5840] close(3) = 0 [pid 5841] <... mount resumed>) = 0 [pid 5840] close(4 [pid 5841] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5840] <... close resumed>) = 0 [pid 5840] mkdir("./file1", 0777 [pid 5841] <... openat resumed>) = 3 [pid 5840] <... mkdir resumed>) = 0 [pid 5840] mount("/dev/loop1", "./file1", "jfs", MS_NODIRATIME|MS_SILENT, "nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity" [pid 5841] chdir("./file1") = 0 [pid 5841] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5841] exit_group(0) = ? [pid 5842] <... ioctl resumed>) = 0 [pid 5841] +++ exited with 0 +++ [pid 5842] close(3 [pid 5833] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5841, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5842] <... close resumed>) = 0 [pid 5833] restart_syscall(<... resuming interrupted clone ...> [pid 5842] close(4) = 0 [pid 5842] mkdir("./file1", 0777) = 0 [pid 5842] mount("/dev/loop2", "./file1", "jfs", MS_NODIRATIME|MS_SILENT, "nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity" [pid 5844] <... mount resumed>) = 0 [pid 5833] <... restart_syscall resumed>) = 0 [pid 5844] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5844] chdir("./file1" [pid 5833] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5833] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5833] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5833] getdents64(3, 0x555590da96f0 /* 4 entries */, 32768) = 112 [pid 5833] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5840] <... mount resumed>) = 0 [pid 5840] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5840] chdir("./file1") = 0 [pid 5840] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5840] exit_group(0) = ? [pid 5840] +++ exited with 0 +++ [pid 5835] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5835] restart_syscall(<... resuming interrupted clone ...> [pid 5844] <... chdir resumed>) = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5835] <... restart_syscall resumed>) = 0 [pid 5844] exit_group(0) = ? [pid 5835] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5835] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5835] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] getdents64(3, 0x555590da96f0 /* 4 entries */, 32768) = 112 [pid 5835] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5842] <... mount resumed>) = 0 [ 92.216711][ T5842] loop2: detected capacity change from 0 to 32768 [pid 5842] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5845] <... munmap resumed>) = 0 [pid 5844] +++ exited with 0 +++ [pid 5842] <... openat resumed>) = 3 [pid 5842] chdir("./file1" [pid 5839] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5842] <... chdir resumed>) = 0 [pid 5839] restart_syscall(<... resuming interrupted clone ...> [pid 5842] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5839] <... restart_syscall resumed>) = 0 [ 92.286088][ T5835] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 92.298221][ T5835] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 92.306642][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor136 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 92.319057][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.329118][ T5835] RIP: 0010:lmLogSync+0x22e/0x9d0 [ 92.334177][ T5835] Code: b9 b9 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 30 6c e5 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 14 6c e5 fe 49 8b 3f e8 3c b9 b9 fe [ 92.353788][ T5835] RSP: 0018:ffffc90003c2fa40 EFLAGS: 00010216 [ 92.359862][ T5835] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff888032f69e00 [ 92.367831][ T5835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.375799][ T5835] RBP: ffffc90003c2fb48 R08: ffffc90003c2f99f R09: ffffc90003c2f828 [ 92.383769][ T5835] R10: dffffc0000000000 R11: fffff52000785f34 R12: ffff88807bc6a000 [ 92.391742][ T5835] R13: dffffc0000000000 R14: ffff888033abda38 R15: 0000000000000030 [ 92.399717][ T5835] FS: 0000555590da8380(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 92.408653][ T5835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.415230][ T5835] CR2: 00007fbea47f7130 CR3: 000000002ea45000 CR4: 0000000000350ef0 [ 92.423214][ T5835] Call Trace: [ 92.426572][ T5835] [ 92.429580][ T5835] ? __pfx___mutex_lock+0x10/0x10 [ 92.434624][ T5835] ? __pfx_lmLogSync+0x10/0x10 [ 92.439396][ T5835] ? __pfx_dquot_writeback_dquots+0x10/0x10 [ 92.445319][ T5835] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 92.451399][ T5835] jfs_syncpt+0x7b/0x90 [ 92.455564][ T5835] jfs_sync_fs+0x87/0xa0 [ 92.459812][ T5835] sync_filesystem+0xee/0x230 [ 92.464495][ T5835] generic_shutdown_super+0x6f/0x2c0 [ 92.469778][ T5835] kill_block_super+0x44/0x90 [ 92.474453][ T5835] deactivate_locked_super+0xbc/0x130 [ 92.479907][ T5835] cleanup_mnt+0x425/0x4c0 [ 92.484314][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.489952][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.495152][ T5835] task_work_run+0x1d4/0x260 [ 92.499752][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 92.504872][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.510505][ T5835] ? path_umount+0x249/0xf70 [ 92.515269][ T5835] ptrace_notify+0x281/0x2c0 [ 92.519886][ T5835] ? __pfx_ptrace_notify+0x10/0x10 [ 92.525039][ T5835] ? __pfx_path_umount+0x10/0x10 [ 92.529981][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.535634][ T5835] syscall_exit_work+0xc2/0x1d0 [ 92.540498][ T5835] syscall_exit_to_user_mode_prepare+0x6f/0xe0 [ 92.546662][ T5835] syscall_exit_to_user_mode+0x12/0x120 [ 92.552212][ T5835] do_syscall_64+0x103/0x210 [ 92.556803][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.562432][ T5835] ? exc_page_fault+0x91/0x110 [ 92.567198][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.573083][ T5835] RIP: 0033:0x7fbea477a4f7 [ 92.577490][ T5835] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 92.597099][ T5835] RSP: 002b:00007ffda8c8a078 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 92.605514][ T5835] RAX: 0000000000000000 RBX: 0000000000016478 RCX: 00007fbea477a4f7 [ 92.613477][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda8c8a130 [ 92.621445][ T5835] RBP: 00007ffda8c8a130 R08: 0000000000000000 R09: 0000000000000000 [ 92.629411][ T5835] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda8c8b1a0 [pid 5845] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5843] <... munmap resumed>) = 0 [pid 5842] exit_group(0 [pid 5845] <... openat resumed>) = 4 [pid 5845] ioctl(4, LOOP_SET_FD, 3 [pid 5843] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5842] <... exit_group resumed>) = ? [pid 5843] <... openat resumed>) = 4 [pid 5842] +++ exited with 0 +++ [pid 5839] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5843] ioctl(4, LOOP_SET_FD, 3 [pid 5839] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5845] <... ioctl resumed>) = 0 [pid 5839] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5845] close(3 [pid 5839] <... openat resumed>) = 3 [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5839] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5839] getdents64(3, 0x555590da96f0 /* 4 entries */, 32768) = 112 [pid 5845] <... close resumed>) = 0 [pid 5839] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5836] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5843] <... ioctl resumed>) = 0 [pid 5843] close(3) = 0 [pid 5843] close(4) = 0 [pid 5843] mkdir("./file1", 0777) = 0 [pid 5843] mount("/dev/loop3", "./file1", "jfs", MS_NODIRATIME|MS_SILENT, "nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity" [pid 5836] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 92.637379][ T5835] R13: 0000555590da96c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 92.645353][ T5835] [ 92.648463][ T5835] Modules linked in: [ 92.652537][ T5835] ---[ end trace 0000000000000000 ]--- [ 92.662299][ T5845] loop4: detected capacity change from 0 to 32768 [ 92.665037][ T5843] loop3: detected capacity change from 0 to 32768 [ 92.680299][ T5835] RIP: 0010:lmLogSync+0x22e/0x9d0 [pid 5836] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5845] close(4 [pid 5836] <... openat resumed>) = 3 [pid 5836] newfstatat(3, "", [pid 5845] <... close resumed>) = 0 [pid 5836] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x555590da96f0 /* 4 entries */, 32768) = 112 [pid 5845] mkdir("./file1", 0777) = 0 [pid 5836] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 92.685831][ T5835] Code: b9 b9 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 30 6c e5 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 14 6c e5 fe 49 8b 3f e8 3c b9 b9 fe [ 92.706855][ T5835] RSP: 0018:ffffc90003c2fa40 EFLAGS: 00010216 [ 92.714160][ T5835] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff888032f69e00 [ 92.722495][ T5835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.779307][ T5835] RBP: ffffc90003c2fb48 R08: ffffc90003c2f99f R09: ffffc90003c2f828 [ 92.816889][ T5835] R10: dffffc0000000000 R11: fffff52000785f34 R12: ffff88807bc6a000 [ 92.849415][ T5835] R13: dffffc0000000000 R14: ffff888033abda38 R15: 0000000000000030 [ 92.873316][ T5835] FS: 0000555590da8380(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 92.898347][ T5835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.905514][ T5835] CR2: 00007f690aca5000 CR3: 000000002ea45000 CR4: 0000000000350ef0 [ 92.914565][ T5835] Kernel panic - not syncing: Fatal exception [ 92.920844][ T5835] Kernel Offset: disabled [ 92.925160][ T5835] Rebooting in 86400 seconds..