./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1495689157 <...> Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. execve("./syz-executor1495689157", ["./syz-executor1495689157"], 0x7ffe7cb8c7e0 /* 10 vars */) = 0 brk(NULL) = 0x5555869b8000 brk(0x5555869b8d00) = 0x5555869b8d00 arch_prctl(ARCH_SET_FS, 0x5555869b8380) = 0 set_tid_address(0x5555869b8650) = 5819 set_robust_list(0x5555869b8660, 24) = 0 rseq(0x5555869b8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1495689157", 4096) = 28 getrandom("\x6e\x72\xcc\x0d\x4a\x71\x1b\x20", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555869b8d00 brk(0x5555869d9d00) = 0x5555869d9d00 brk(0x5555869da000) = 0x5555869da000 mprotect(0x7f24db6ce000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555869b8650) = 5820 ./strace-static-x86_64: Process 5820 attached [pid 5820] set_robust_list(0x5555869b8660, 24 [pid 5819] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] <... set_robust_list resumed>) = 0 [pid 5820] mkdir("./syzkaller.aJX24k", 0700./strace-static-x86_64: Process 5821 attached [pid 5819] <... clone resumed>, child_tidptr=0x5555869b8650) = 5821 [pid 5820] <... mkdir resumed>) = 0 [pid 5821] set_robust_list(0x5555869b8660, 24 [pid 5819] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5820] chmod("./syzkaller.aJX24k", 0777 [pid 5821] <... set_robust_list resumed>) = 0 [pid 5820] <... chmod resumed>) = 0 [pid 5820] chdir("./syzkaller.aJX24k") = 0 [pid 5821] mkdir("./syzkaller.6zJJXE", 0700 [pid 5820] mkdir("./0", 0777./strace-static-x86_64: Process 5822 attached [pid 5819] <... clone resumed>, child_tidptr=0x5555869b8650) = 5822 [pid 5819] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5822] set_robust_list(0x5555869b8660, 24 [pid 5821] <... mkdir resumed>) = 0 [pid 5820] <... mkdir resumed>) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5823 attached [pid 5822] <... set_robust_list resumed>) = 0 [pid 5821] chmod("./syzkaller.6zJJXE", 0777 [pid 5820] <... openat resumed>) = 3 [pid 5819] <... clone resumed>, child_tidptr=0x5555869b8650) = 5823 [pid 5823] set_robust_list(0x5555869b8660, 24 [pid 5822] mkdir("./syzkaller.rgofR2", 0700 [pid 5821] <... chmod resumed>) = 0 [pid 5823] <... set_robust_list resumed>) = 0 [pid 5820] ioctl(3, LOOP_CLR_FD [pid 5819] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] chdir("./syzkaller.6zJJXE" [pid 5823] mkdir("./syzkaller.V5ZYt4", 0700./strace-static-x86_64: Process 5824 attached [pid 5822] <... mkdir resumed>) = 0 [pid 5821] <... chdir resumed>) = 0 [pid 5820] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5821] mkdir("./0", 0777 [pid 5819] <... clone resumed>, child_tidptr=0x5555869b8650) = 5824 [pid 5820] close(3 [pid 5824] set_robust_list(0x5555869b8660, 24 [pid 5823] <... mkdir resumed>) = 0 [pid 5822] chmod("./syzkaller.rgofR2", 0777 [pid 5821] <... mkdir resumed>) = 0 [pid 5820] <... close resumed>) = 0 [pid 5822] <... chmod resumed>) = 0 [pid 5824] <... set_robust_list resumed>) = 0 [pid 5823] chmod("./syzkaller.V5ZYt4", 0777 [pid 5821] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... chmod resumed>) = 0 [pid 5821] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5825 attached [pid 5824] mkdir("./syzkaller.Ee56JT", 0700 [pid 5823] chdir("./syzkaller.V5ZYt4" [pid 5822] chdir("./syzkaller.rgofR2" [pid 5825] set_robust_list(0x5555869b8660, 24 [pid 5823] <... chdir resumed>) = 0 [pid 5825] <... set_robust_list resumed>) = 0 [pid 5823] mkdir("./0", 0777 [pid 5820] <... clone resumed>, child_tidptr=0x5555869b8650) = 5825 [pid 5825] chdir("./0" [pid 5823] <... mkdir resumed>) = 0 [pid 5825] <... chdir resumed>) = 0 [pid 5825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5825] setpgid(0, 0) = 0 [pid 5825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5824] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5822] <... chdir resumed>) = 0 [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5825] <... openat resumed>) = 3 [pid 5824] chmod("./syzkaller.Ee56JT", 0777 [pid 5821] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5824] <... chmod resumed>) = 0 [pid 5821] close(3) = 0 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] write(3, "1000", 4 [pid 5824] chdir("./syzkaller.Ee56JT" [pid 5823] <... openat resumed>) = 3 [pid 5822] mkdir("./0", 0777./strace-static-x86_64: Process 5827 attached [pid 5827] set_robust_list(0x5555869b8660, 24) = 0 [pid 5827] chdir("./0" [pid 5825] <... write resumed>) = 4 [pid 5824] <... chdir resumed>) = 0 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5822] <... mkdir resumed>) = 0 [pid 5825] close(3 [pid 5827] <... chdir resumed>) = 0 [pid 5824] mkdir("./0", 0777 [pid 5825] <... close resumed>) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5825] symlink("/dev/binderfs", "./binderfs" [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5821] <... clone resumed>, child_tidptr=0x5555869b8650) = 5827 [pid 5827] <... prctl resumed>) = 0 [pid 5827] setpgid(0, 0 [pid 5823] close(3 [pid 5827] <... setpgid resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5828 attached [pid 5827] <... openat resumed>) = 3 [pid 5824] <... mkdir resumed>) = 0 [pid 5822] <... openat resumed>) = 3 [pid 5828] set_robust_list(0x5555869b8660, 24 [pid 5827] write(3, "1000", 4 [pid 5825] <... symlink resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5822] ioctl(3, LOOP_CLR_FD [pid 5828] <... set_robust_list resumed>) = 0 [pid 5827] <... write resumed>) = 4 [pid 5825] write(1, "executing program\n", 18 [pid 5824] <... openat resumed>) = 3 [pid 5822] <... ioctl resumed>) = -1 ENXIO (No such device or address) executing program [pid 5828] chdir("./0" [pid 5827] close(3 [pid 5825] <... write resumed>) = 18 [pid 5823] <... clone resumed>, child_tidptr=0x5555869b8650) = 5828 [pid 5822] close(3 [pid 5825] memfd_create("syzkaller", 0 [pid 5822] <... close resumed>) = 0 [pid 5828] <... chdir resumed>) = 0 [pid 5827] <... close resumed>) = 0 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] symlink("/dev/binderfs", "./binderfs" [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5828] <... prctl resumed>) = 0 [pid 5827] <... symlink resumed>) = 0 [pid 5825] <... memfd_create resumed>) = 3 [pid 5824] close(3 [pid 5828] setpgid(0, 0 [pid 5824] <... close resumed>) = 0 [pid 5828] <... setpgid resumed>) = 0 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 5830 attached ./strace-static-x86_64: Process 5829 attached [pid 5828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] write(1, "executing program\n", 18 [pid 5825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] set_robust_list(0x5555869b8660, 24 [pid 5829] set_robust_list(0x5555869b8660, 24 [pid 5828] <... openat resumed>) = 3 [pid 5827] <... write resumed>) = 18 [pid 5825] <... mmap resumed>) = 0x7f24d3200000 [pid 5824] <... clone resumed>, child_tidptr=0x5555869b8650) = 5830 [pid 5822] <... clone resumed>, child_tidptr=0x5555869b8650) = 5829 [pid 5830] <... set_robust_list resumed>) = 0 [pid 5829] <... set_robust_list resumed>) = 0 [pid 5830] chdir("./0" [pid 5829] chdir("./0" [pid 5830] <... chdir resumed>) = 0 [pid 5829] <... chdir resumed>) = 0 [pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... prctl resumed>) = 0 [pid 5829] <... prctl resumed>) = 0 [pid 5830] setpgid(0, 0 [pid 5829] setpgid(0, 0 [pid 5830] <... setpgid resumed>) = 0 [pid 5829] <... setpgid resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5828] write(3, "1000", 4 [pid 5827] memfd_create("syzkaller", 0 [pid 5828] <... write resumed>) = 4 [pid 5827] <... memfd_create resumed>) = 3 [pid 5828] close(3 [pid 5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5828] <... close resumed>) = 0 [pid 5828] symlink("/dev/binderfs", "./binderfs" [pid 5827] <... mmap resumed>) = 0x7f24d3200000 [pid 5829] write(3, "1000", 4 [pid 5830] write(3, "1000", 4 [pid 5829] <... write resumed>) = 4 [pid 5828] <... symlink resumed>) = 0 [pid 5829] close(3) = 0 [pid 5829] symlink("/dev/binderfs", "./binderfs" [pid 5828] write(1, "executing program\n", 18executing program executing program [pid 5830] <... write resumed>) = 4 [pid 5829] <... symlink resumed>) = 0 [pid 5828] <... write resumed>) = 18 [pid 5830] close(3 [pid 5829] write(1, "executing program\n", 18 [pid 5830] <... close resumed>) = 0 [pid 5829] <... write resumed>) = 18 [pid 5830] symlink("/dev/binderfs", "./binderfs" [pid 5829] memfd_create("syzkaller", 0 [pid 5828] memfd_create("syzkaller", 0 [pid 5830] <... symlink resumed>) = 0 [pid 5829] <... memfd_create resumed>) = 3 [pid 5828] <... memfd_create resumed>) = 3 [pid 5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5830] write(1, "executing program\n", 18 [pid 5829] <... mmap resumed>) = 0x7f24d3200000 [pid 5828] <... mmap resumed>) = 0x7f24d3200000 executing program [pid 5830] <... write resumed>) = 18 [pid 5830] memfd_create("syzkaller", 0) = 3 [pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f24d3200000 [pid 5825] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5825] <... write resumed>) = 16777216 [pid 5827] <... write resumed>) = 16777216 [pid 5827] munmap(0x7f24d3200000, 138412032 [pid 5829] <... write resumed>) = 16777216 [pid 5825] munmap(0x7f24d3200000, 138412032 [pid 5829] munmap(0x7f24d3200000, 138412032 [pid 5828] <... write resumed>) = 16777216 [pid 5825] <... munmap resumed>) = 0 [pid 5827] <... munmap resumed>) = 0 [pid 5829] <... munmap resumed>) = 0 [pid 5828] munmap(0x7f24d3200000, 138412032 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5827] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5827] ioctl(4, LOOP_SET_FD, 3 [pid 5829] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5828] <... munmap resumed>) = 0 [pid 5825] ioctl(4, LOOP_SET_FD, 3 [pid 5829] <... openat resumed>) = 4 [pid 5830] <... write resumed>) = 16777216 [pid 5829] ioctl(4, LOOP_SET_FD, 3 [pid 5828] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5827] <... ioctl resumed>) = 0 [pid 5825] <... ioctl resumed>) = 0 [pid 5830] munmap(0x7f24d3200000, 138412032 [pid 5828] <... openat resumed>) = 4 [pid 5827] close(3 [pid 5825] close(3 [pid 5828] ioctl(4, LOOP_SET_FD, 3 [pid 5827] <... close resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5827] close(4 [pid 5825] close(4) = 0 [pid 5825] mkdir("./file1", 0777 [pid 5827] <... close resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5827] mkdir("./file1", 0777 [pid 5825] mount("/dev/loop0", "./file1", "jfs", MS_NODIRATIME|MS_SILENT, "nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity" [pid 5827] <... mkdir resumed>) = 0 [pid 5827] mount("/dev/loop1", "./file1", "jfs", MS_NODIRATIME|MS_SILENT, "nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity" [pid 5829] <... ioctl resumed>) = 0 [pid 5830] <... munmap resumed>) = 0 [pid 5828] <... ioctl resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] close(3 [pid 5828] close(3 [pid 5830] <... openat resumed>) = 4 [ 89.525756][ T5827] loop1: detected capacity change from 0 to 32768 [ 89.539060][ T5825] loop0: detected capacity change from 0 to 32768 [ 89.555401][ T5829] loop2: detected capacity change from 0 to 32768 [ 89.564263][ T5828] loop3: detected capacity change from 0 to 32768 [pid 5830] ioctl(4, LOOP_SET_FD, 3 [pid 5829] <... close resumed>) = 0 [pid 5828] <... close resumed>) = 0 [pid 5829] close(4 [pid 5828] close(4 [pid 5829] <... close resumed>) = 0 [pid 5828] <... close resumed>) = 0 [pid 5829] mkdir("./file1", 0777 [pid 5828] mkdir("./file1", 0777 [pid 5829] <... mkdir resumed>) = 0 [pid 5828] <... mkdir resumed>) = 0 [pid 5828] mount("/dev/loop3", "./file1", "jfs", MS_NODIRATIME|MS_SILENT, "nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity" [pid 5829] mount("/dev/loop2", "./file1", "jfs", MS_NODIRATIME|MS_SILENT, "nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity" [pid 5830] <... ioctl resumed>) = 0 [pid 5827] <... mount resumed>) = 0 [pid 5825] <... mount resumed>) = 0 [pid 5827] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] close(3 [pid 5825] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5830] <... close resumed>) = 0 [pid 5825] <... openat resumed>) = 3 [pid 5830] close(4 [pid 5827] <... openat resumed>) = 3 [pid 5825] chdir("./file1" [pid 5830] <... close resumed>) = 0 [pid 5825] <... chdir resumed>) = 0 [pid 5830] mkdir("./file1", 0777 [pid 5825] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5830] <... mkdir resumed>) = 0 [pid 5825] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5825] exit_group(0) = ? [pid 5825] +++ exited with 0 +++ [pid 5830] mount("/dev/loop4", "./file1", "jfs", MS_NODIRATIME|MS_SILENT, "nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity" [pid 5820] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5825, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5829] <... mount resumed>) = 0 [pid 5828] <... mount resumed>) = 0 [pid 5827] chdir("./file1" [pid 5820] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 89.603352][ T5830] loop4: detected capacity change from 0 to 32768 [pid 5828] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5820] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... openat resumed>) = 3 [pid 5828] <... openat resumed>) = 3 [pid 5827] <... chdir resumed>) = 0 [pid 5820] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] chdir("./file1" [pid 5828] chdir("./file1" [pid 5827] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5829] <... chdir resumed>) = 0 [pid 5828] <... chdir resumed>) = 0 [pid 5827] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5820] <... openat resumed>) = 3 [pid 5829] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5828] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5828] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5827] exit_group(0 [pid 5820] newfstatat(3, "", [pid 5829] exit_group(0 [pid 5828] exit_group(0 [pid 5829] <... exit_group resumed>) = ? [pid 5828] <... exit_group resumed>) = ? [pid 5827] <... exit_group resumed>) = ? [pid 5820] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5827] +++ exited with 0 +++ [pid 5820] getdents64(3, [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5827, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=24 /* 0.24 s */} --- [pid 5829] +++ exited with 0 +++ [pid 5828] +++ exited with 0 +++ [pid 5820] <... getdents64 resumed>0x5555869b96f0 /* 4 entries */, 32768) = 112 [pid 5823] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5828, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} --- [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5829, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=22 /* 0.22 s */} --- [pid 5823] restart_syscall(<... resuming interrupted clone ...> [pid 5822] restart_syscall(<... resuming interrupted clone ...> [pid 5820] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... mount resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5830] chdir("./file1") = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5830] exit_group(0) = ? [pid 5823] <... restart_syscall resumed>) = 0 [pid 5822] <... restart_syscall resumed>) = 0 [pid 5823] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5823] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5822] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5823] newfstatat(3, "", [pid 5822] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5823] getdents64(3, [pid 5822] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5823] <... getdents64 resumed>0x5555869b96f0 /* 4 entries */, 32768) = 112 [pid 5822] <... openat resumed>) = 3 [pid 5823] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5822] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5822] getdents64(3, 0x5555869b96f0 /* 4 entries */, 32768) = 112 [pid 5822] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5821] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5821] getdents64(3, 0x5555869b96f0 /* 4 entries */, 32768) = 112 [pid 5830] +++ exited with 0 +++ [pid 5821] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5830, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [pid 5824] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5824] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 89.743376][ T5823] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 89.755359][ T5823] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 89.763823][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor149 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 89.776811][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.787120][ T5823] RIP: 0010:lmLogSync+0x22e/0x9d0 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5824] getdents64(3, 0x5555869b96f0 /* 4 entries */, 32768) = 112 [ 89.792234][ T5823] Code: e3 bb fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 70 70 e5 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 54 70 e5 fe 49 8b 3f e8 1c e3 bb fe [ 89.812231][ T5823] RSP: 0018:ffffc90004447a40 EFLAGS: 00010206 [ 89.818553][ T5823] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff888077098000 [ 89.826592][ T5823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.834601][ T5823] RBP: ffffc90004447b48 R08: ffffc9000444799f R09: 0000000000000000 [ 89.842614][ T5823] R10: ffffc90004447828 R11: fffff52000888f34 R12: ffff888026367800 [ 89.850714][ T5823] R13: dffffc0000000000 R14: ffff888031652e38 R15: 0000000000000030 [ 89.858811][ T5823] FS: 00005555869b8380(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 89.867775][ T5823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.874456][ T5823] CR2: 00007fa6849cf000 CR3: 00000000344f8000 CR4: 00000000003526f0 [ 89.882554][ T5823] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.890554][ T5823] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.898537][ T5823] Call Trace: [ 89.901828][ T5823] [ 89.904767][ T5823] ? __pfx___mutex_lock+0x10/0x10 [ 89.910344][ T5823] ? __pfx_lmLogSync+0x10/0x10 [ 89.915129][ T5823] ? __pfx_dquot_writeback_dquots+0x10/0x10 [ 89.921096][ T5823] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 89.927274][ T5823] jfs_syncpt+0x7b/0x90 [ 89.931449][ T5823] jfs_sync_fs+0x87/0xa0 [ 89.935700][ T5823] sync_filesystem+0xee/0x230 [ 89.940382][ T5823] generic_shutdown_super+0x6f/0x2c0 [ 89.945768][ T5823] kill_block_super+0x44/0x90 [ 89.950462][ T5823] deactivate_locked_super+0xbc/0x130 [ 89.955869][ T5823] cleanup_mnt+0x425/0x4c0 [ 89.960323][ T5823] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.965531][ T5823] task_work_run+0x1d4/0x260 [ 89.970225][ T5823] ? __pfx_task_work_run+0x10/0x10 [ 89.975699][ T5823] ? path_umount+0x249/0xf70 [ 89.980395][ T5823] ptrace_notify+0x281/0x2c0 [ 89.985012][ T5823] ? __pfx_ptrace_notify+0x10/0x10 [ 89.990139][ T5823] ? __pfx_path_umount+0x10/0x10 [ 89.995198][ T5823] ? user_path_at+0x44/0x60 [ 89.999743][ T5823] syscall_exit_work+0xc2/0x1d0 [ 90.004607][ T5823] syscall_exit_to_user_mode_prepare+0x6f/0xe0 [ 90.010783][ T5823] syscall_exit_to_user_mode+0x12/0x120 [ 90.016451][ T5823] do_syscall_64+0x103/0x210 [ 90.021052][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 90.025829][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.031731][ T5823] RIP: 0033:0x7f24db6554f7 [ 90.036175][ T5823] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 90.055792][ T5823] RSP: 002b:00007ffed0df6d38 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 90.064225][ T5823] RAX: 0000000000000000 RBX: 0000000000015a70 RCX: 00007f24db6554f7 [ 90.072213][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed0df6df0 [ 90.080226][ T5823] RBP: 00007ffed0df6df0 R08: 0000000000000000 R09: 0000000000000000 [ 90.088208][ T5823] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffed0df7e60 [ 90.096192][ T5823] R13: 00005555869b96c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 90.104177][ T5823] [ 90.107228][ T5823] Modules linked in: [ 90.111663][ T5823] ---[ end trace 0000000000000000 ]--- [ 90.166255][ T5823] RIP: 0010:lmLogSync+0x22e/0x9d0 [ 90.175855][ T5823] Code: e3 bb fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 70 70 e5 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 54 70 e5 fe 49 8b 3f e8 1c e3 bb fe [ 90.197455][ T5823] RSP: 0018:ffffc90004447a40 EFLAGS: 00010206 [ 90.204292][ T5823] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff888077098000 [ 90.212619][ T5823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.220606][ T5823] RBP: ffffc90004447b48 R08: ffffc9000444799f R09: 0000000000000000 [ 90.228967][ T5823] R10: ffffc90004447828 R11: fffff52000888f34 R12: ffff888026367800 [ 90.237091][ T5823] R13: dffffc0000000000 R14: ffff888031652e38 R15: 0000000000000030 [ 90.246602][ T5823] FS: 00005555869b8380(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 90.255827][ T5823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.262529][ T5823] CR2: 00007fffa95489a8 CR3: 00000000344f8000 CR4: 00000000003526f0 [ 90.270528][ T5823] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.278728][ T5823] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.286885][ T5823] Kernel panic - not syncing: Fatal exception [ 90.294411][ T5823] Kernel Offset: disabled [ 90.298745][ T5823] Rebooting in 86400 seconds..