./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1790962417 <...> Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. execve("./syz-executor1790962417", ["./syz-executor1790962417"], 0x7ffe679c8730 /* 10 vars */) = 0 brk(NULL) = 0x5555887ca000 brk(0x5555887cad00) = 0x5555887cad00 arch_prctl(ARCH_SET_FS, 0x5555887ca380) = 0 set_tid_address(0x5555887ca650) = 5820 set_robust_list(0x5555887ca660, 24) = 0 rseq(0x5555887caca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1790962417", 4096) = 28 getrandom("\x6c\xd7\x29\x76\x08\xc1\xdf\x1d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555887cad00 brk(0x5555887ebd00) = 0x5555887ebd00 brk(0x5555887ec000) = 0x5555887ec000 mprotect(0x7f6b8594e000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5821 attached , child_tidptr=0x5555887ca650) = 5821 [pid 5821] set_robust_list(0x5555887ca660, 24) = 0 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] mkdir("./syzkaller.Bjh7qb", 0700./strace-static-x86_64: Process 5822 attached [pid 5820] <... clone resumed>, child_tidptr=0x5555887ca650) = 5822 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5821] <... mkdir resumed>) = 0 [pid 5822] set_robust_list(0x5555887ca660, 24 [pid 5821] chmod("./syzkaller.Bjh7qb", 0777 [pid 5822] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5823 attached [pid 5822] mkdir("./syzkaller.D9vpmp", 0700 [pid 5821] <... chmod resumed>) = 0 [pid 5820] <... clone resumed>, child_tidptr=0x5555887ca650) = 5823 [pid 5823] set_robust_list(0x5555887ca660, 24 [pid 5822] <... mkdir resumed>) = 0 [pid 5822] chmod("./syzkaller.D9vpmp", 0777 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... set_robust_list resumed>) = 0 [pid 5822] <... chmod resumed>) = 0 [pid 5821] chdir("./syzkaller.Bjh7qb") = 0 ./strace-static-x86_64: Process 5824 attached [pid 5823] mkdir("./syzkaller.eeLU6E", 0700 [pid 5822] chdir("./syzkaller.D9vpmp" [pid 5821] mkdir("./0", 0777 [pid 5824] set_robust_list(0x5555887ca660, 24) = 0 [pid 5820] <... clone resumed>, child_tidptr=0x5555887ca650) = 5824 [pid 5824] mkdir("./syzkaller.88NIAq", 0700 [pid 5822] <... chdir resumed>) = 0 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... mkdir resumed>) = 0 [pid 5822] mkdir("./0", 0777 [pid 5821] <... mkdir resumed>) = 0 [pid 5823] chmod("./syzkaller.eeLU6E", 0777./strace-static-x86_64: Process 5825 attached [pid 5824] <... mkdir resumed>) = 0 [pid 5822] <... mkdir resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5824] chmod("./syzkaller.88NIAq", 0777 [pid 5823] <... chmod resumed>) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5820] <... clone resumed>, child_tidptr=0x5555887ca650) = 5825 [pid 5825] set_robust_list(0x5555887ca660, 24 [pid 5824] <... chmod resumed>) = 0 [pid 5821] <... openat resumed>) = 3 [pid 5820] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5825] <... set_robust_list resumed>) = 0 [pid 5824] chdir("./syzkaller.88NIAq" [pid 5823] chdir("./syzkaller.eeLU6E" [pid 5821] ioctl(3, LOOP_CLR_FD [pid 5822] <... openat resumed>) = 3 [pid 5822] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5826 attached [pid 5825] mkdir("./syzkaller.BTzFq9", 0700 [pid 5824] <... chdir resumed>) = 0 [pid 5823] <... chdir resumed>) = 0 [pid 5822] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5821] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5820] <... clone resumed>, child_tidptr=0x5555887ca650) = 5826 [pid 5826] set_robust_list(0x5555887ca660, 24 [pid 5823] mkdir("./0", 0777 [pid 5822] close(3 [pid 5824] mkdir("./0", 0777 [pid 5822] <... close resumed>) = 0 [pid 5826] <... set_robust_list resumed>) = 0 [pid 5825] <... mkdir resumed>) = 0 [pid 5821] close(3 [pid 5826] mkdir("./syzkaller.mPhDtM", 0700 [pid 5822] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... mkdir resumed>) = 0 [pid 5826] <... mkdir resumed>) = 0 [pid 5825] chmod("./syzkaller.BTzFq9", 0777 [pid 5824] <... mkdir resumed>) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5821] <... close resumed>) = 0 ./strace-static-x86_64: Process 5827 attached [pid 5826] chmod("./syzkaller.mPhDtM", 0777 [pid 5825] <... chmod resumed>) = 0 [pid 5824] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5823] <... openat resumed>) = 3 [pid 5821] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5827] set_robust_list(0x5555887ca660, 24 [pid 5826] <... chmod resumed>) = 0 [pid 5824] <... openat resumed>) = 3 [pid 5823] ioctl(3, LOOP_CLR_FD [pid 5822] <... clone resumed>, child_tidptr=0x5555887ca650) = 5827 [pid 5827] <... set_robust_list resumed>) = 0 [pid 5823] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] chdir("./0" [pid 5826] chdir("./syzkaller.mPhDtM" [pid 5823] close(3 [pid 5827] <... chdir resumed>) = 0 [pid 5826] <... chdir resumed>) = 0 [pid 5823] <... close resumed>) = 0 [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5826] mkdir("./0", 0777 [pid 5824] ioctl(3, LOOP_CLR_FD [pid 5827] <... prctl resumed>) = 0 [pid 5823] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5828 attached ./strace-static-x86_64: Process 5829 attached [pid 5827] setpgid(0, 0 [pid 5825] chdir("./syzkaller.BTzFq9" [pid 5824] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5828] set_robust_list(0x5555887ca660, 24 [pid 5825] <... chdir resumed>) = 0 [pid 5829] set_robust_list(0x5555887ca660, 24 [pid 5821] <... clone resumed>, child_tidptr=0x5555887ca650) = 5829 [pid 5827] <... setpgid resumed>) = 0 [pid 5829] <... set_robust_list resumed>) = 0 [pid 5825] mkdir("./0", 0777 [pid 5828] <... set_robust_list resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... mkdir resumed>) = 0 [pid 5829] chdir("./0" [pid 5828] chdir("./0" [pid 5827] <... openat resumed>) = 3 [pid 5825] <... mkdir resumed>) = 0 [pid 5824] close(3 [pid 5829] <... chdir resumed>) = 0 [pid 5828] <... chdir resumed>) = 0 [pid 5825] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5824] <... close resumed>) = 0 [pid 5829] <... prctl resumed>) = 0 [pid 5828] setpgid(0, 0 [pid 5825] <... openat resumed>) = 3 [pid 5824] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5823] <... clone resumed>, child_tidptr=0x5555887ca650) = 5828 ./strace-static-x86_64: Process 5830 attached [pid 5829] setpgid(0, 0 [pid 5828] <... setpgid resumed>) = 0 [pid 5827] write(3, "1000", 4 [pid 5825] ioctl(3, LOOP_CLR_FD [pid 5829] <... setpgid resumed>) = 0 [pid 5828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5827] <... write resumed>) = 4 [pid 5826] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5825] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5827] close(3 [pid 5828] <... openat resumed>) = 3 [pid 5827] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] close(3 [pid 5830] set_robust_list(0x5555887ca660, 24 [pid 5828] write(3, "1000", 4 [pid 5830] <... set_robust_list resumed>) = 0 [pid 5825] <... close resumed>) = 0 [pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5828] <... write resumed>) = 4 [pid 5827] symlink("/dev/binderfs", "./binderfs" [pid 5826] ioctl(3, LOOP_CLR_FD [pid 5824] <... clone resumed>, child_tidptr=0x5555887ca650) = 5830 [pid 5830] chdir("./0" [pid 5825] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... openat resumed>) = 3 [pid 5828] close(3 [pid 5827] <... symlink resumed>) = 0 [pid 5826] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5828] <... close resumed>) = 0 [pid 5828] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5830] <... chdir resumed>) = 0 [pid 5829] write(3, "1000", 4 [pid 5828] write(1, "executing program\n", 18 [pid 5826] close(3 [pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] <... write resumed>) = 4 [pid 5828] <... write resumed>) = 18 [pid 5826] <... close resumed>) = 0 ./strace-static-x86_64: Process 5832 attached [pid 5830] <... prctl resumed>) = 0 [pid 5829] close(3 [pid 5828] memfd_create("syzkaller", 0 [pid 5827] write(1, "executing program\n", 18 [pid 5830] setpgid(0, 0 [pid 5829] <... close resumed>) = 0 [pid 5828] <... memfd_create resumed>) = 3 [pid 5830] <... setpgid resumed>) = 0 [pid 5829] symlink("/dev/binderfs", "./binderfs" [pid 5828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5825] <... clone resumed>, child_tidptr=0x5555887ca650) = 5832 [pid 5830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] <... symlink resumed>) = 0 [pid 5828] <... mmap resumed>) = 0x7f6b7d400000 [pid 5830] <... openat resumed>) = 3 [pid 5829] write(1, "executing program\n", 18 [pid 5830] write(3, "1000", 4 [pid 5829] <... write resumed>) = 18 [pid 5827] <... write resumed>) = 18 executing program executing program [pid 5826] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] set_robust_list(0x5555887ca660, 24 [pid 5830] <... write resumed>) = 4 [pid 5829] memfd_create("syzkaller", 0 [pid 5832] <... set_robust_list resumed>) = 0 [pid 5830] close(3 [pid 5829] <... memfd_create resumed>) = 3 [pid 5830] <... close resumed>) = 0 [pid 5830] symlink("/dev/binderfs", "./binderfs" [pid 5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6b7d400000 [pid 5832] chdir("./0" [pid 5827] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5833 attached [pid 5830] <... symlink resumed>) = 0 [pid 5832] <... chdir resumed>) = 0 [pid 5830] write(1, "executing program\n", 18 [pid 5827] <... memfd_create resumed>) = 3 [pid 5826] <... clone resumed>, child_tidptr=0x5555887ca650) = 5833 [pid 5833] set_robust_list(0x5555887ca660, 24 [pid 5832] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0executing program [pid 5833] <... set_robust_list resumed>) = 0 [pid 5830] <... write resumed>) = 18 [pid 5827] <... mmap resumed>) = 0x7f6b7d400000 [pid 5832] <... prctl resumed>) = 0 [pid 5833] chdir("./0" [pid 5832] setpgid(0, 0 [pid 5830] memfd_create("syzkaller", 0 [pid 5833] <... chdir resumed>) = 0 [pid 5830] <... memfd_create resumed>) = 3 [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] <... prctl resumed>) = 0 [pid 5830] <... mmap resumed>) = 0x7f6b7d400000 [pid 5833] setpgid(0, 0 [pid 5832] <... setpgid resumed>) = 0 [pid 5832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5833] <... setpgid resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5832] <... openat resumed>) = 3 [pid 5833] write(3, "1000", 4 [pid 5832] write(3, "1000", 4 [pid 5833] <... write resumed>) = 4 [pid 5832] <... write resumed>) = 4 [pid 5833] close(3 [pid 5832] close(3) = 0 [pid 5832] symlink("/dev/binderfs", "./binderfs"executing program [pid 5833] <... close resumed>) = 0 [pid 5833] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5832] <... symlink resumed>) = 0 [pid 5833] write(1, "executing program\n", 18) = 18 [pid 5833] memfd_create("syzkaller", 0) = 3 [pid 5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6b7d400000 [pid 5832] write(1, "executing program\n", 18executing program ) = 18 [pid 5832] memfd_create("syzkaller", 0) = 3 [pid 5832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6b7d400000 [pid 5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5827] <... write resumed>) = 16777216 [pid 5827] munmap(0x7f6b7d400000, 138412032) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5832] <... write resumed>) = 16777216 [pid 5829] <... write resumed>) = 16777216 [pid 5827] <... openat resumed>) = 4 [pid 5827] ioctl(4, LOOP_SET_FD, 3 [pid 5828] <... write resumed>) = 16777216 [pid 5832] munmap(0x7f6b7d400000, 138412032 [pid 5829] munmap(0x7f6b7d400000, 138412032 [pid 5828] munmap(0x7f6b7d400000, 138412032 [pid 5833] <... write resumed>) = 16777216 [pid 5827] <... ioctl resumed>) = 0 [pid 5827] close(3) = 0 [pid 5827] close(4) = 0 [pid 5827] mkdir("./file0", 0777) = 0 [pid 5833] munmap(0x7f6b7d400000, 138412032 [pid 5830] <... write resumed>) = 16777216 [ 89.589952][ T5827] loop1: detected capacity change from 0 to 32768 [pid 5832] <... munmap resumed>) = 0 [pid 5830] munmap(0x7f6b7d400000, 138412032 [pid 5829] <... munmap resumed>) = 0 [pid 5827] mount("/dev/loop1", "./file0", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "discard,quota,errors=remount-ro,nointegrity,nodiscard,iocharset=koi8-ru,noquota" [pid 5832] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5833] <... munmap resumed>) = 0 [pid 5830] <... munmap resumed>) = 0 [pid 5829] ioctl(4, LOOP_SET_FD, 3 [pid 5833] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 89.635652][ T5827] ======================================================= [ 89.635652][ T5827] WARNING: The mand mount option has been deprecated and [ 89.635652][ T5827] and is ignored by this kernel. Remove the mand [ 89.635652][ T5827] option from the mount to silence this warning. [ 89.635652][ T5827] ======================================================= [pid 5833] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5833] close(3) = 0 [pid 5833] close(4) = 0 [pid 5833] mkdir("./file0", 0777) = 0 [pid 5833] mount("/dev/loop5", "./file0", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "discard,quota,errors=remount-ro,nointegrity,nodiscard,iocharset=koi8-ru,noquota" [pid 5832] <... openat resumed>) = 4 [pid 5832] ioctl(4, LOOP_SET_FD, 3 [pid 5830] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5829] <... ioctl resumed>) = 0 [pid 5830] <... openat resumed>) = 4 [pid 5830] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... mount resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5833] chdir("./file0") = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5833] exit_group(0 [pid 5829] close(3 [pid 5832] <... ioctl resumed>) = 0 [pid 5829] <... close resumed>) = 0 [pid 5832] close(3 [pid 5829] close(4) = 0 [pid 5832] <... close resumed>) = 0 [pid 5829] mkdir("./file0", 0777 [pid 5832] close(4 [pid 5829] <... mkdir resumed>) = 0 [pid 5829] mount("/dev/loop0", "./file0", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "discard,quota,errors=remount-ro,nointegrity,nodiscard,iocharset=koi8-ru,noquota" [pid 5832] <... close resumed>) = 0 [pid 5833] <... exit_group resumed>) = ? [pid 5832] mkdir("./file0", 0777) = 0 [pid 5833] +++ exited with 0 +++ [pid 5832] mount("/dev/loop4", "./file0", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "discard,quota,errors=remount-ro,nointegrity,nodiscard,iocharset=koi8-ru,noquota" [pid 5830] <... ioctl resumed>) = 0 [pid 5826] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5830] close(3 [pid 5826] restart_syscall(<... resuming interrupted clone ...> [pid 5830] <... close resumed>) = 0 [pid 5830] close(4) = 0 [pid 5829] <... mount resumed>) = 0 [pid 5826] <... restart_syscall resumed>) = 0 [pid 5830] mkdir("./file0", 0777 [pid 5829] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5830] <... mkdir resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] mount("/dev/loop3", "./file0", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "discard,quota,errors=remount-ro,nointegrity,nodiscard,iocharset=koi8-ru,noquota" [pid 5829] <... openat resumed>) = 3 [pid 5826] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] chdir("./file0" [pid 5826] newfstatat(3, "", [pid 5829] <... chdir resumed>) = 0 [pid 5826] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5826] getdents64(3, [pid 5829] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5826] <... getdents64 resumed>0x5555887cb6f0 /* 4 entries */, 32768) = 112 [ 89.682481][ T5833] loop5: detected capacity change from 0 to 32768 [ 89.682833][ T5829] loop0: detected capacity change from 0 to 32768 [ 89.703299][ T5832] loop4: detected capacity change from 0 to 32768 [ 89.712244][ T5830] loop3: detected capacity change from 0 to 32768 [pid 5832] <... mount resumed>) = 0 [pid 5826] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5829] exit_group(0 [pid 5828] <... munmap resumed>) = 0 [pid 5827] <... mount resumed>) = 0 [pid 5826] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... exit_group resumed>) = ? [pid 5827] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5826] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5832] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5827] <... openat resumed>) = 3 [pid 5826] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5827] chdir("./file0" [pid 5826] unlink("./0/binderfs" [pid 5832] <... openat resumed>) = 3 [pid 5829] +++ exited with 0 +++ [pid 5828] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5827] <... chdir resumed>) = 0 [pid 5826] <... unlink resumed>) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5826] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5829, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5827] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5821] restart_syscall(<... resuming interrupted clone ...> [pid 5832] chdir("./file0" [pid 5830] <... mount resumed>) = 0 [pid 5828] <... openat resumed>) = 4 [pid 5827] exit_group(0) = ? [pid 5832] <... chdir resumed>) = 0 [pid 5830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5828] ioctl(4, LOOP_SET_FD, 3 [pid 5827] +++ exited with 0 +++ [pid 5822] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5827, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5830] <... openat resumed>) = 3 [pid 5822] restart_syscall(<... resuming interrupted clone ...> [pid 5832] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5830] chdir("./file0" [pid 5822] <... restart_syscall resumed>) = 0 [pid 5821] <... restart_syscall resumed>) = 0 [pid 5822] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5822] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5822] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5822] <... openat resumed>) = 3 [pid 5821] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5822] newfstatat(3, "", [pid 5821] <... openat resumed>) = 3 [pid 5830] <... chdir resumed>) = 0 [pid 5822] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5822] getdents64(3, [pid 5821] newfstatat(3, "", [pid 5830] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5822] <... getdents64 resumed>0x5555887cb6f0 /* 4 entries */, 32768) = 112 [pid 5821] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5832] exit_group(0 [pid 5822] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] getdents64(3, [pid 5830] exit_group(0 [pid 5822] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] <... getdents64 resumed>0x5555887cb6f0 /* 4 entries */, 32768) = 112 [pid 5822] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5821] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5822] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5822] unlink("./0/binderfs" [pid 5821] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5822] <... unlink resumed>) = 0 [pid 5832] <... exit_group resumed>) = ? [pid 5830] <... exit_group resumed>) = ? [pid 5828] <... ioctl resumed>) = 0 [pid 5822] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5821] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5821] unlink("./0/binderfs") = 0 [ 89.783399][ T5828] loop2: detected capacity change from 0 to 32768 [ 89.816021][ T5822] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 89.828157][ T5822] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 89.836592][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz-executor179 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 89.849184][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 89.859245][ T5822] RIP: 0010:lmLogSync+0x22e/0x9d0 [ 89.864328][ T5822] Code: d3 b9 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 00 85 e5 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 e4 84 e5 fe 49 8b 3f e8 8c d3 b9 fe [ 89.884324][ T5822] RSP: 0018:ffffc90004027a40 EFLAGS: 00010216 [ 89.890413][ T5822] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff888033723c00 [ 89.898381][ T5822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.906368][ T5822] RBP: ffffc90004027b48 R08: ffffc9000402799f R09: ffffc90004027828 [ 89.914336][ T5822] R10: dffffc0000000000 R11: fffff52000804f34 R12: ffff888026f84800 [ 89.922305][ T5822] R13: dffffc0000000000 R14: ffff88814d5b5038 R15: 0000000000000030 [ 89.930280][ T5822] FS: 00005555887ca380(0000) GS:ffff8881261cb000(0000) knlGS:0000000000000000 [ 89.939205][ T5822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.945784][ T5822] CR2: 000055c38540e1e8 CR3: 0000000033a6c000 CR4: 0000000000350ef0 [ 89.953790][ T5822] Call Trace: [ 89.957064][ T5822] [ 89.959986][ T5822] ? __pfx___mutex_lock+0x10/0x10 [ 89.965636][ T5822] ? __pfx_lmLogSync+0x10/0x10 [ 89.970403][ T5822] ? __pfx_dquot_writeback_dquots+0x10/0x10 [ 89.976302][ T5822] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 89.982381][ T5822] jfs_syncpt+0x7b/0x90 [ 89.986542][ T5822] jfs_sync_fs+0x87/0xa0 [ 89.990782][ T5822] sync_filesystem+0xee/0x230 [ 89.995468][ T5822] generic_shutdown_super+0x6f/0x2c0 [ 90.000751][ T5822] kill_block_super+0x44/0x90 [ 90.005430][ T5822] deactivate_locked_super+0xbc/0x130 [ 90.010801][ T5822] cleanup_mnt+0x425/0x4c0 [ 90.015223][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.020852][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.026053][ T5822] task_work_run+0x1d4/0x260 [ 90.030650][ T5822] ? __pfx_task_work_run+0x10/0x10 [ 90.035772][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.041408][ T5822] ? path_umount+0x249/0xf60 [ 90.046017][ T5822] ptrace_notify+0x281/0x2c0 [ 90.050622][ T5822] ? __pfx_ptrace_notify+0x10/0x10 [ 90.055742][ T5822] ? __pfx_path_umount+0x10/0x10 [ 90.060677][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.066412][ T5822] syscall_exit_work+0xc2/0x1d0 [ 90.071296][ T5822] syscall_exit_to_user_mode_prepare+0x6f/0xe0 [ 90.077495][ T5822] syscall_exit_to_user_mode+0x12/0x120 [ 90.083042][ T5822] do_syscall_64+0x103/0x210 [ 90.087630][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.093275][ T5822] ? exc_page_fault+0x91/0x110 [ 90.098058][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.103946][ T5822] RIP: 0033:0x7f6b858d56f7 [ 90.108356][ T5822] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 90.127965][ T5822] RSP: 002b:00007ffd1d3ad3a8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 90.136384][ T5822] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6b858d56f7 [ 90.144348][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1d3ad460 [ 90.152315][ T5822] RBP: 00007ffd1d3ad460 R08: 0000000000000000 R09: 0000000000000000 [ 90.160453][ T5822] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffd1d3ae4d0 [ 90.168419][ T5822] R13: 00005555887cb6c0 R14: 431bde82d7b634db R15: 00007ffd1d3ae4f0 [ 90.176403][ T5822] [ 90.179412][ T5822] Modules linked in: [pid 5821] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5832] +++ exited with 0 +++ [pid 5830] +++ exited with 0 +++ [pid 5828] close(3) = 0 [pid 5825] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5832, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5824] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5830, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5825] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5824] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5824] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5825] <... openat resumed>) = 3 [pid 5824] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5825] newfstatat(3, "", [pid 5828] close(4) = 0 [pid 5825] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5828] mkdir("./file0", 0777 [pid 5825] getdents64(3, 0x5555887cb6f0 /* 4 entries */, 32768) = 112 [pid 5824] getdents64(3, [pid 5828] <... mkdir resumed>) = 0 [pid 5828] mount("/dev/loop2", "./file0", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "discard,quota,errors=remount-ro,nointegrity,nodiscard,iocharset=koi8-ru,noquota" [pid 5825] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5824] <... getdents64 resumed>0x5555887cb6f0 /* 4 entries */, 32768) = 112 [pid 5825] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5825] unlink("./0/binderfs" [pid 5824] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5825] <... unlink resumed>) = 0 [pid 5824] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5824] unlink("./0/binderfs") = 0 [pid 5825] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW [ 90.183760][ T5822] ---[ end trace 0000000000000000 ]--- [ 90.206210][ T5822] RIP: 0010:lmLogSync+0x22e/0x9d0 [ 90.211603][ T5822] Code: d3 b9 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 00 85 e5 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 e4 84 e5 fe 49 8b 3f e8 8c d3 b9 fe [ 90.237300][ T5822] RSP: 0018:ffffc90004027a40 EFLAGS: 00010216 [ 90.252597][ T5822] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff888033723c00 [ 90.260894][ T5822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.280028][ T5822] RBP: ffffc90004027b48 R08: ffffc9000402799f R09: ffffc90004027828 [ 90.288168][ T5822] R10: dffffc0000000000 R11: fffff52000804f34 R12: ffff888026f84800 [ 90.296214][ T5822] R13: dffffc0000000000 R14: ffff88814d5b5038 R15: 0000000000000030 [ 90.305156][ T5822] FS: 00005555887ca380(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000 [ 90.314129][ T5822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.320748][ T5822] CR2: 000055c3856e0000 CR3: 0000000033a6c000 CR4: 0000000000350ef0 [ 90.328995][ T5822] Kernel panic - not syncing: Fatal exception [ 90.335317][ T5822] Kernel Offset: disabled [ 90.339640][ T5822] Rebooting in 86400 seconds..