./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor824651141 <...> Warning: Permanently added '10.128.1.57' (ECDSA) to the list of known hosts. execve("./syz-executor824651141", ["./syz-executor824651141"], 0x7ffd73d1bf70 /* 10 vars */) = 0 brk(NULL) = 0x5555566c8000 brk(0x5555566c8c40) = 0x5555566c8c40 arch_prctl(ARCH_SET_FS, 0x5555566c8300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor824651141", 4096) = 27 brk(0x5555566e9c40) = 0x5555566e9c40 brk(0x5555566ea000) = 0x5555566ea000 mprotect(0x7fd74df92000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5061 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "5061", 4) = 4 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5062 attached , child_tidptr=0x5555566c85d0) = 5062 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5063 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] getpid(./strace-static-x86_64: Process 5063 attached ) = 5062 [pid 5063] getpid( [pid 5062] mkdir("./syzkaller.RrpfTV", 0700./strace-static-x86_64: Process 5064 attached [pid 5063] <... getpid resumed>) = 5063 [pid 5061] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5064 [pid 5064] getpid( [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... getpid resumed>) = 5064 [pid 5063] mkdir("./syzkaller.EmIdT2", 0700 [pid 5062] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5065 attached [pid 5061] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5065 [pid 5064] mkdir("./syzkaller.PbQop9", 0700 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] chmod("./syzkaller.RrpfTV", 0777 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] getpid( [pid 5064] <... mkdir resumed>) = 0 [pid 5065] <... getpid resumed>) = 5065 [pid 5064] chmod("./syzkaller.PbQop9", 0777 [pid 5063] chmod("./syzkaller.EmIdT2", 0777 [pid 5062] <... chmod resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5066 [pid 5065] mkdir("./syzkaller.7kjrgb", 0700 [pid 5064] <... chmod resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... mkdir resumed>) = 0 [pid 5064] chdir("./syzkaller.PbQop9"./strace-static-x86_64: Process 5066 attached [pid 5065] chmod("./syzkaller.7kjrgb", 0777 [pid 5064] <... chdir resumed>) = 0 [pid 5063] <... chmod resumed>) = 0 [pid 5062] chdir("./syzkaller.RrpfTV" [pid 5061] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5067 [pid 5065] <... chmod resumed>) = 0 [pid 5064] mkdir("./0", 0777 [pid 5065] chdir("./syzkaller.7kjrgb" [pid 5064] <... mkdir resumed>) = 0 [pid 5063] chdir("./syzkaller.EmIdT2" [pid 5062] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5067 attached [pid 5066] getpid( [pid 5065] <... chdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] mkdir("./0", 0777 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... chdir resumed>) = 0 [pid 5067] getpid( [pid 5066] <... getpid resumed>) = 5066 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] mkdir("./0", 0777 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] mkdir("./0", 0777 [pid 5065] <... openat resumed>) = 3 [pid 5064] close(3 [pid 5067] <... getpid resumed>) = 5067 [pid 5066] mkdir("./syzkaller.shAlWh", 0700 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] <... mkdir resumed>) = 0 [pid 5065] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] chmod("./syzkaller.shAlWh", 0777 [pid 5065] <... close resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5068 [pid 5063] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5068 attached [pid 5067] mkdir("./syzkaller.HoydQm", 0700 [pid 5066] <... chmod resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... openat resumed>) = 3 [pid 5068] chdir("./0" [pid 5067] <... mkdir resumed>) = 0 [pid 5066] chdir("./syzkaller.shAlWh" [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5070 attached [pid 5068] <... chdir resumed>) = 0 [pid 5067] chmod("./syzkaller.HoydQm", 0777 [pid 5066] <... chdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5070 [pid 5063] close(3 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] chdir("./0" [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... chmod resumed>) = 0 [pid 5066] mkdir("./0", 0777 [pid 5063] <... close resumed>) = 0 [pid 5062] close(3 [pid 5070] <... chdir resumed>) = 0 [pid 5068] <... prctl resumed>) = 0 [pid 5067] chdir("./syzkaller.HoydQm" [pid 5066] <... mkdir resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... close resumed>) = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] setpgid(0, 0 [pid 5067] <... chdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... prctl resumed>) = 0 [pid 5068] <... setpgid resumed>) = 0 [pid 5067] mkdir("./0", 0777 [pid 5066] <... openat resumed>) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5071 [pid 5070] setpgid(0, 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... mkdir resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5062] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5072 ./strace-static-x86_64: Process 5071 attached [pid 5070] <... setpgid resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5071] chdir("./0" [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] write(3, "1000", 4 [pid 5067] <... openat resumed>) = 3 [pid 5066] close(3 [pid 5071] <... chdir resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5068] <... write resumed>) = 4 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 5072 attached [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] write(3, "1000", 4 [pid 5068] close(3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] chdir("./0" [pid 5071] <... prctl resumed>) = 0 [pid 5070] <... write resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5067] close(3 [pid 5072] <... chdir resumed>) = 0 [pid 5071] setpgid(0, 0 [pid 5070] close(3 [pid 5068] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5074 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... setpgid resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5068] <... symlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5074 attached [pid 5072] <... prctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] symlink("/dev/binderfs", "./binderfs" [pid 5068] memfd_create("syzkaller", 0 [pid 5072] setpgid(0, 0 [pid 5071] <... openat resumed>) = 3 [pid 5070] <... symlink resumed>) = 0 [pid 5068] <... memfd_create resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5075 [pid 5074] chdir("./0" [pid 5072] <... setpgid resumed>) = 0 [pid 5071] write(3, "1000", 4 [pid 5070] memfd_create("syzkaller", 0 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5075 attached [pid 5074] <... chdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... write resumed>) = 4 [pid 5070] <... memfd_create resumed>) = 3 [pid 5068] <... mmap resumed>) = 0x7fd745acd000 [pid 5075] chdir("./0" [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... openat resumed>) = 3 [pid 5071] close(3 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... chdir resumed>) = 0 [pid 5074] <... prctl resumed>) = 0 [pid 5072] write(3, "1000", 4 [pid 5071] <... close resumed>) = 0 [pid 5070] <... mmap resumed>) = 0x7fd745acd000 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] setpgid(0, 0 [pid 5072] <... write resumed>) = 4 [pid 5071] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... prctl resumed>) = 0 [pid 5072] close(3 [pid 5075] setpgid(0, 0 [pid 5074] <... setpgid resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... symlink resumed>) = 0 [pid 5075] <... setpgid resumed>) = 0 [pid 5072] symlink("/dev/binderfs", "./binderfs" [pid 5071] memfd_create("syzkaller", 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... openat resumed>) = 3 [pid 5072] <... symlink resumed>) = 0 [pid 5071] <... memfd_create resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5074] write(3, "1000", 4 [pid 5072] memfd_create("syzkaller", 0 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] write(3, "1000", 4 [pid 5074] <... write resumed>) = 4 [pid 5072] <... memfd_create resumed>) = 3 [pid 5071] <... mmap resumed>) = 0x7fd745acd000 [pid 5075] <... write resumed>) = 4 [pid 5074] close(3 [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] close(3 [pid 5072] <... mmap resumed>) = 0x7fd745acd000 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5075] symlink("/dev/binderfs", "./binderfs" [pid 5074] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... symlink resumed>) = 0 [pid 5074] <... symlink resumed>) = 0 [pid 5075] memfd_create("syzkaller", 0 [pid 5074] memfd_create("syzkaller", 0 [pid 5075] <... memfd_create resumed>) = 3 [pid 5074] <... memfd_create resumed>) = 3 [pid 5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... mmap resumed>) = 0x7fd745acd000 [pid 5074] <... mmap resumed>) = 0x7fd745acd000 [pid 5070] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5068] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5072] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5071] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5075] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5074] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5070] <... write resumed>) = 16777216 [pid 5070] munmap(0x7fd745acd000, 16777216 [pid 5072] <... write resumed>) = 16777216 [pid 5068] <... write resumed>) = 16777216 [pid 5068] munmap(0x7fd745acd000, 16777216 [pid 5072] munmap(0x7fd745acd000, 16777216 [pid 5070] <... munmap resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... munmap resumed>) = 0 [pid 5071] <... write resumed>) = 16777216 [pid 5071] munmap(0x7fd745acd000, 16777216) = 0 [pid 5068] <... munmap resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5068] ioctl(4, LOOP_SET_FD, 3 [pid 5072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5072] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... ioctl resumed>) = 0 [pid 5070] close(3 [pid 5068] <... ioctl resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5068] close(3 [pid 5075] <... write resumed>) = 16777216 [pid 5070] mkdir("./file0", 0777 [pid 5068] <... close resumed>) = 0 [pid 5075] munmap(0x7fd745acd000, 16777216 [pid 5070] <... mkdir resumed>) = 0 [pid 5068] mkdir("./file0", 0777 [pid 5070] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5068] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5071] <... openat resumed>) = 4 [pid 5071] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5075] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... ioctl resumed>) = 0 [pid 5072] close(3) = 0 [pid 5072] mkdir("./file0", 0777) = 0 [pid 5072] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5071] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5071] close(3 [pid 5075] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [ 53.144882][ T5070] loop3: detected capacity change from 0 to 32768 [ 53.162972][ T5068] loop2: detected capacity change from 0 to 32768 [ 53.167211][ T5072] loop0: detected capacity change from 0 to 32768 [pid 5075] mkdir("./file0", 0777 [pid 5074] <... write resumed>) = 16777216 [pid 5071] mkdir("./file0", 0777 [pid 5075] <... mkdir resumed>) = 0 [pid 5075] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5074] munmap(0x7fd745acd000, 16777216 [pid 5071] <... mkdir resumed>) = 0 [pid 5071] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5074] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 53.191809][ T5071] loop1: detected capacity change from 0 to 32768 [ 53.202162][ T5075] loop5: detected capacity change from 0 to 32768 [ 53.220269][ T5070] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 53.222315][ T5068] XFS (loop2): DAX unsupported by block device. Turning off DAX. [pid 5074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5074] close(3) = 0 [pid 5074] mkdir("./file0", 0777) = 0 [ 53.236790][ T5070] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 53.237523][ T5068] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 53.256415][ T5072] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 53.261446][ T5074] loop4: detected capacity change from 0 to 32768 [ 53.268678][ T5072] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 53.271457][ T5075] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 53.288462][ T5075] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 53.301284][ T5071] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 53.316677][ T5071] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 53.324040][ T5070] XFS (loop3): Ending clean mount [ 53.336069][ T5068] XFS (loop2): Ending clean mount [pid 5074] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5072] <... mount resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5072] chdir("./file0") = 0 [ 53.338228][ T5070] XFS (loop3): Quotacheck needed: Please wait. [ 53.343403][ T5072] XFS (loop0): Ending clean mount [ 53.357132][ T5068] XFS (loop2): Quotacheck needed: Please wait. [ 53.365977][ T5072] XFS (loop0): Quotacheck needed: Please wait. [ 53.386572][ T5068] XFS (loop2): Quotacheck: Done. [pid 5072] ioctl(4, LOOP_CLR_FD) = 0 [pid 5072] close(4) = 0 [pid 5072] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5072] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5070] <... mount resumed>) = 0 [pid 5068] <... mount resumed>) = 0 [pid 5072] sendfile(5, 4, [96] [ 53.389070][ T5072] XFS (loop0): Quotacheck: Done. [ 53.406030][ T5075] XFS (loop5): Ending clean mount [ 53.407896][ T5074] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 53.412903][ T5075] XFS (loop5): Quotacheck needed: Please wait. [ 53.426690][ T5074] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 53.427341][ T5070] XFS (loop3): Quotacheck: Done. [pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5075] <... mount resumed>) = 0 [pid 5071] <... mount resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5070] chdir("./file0" [pid 5068] chdir("./file0" [pid 5075] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5070] <... chdir resumed>) = 0 [pid 5068] <... chdir resumed>) = 0 [pid 5075] chdir("./file0" [pid 5071] chdir("./file0" [pid 5070] ioctl(4, LOOP_CLR_FD [pid 5068] ioctl(4, LOOP_CLR_FD [pid 5075] <... chdir resumed>) = 0 [pid 5071] <... chdir resumed>) = 0 [pid 5070] <... ioctl resumed>) = 0 [pid 5068] <... ioctl resumed>) = 0 [pid 5075] ioctl(4, LOOP_CLR_FD [pid 5071] ioctl(4, LOOP_CLR_FD [pid 5070] close(4 [pid 5068] close(4 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5075] close(4 [pid 5071] close(4 [pid 5070] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5068] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5075] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [pid 5068] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5071] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5070] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5068] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5075] <... openat resumed>) = 4 [pid 5071] <... openat resumed>) = 4 [pid 5070] <... openat resumed>) = 5 [pid 5068] <... openat resumed>) = 5 [ 53.441995][ T5071] XFS (loop1): Ending clean mount [ 53.451281][ T5071] XFS (loop1): Quotacheck needed: Please wait. [ 53.478684][ T5075] XFS (loop5): Quotacheck: Done. [ 53.485977][ T5071] XFS (loop1): Quotacheck: Done. [pid 5075] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5071] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5070] sendfile(5, 4, [96] [pid 5068] sendfile(5, 4, [96] [pid 5075] <... openat resumed>) = 5 [pid 5071] <... openat resumed>) = 5 [pid 5075] sendfile(5, 4, [96] [ 53.584630][ T5074] XFS (loop4): Ending clean mount [ 53.693228][ T5068] syz-executor824 (5068): drop_caches: 2 [pid 5071] sendfile(5, 4, [96] [pid 5072] <... sendfile resumed> => [826], 2160) = 730 [pid 5072] exit_group(0) = ? [pid 5072] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=44 /* 0.44 s */} --- [pid 5062] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./0/binderfs" [pid 5068] <... sendfile resumed> => [826], 2160) = 730 [pid 5062] <... unlink resumed>) = 0 [pid 5068] exit_group(0 [pid 5062] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 53.737601][ T5072] syz-executor824 (5072): drop_caches: 2 [ 53.737803][ T5068] syz-executor824 (5068): drop_caches: 2 [ 53.752316][ T5072] syz-executor824 (5072): drop_caches: 2 [pid 5068] <... exit_group resumed>) = ? [pid 5068] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5064] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./0/binderfs") = 0 [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... sendfile resumed> => [826], 2160) = 730 [pid 5075] exit_group(0) = ? [pid 5075] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=42 /* 0.42 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./0/binderfs") = 0 [ 53.930036][ T5075] syz-executor824 (5075): drop_caches: 2 [ 53.937386][ T5075] syz-executor824 (5075): drop_caches: 2 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... sendfile resumed> => [826], 2160) = 730 [pid 5071] exit_group(0) = ? [pid 5071] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=44 /* 0.44 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] <... mount resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5074] chdir("./file0") = 0 [pid 5074] ioctl(4, LOOP_CLR_FD) = 0 [pid 5074] close(4 [pid 5063] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./0/binderfs") = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5074] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 54.039659][ T5071] syz-executor824 (5071): drop_caches: 2 [ 54.050364][ T5071] syz-executor824 (5071): drop_caches: 2 [ 54.063892][ T5074] XFS (loop4): Quotacheck needed: Please wait. [ 54.064874][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 54.079451][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 54.080509][ T5074] XFS (loop4): Quotacheck: Done. [ 54.089817][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 54.118550][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 54.119290][ T5074] syz-executor824 (5074): drop_caches: 2 [pid 5074] sendfile(5, 4, [96] [pid 5070] <... sendfile resumed> => [826], 2160) = 730 [pid 5070] exit_group(0) = ? [pid 5070] +++ exited with 0 +++ [pid 5074] <... sendfile resumed> => [826], 2160) = 730 [pid 5074] exit_group(0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=47 /* 0.47 s */} --- [pid 5065] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./0/binderfs") = 0 [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... exit_group resumed>) = ? [pid 5074] +++ exited with 0 +++ [ 54.147057][ T5070] syz-executor824 (5070): drop_caches: 2 [ 54.167214][ T5070] syz-executor824 (5070): drop_caches: 2 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./0/binderfs") = 0 [ 54.205017][ T5074] syz-executor824 (5074): drop_caches: 2 [ 54.238503][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 54.247935][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./0/file0") = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./0") = 0 [pid 5067] mkdir("./1", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5127 ./strace-static-x86_64: Process 5127 attached [pid 5127] chdir("./1") = 0 [pid 5127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] setpgid(0, 0) = 0 [pid 5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5127] write(3, "1000", 4) = 4 [pid 5127] close(3) = 0 [pid 5127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5127] memfd_create("syzkaller", 0) = 3 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./0/file0") = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./0") = 0 [pid 5064] mkdir("./1", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5128 ./strace-static-x86_64: Process 5128 attached [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5128] chdir("./1" [pid 5063] lstat("./0/file0", [pid 5128] <... chdir resumed>) = 0 [pid 5128] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5128] <... prctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5128] setpgid(0, 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] <... setpgid resumed>) = 0 [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5128] <... openat resumed>) = 3 [pid 5065] lstat("./0/file0", [pid 5063] <... openat resumed>) = 4 [pid 5128] write(3, "1000", 4 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(4, [pid 5128] <... write resumed>) = 4 [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] close(3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5128] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5128] symlink("/dev/binderfs", "./binderfs" [pid 5065] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5128] <... symlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5128] memfd_create("syzkaller", 0) = 3 [pid 5065] fstat(4, [pid 5063] getdents64(4, [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5128] <... mmap resumed>) = 0x7fd745acd000 [pid 5065] getdents64(4, [pid 5063] close(4 [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5063] rmdir("./0/file0" [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] close(4 [pid 5063] getdents64(3, [pid 5065] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./0/file0" [pid 5063] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] rmdir("./0" [pid 5065] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] mkdir("./1", 0777 [pid 5065] rmdir("./0" [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] mkdir("./1", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] close(3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... close resumed>) = 0 [pid 5065] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] lstat("./0/file0", [pid 5063] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5129 [pid 5065] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5130 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5130 attached ) = 4 ./strace-static-x86_64: Process 5129 attached [pid 5130] chdir("./1" [pid 5062] fstat(4, [pid 5130] <... chdir resumed>) = 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5129] chdir("./1" [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5130] setpgid(0, 0 [pid 5129] <... chdir resumed>) = 0 [pid 5062] getdents64(4, [pid 5130] <... setpgid resumed>) = 0 [pid 5129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5129] <... prctl resumed>) = 0 [pid 5062] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5130] <... openat resumed>) = 3 [pid 5129] setpgid(0, 0 [pid 5062] close(4 [pid 5130] write(3, "1000", 4 [pid 5129] <... setpgid resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5130] <... write resumed>) = 4 [pid 5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] rmdir("./0/file0" [pid 5130] close(3 [pid 5129] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5130] <... close resumed>) = 0 [pid 5129] write(3, "1000", 4 [pid 5062] getdents64(3, [pid 5130] symlink("/dev/binderfs", "./binderfs" [pid 5129] <... write resumed>) = 4 [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5130] <... symlink resumed>) = 0 [pid 5129] close(3 [pid 5062] close(3 [pid 5130] memfd_create("syzkaller", 0 [pid 5129] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5130] <... memfd_create resumed>) = 3 [pid 5129] symlink("/dev/binderfs", "./binderfs" [pid 5062] rmdir("./0" [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5129] <... symlink resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5130] <... mmap resumed>) = 0x7fd745acd000 [pid 5062] mkdir("./1", 0777 [pid 5129] memfd_create("syzkaller", 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5129] <... memfd_create resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5129] <... mmap resumed>) = 0x7fd745acd000 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5131 ./strace-static-x86_64: Process 5131 attached [pid 5131] chdir("./1") = 0 [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5131] setpgid(0, 0) = 0 [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5131] write(3, "1000", 4) = 4 [pid 5131] close(3) = 0 [pid 5131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5131] memfd_create("syzkaller", 0) = 3 [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./0/file0") = 0 [pid 5066] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./0") = 0 [pid 5066] mkdir("./1", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5132 ./strace-static-x86_64: Process 5132 attached [pid 5132] chdir("./1") = 0 [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5132] setpgid(0, 0) = 0 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5132] write(3, "1000", 4) = 4 [pid 5132] close(3) = 0 [pid 5132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5132] memfd_create("syzkaller", 0) = 3 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5127] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5128] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5130] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5129] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5131] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5132] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5127] <... write resumed>) = 16777216 [pid 5127] munmap(0x7fd745acd000, 16777216) = 0 [pid 5127] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5127] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5127] close(3) = 0 [pid 5127] mkdir("./file0", 0777) = 0 [pid 5127] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5128] <... write resumed>) = 16777216 [ 55.310800][ T5127] loop5: detected capacity change from 0 to 32768 [pid 5128] munmap(0x7fd745acd000, 16777216) = 0 [pid 5128] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5128] ioctl(4, LOOP_SET_FD, 3 [pid 5130] <... write resumed>) = 16777216 [pid 5130] munmap(0x7fd745acd000, 16777216 [pid 5128] <... ioctl resumed>) = 0 [pid 5130] <... munmap resumed>) = 0 [pid 5128] close(3) = 0 [pid 5128] mkdir("./file0", 0777) = 0 [pid 5128] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5130] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5130] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5130] close(3) = 0 [pid 5130] mkdir("./file0", 0777 [pid 5131] <... write resumed>) = 16777216 [pid 5130] <... mkdir resumed>) = 0 [pid 5129] <... write resumed>) = 16777216 [pid 5131] munmap(0x7fd745acd000, 16777216 [ 55.394131][ T5127] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 55.418038][ T5128] loop2: detected capacity change from 0 to 32768 [ 55.420884][ T5127] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5130] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5129] munmap(0x7fd745acd000, 16777216 [pid 5132] <... write resumed>) = 16777216 [pid 5131] <... munmap resumed>) = 0 [pid 5132] munmap(0x7fd745acd000, 16777216) = 0 [pid 5132] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5132] ioctl(4, LOOP_SET_FD, 3 [pid 5131] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5129] <... munmap resumed>) = 0 [pid 5131] <... openat resumed>) = 4 [pid 5129] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5131] ioctl(4, LOOP_SET_FD, 3 [pid 5129] <... openat resumed>) = 4 [pid 5132] <... ioctl resumed>) = 0 [ 55.461461][ T5130] loop3: detected capacity change from 0 to 32768 [ 55.487607][ T5127] XFS (loop5): Ending clean mount [ 55.490919][ T5128] XFS (loop2): DAX unsupported by block device. Turning off DAX. [pid 5129] ioctl(4, LOOP_SET_FD, 3 [pid 5132] close(3) = 0 [pid 5132] mkdir("./file0", 0777) = 0 [pid 5132] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5131] <... ioctl resumed>) = 0 [pid 5131] close(3) = 0 [pid 5131] mkdir("./file0", 0777) = 0 [pid 5131] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5129] <... ioctl resumed>) = 0 [pid 5129] close(3) = 0 [pid 5127] <... mount resumed>) = 0 [pid 5129] mkdir("./file0", 0777) = 0 [pid 5129] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5127] chdir("./file0") = 0 [pid 5127] ioctl(4, LOOP_CLR_FD) = 0 [pid 5127] close(4) = 0 [pid 5127] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5127] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 55.508227][ T5127] XFS (loop5): Quotacheck needed: Please wait. [ 55.509279][ T5128] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 55.521327][ T5132] loop4: detected capacity change from 0 to 32768 [ 55.528536][ T5131] loop0: detected capacity change from 0 to 32768 [ 55.534837][ T5129] loop1: detected capacity change from 0 to 32768 [ 55.542822][ T5127] XFS (loop5): Quotacheck: Done. [ 55.549934][ T5130] XFS (loop3): DAX unsupported by block device. Turning off DAX. [pid 5127] sendfile(5, 4, [96] => [826], 2160) = 730 [pid 5127] exit_group(0) = ? [pid 5127] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5127, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 5067] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [ 55.590874][ T5128] XFS (loop2): Ending clean mount [ 55.592277][ T5127] syz-executor824 (5127): drop_caches: 2 [ 55.597509][ T5130] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 55.613709][ T5131] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 55.615194][ T5127] syz-executor824 (5127): drop_caches: 2 [ 55.622479][ T5132] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 55.628896][ T5128] XFS (loop2): Quotacheck needed: Please wait. [pid 5067] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./1/binderfs") = 0 [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5128] <... mount resumed>) = 0 [pid 5128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5128] chdir("./file0") = 0 [pid 5128] ioctl(4, LOOP_CLR_FD) = 0 [pid 5128] close(4) = 0 [pid 5128] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5128] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 55.640521][ T5131] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 55.655446][ T5129] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 55.657808][ T5132] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 55.665225][ T5128] XFS (loop2): Quotacheck: Done. [ 55.677711][ T5129] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5128] sendfile(5, 4, [96] => [826], 2160) = 730 [pid 5128] exit_group(0) = ? [pid 5128] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5128, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=31 /* 0.31 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./1/binderfs") = 0 [ 55.677889][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 55.704978][ T5128] syz-executor824 (5128): drop_caches: 2 [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5132] <... mount resumed>) = 0 [pid 5132] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5132] chdir("./file0") = 0 [pid 5132] ioctl(4, LOOP_CLR_FD) = 0 [pid 5132] close(4) = 0 [pid 5132] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5132] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 55.757492][ T5128] syz-executor824 (5128): drop_caches: 2 [ 55.762500][ T5132] XFS (loop4): Ending clean mount [ 55.789752][ T5132] XFS (loop4): Quotacheck needed: Please wait. [ 55.797351][ T5130] XFS (loop3): Ending clean mount [pid 5132] sendfile(5, 4, [96] => [795], 2160) = 699 [pid 5132] exit_group(0) = ? [pid 5132] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- [pid 5066] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./1/binderfs") = 0 [ 55.803862][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 55.813321][ T5129] XFS (loop1): Ending clean mount [ 55.814277][ T5132] XFS (loop4): Quotacheck: Done. [ 55.818804][ T5131] XFS (loop0): Ending clean mount [ 55.834912][ T5132] syz-executor824 (5132): drop_caches: 2 [ 55.841001][ T5132] syz-executor824 (5132): drop_caches: 2 [ 55.846373][ T5130] XFS (loop3): Quotacheck needed: Please wait. [ 55.868868][ T5129] XFS (loop1): Quotacheck needed: Please wait. [ 55.878764][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 55.881563][ T5131] XFS (loop0): Quotacheck needed: Please wait. [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] <... mount resumed>) = 0 [pid 5130] <... mount resumed>) = 0 [pid 5130] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5130] chdir("./file0") = 0 [pid 5130] ioctl(4, LOOP_CLR_FD) = 0 [ 55.910526][ T5130] XFS (loop3): Quotacheck: Done. [pid 5129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5130] close(4) = 0 [pid 5129] <... openat resumed>) = 3 [pid 5129] chdir("./file0") = 0 [pid 5129] ioctl(4, LOOP_CLR_FD) = 0 [pid 5129] close(4) = 0 [pid 5129] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5129] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5129] sendfile(5, 4, [96] [pid 5130] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5130] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 55.945085][ T5129] XFS (loop1): Quotacheck: Done. [pid 5130] sendfile(5, 4, [96] [pid 5131] <... mount resumed>) = 0 [ 55.978691][ T5131] XFS (loop0): Quotacheck: Done. [pid 5131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5131] chdir("./file0") = 0 [pid 5131] ioctl(4, LOOP_CLR_FD) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5131] close(4) = 0 [pid 5131] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5131] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5131] sendfile(5, 4, [96] [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 56.005356][ T5129] syz-executor824 (5129): drop_caches: 2 [ 56.005722][ T5130] syz-executor824 (5130): drop_caches: 2 [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5129] <... sendfile resumed> => [764], 2160) = 668 [pid 5067] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5129] exit_group(0 [pid 5067] close(4 [pid 5129] <... exit_group resumed>) = ? [pid 5067] <... close resumed>) = 0 [pid 5129] +++ exited with 0 +++ [pid 5067] rmdir("./1/file0" [pid 5130] <... sendfile resumed> => [764], 2160) = 668 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5129, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5130] exit_group(0 [pid 5067] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5130] <... exit_group resumed>) = ? [pid 5067] close(3 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5130] +++ exited with 0 +++ [pid 5067] rmdir("./1") = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5063] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./2", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(3, [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5067] close(3 [pid 5065] fstat(3, [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] <... close resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5063] lstat("./1/binderfs", [pid 5067] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5183 [pid 5065] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] unlink("./1/binderfs" [pid 5065] lstat("./1/binderfs", [pid 5063] <... unlink resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5131] <... sendfile resumed> => [733], 2160) = 637 [pid 5065] unlink("./1/binderfs" [pid 5131] exit_group(0 [pid 5065] <... unlink resumed>) = 0 [pid 5131] <... exit_group resumed>) = ? [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5183 attached [pid 5131] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5131, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5062] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5183] chdir("./2" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5183] <... chdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... openat resumed>) = 3 [pid 5183] <... prctl resumed>) = 0 [pid 5062] fstat(3, [pid 5183] setpgid(0, 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5183] <... setpgid resumed>) = 0 [pid 5062] getdents64(3, [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5183] <... openat resumed>) = 3 [pid 5062] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5183] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5183] <... write resumed>) = 4 [pid 5062] lstat("./1/binderfs", [pid 5183] close(3 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 56.049178][ T5130] syz-executor824 (5130): drop_caches: 2 [ 56.054380][ T5129] syz-executor824 (5129): drop_caches: 2 [ 56.075707][ T5131] syz-executor824 (5131): drop_caches: 2 [ 56.082686][ T5131] syz-executor824 (5131): drop_caches: 2 [pid 5183] <... close resumed>) = 0 [pid 5062] unlink("./1/binderfs" [pid 5183] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... unlink resumed>) = 0 [pid 5183] <... symlink resumed>) = 0 [pid 5062] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5183] memfd_create("syzkaller", 0) = 3 [pid 5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 56.126540][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 56.165701][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5064] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] lstat("./1/file0", [pid 5064] getdents64(4, [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] close(4 [pid 5066] <... openat resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] rmdir("./1/file0" [pid 5066] getdents64(4, [pid 5064] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(3, [pid 5066] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5064] close(3 [pid 5066] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5066] rmdir("./1/file0" [pid 5064] rmdir("./1") = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5064] mkdir("./2", 0777 [pid 5066] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5066] close(3 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1" [pid 5064] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5066] mkdir("./2", 0777 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [ 56.187256][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5064] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5184 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5185 ./strace-static-x86_64: Process 5184 attached [pid 5184] chdir("./2") = 0 [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5185 attached ) = 0 [pid 5184] setpgid(0, 0 [pid 5185] chdir("./2" [pid 5184] <... setpgid resumed>) = 0 [pid 5185] <... chdir resumed>) = 0 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5184] <... openat resumed>) = 3 [pid 5185] <... prctl resumed>) = 0 [pid 5184] write(3, "1000", 4 [pid 5185] setpgid(0, 0 [pid 5184] <... write resumed>) = 4 [pid 5185] <... setpgid resumed>) = 0 [pid 5184] close(3 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5184] <... close resumed>) = 0 [pid 5185] <... openat resumed>) = 3 [pid 5184] symlink("/dev/binderfs", "./binderfs" [pid 5185] write(3, "1000", 4 [pid 5184] <... symlink resumed>) = 0 [pid 5185] <... write resumed>) = 4 [pid 5185] close(3 [pid 5184] memfd_create("syzkaller", 0 [pid 5185] <... close resumed>) = 0 [pid 5184] <... memfd_create resumed>) = 3 [pid 5185] symlink("/dev/binderfs", "./binderfs" [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5185] <... symlink resumed>) = 0 [pid 5184] <... mmap resumed>) = 0x7fd745acd000 [pid 5185] memfd_create("syzkaller", 0) = 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./1/file0") = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./1") = 0 [pid 5063] mkdir("./2", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5186 ./strace-static-x86_64: Process 5186 attached [pid 5186] chdir("./2") = 0 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5186] setpgid(0, 0) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5186] write(3, "1000", 4) = 4 [pid 5186] close(3) = 0 [pid 5186] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5186] memfd_create("syzkaller", 0) = 3 [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] lstat("./1/file0", [pid 5065] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5062] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(4 [pid 5062] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5065] rmdir("./1/file0" [pid 5062] fstat(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5183] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5065] getdents64(3, [pid 5062] getdents64(4, [pid 5065] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5065] close(3 [pid 5062] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./1" [pid 5062] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5065] mkdir("./2", 0777 [pid 5062] rmdir("./1/file0" [pid 5065] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5185] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5184] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] close(3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... close resumed>) = 0 [pid 5065] close(3 [pid 5062] rmdir("./1" [pid 5065] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] mkdir("./2", 0777) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5187 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5188 ./strace-static-x86_64: Process 5187 attached [pid 5187] chdir("./2") = 0 [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5187] setpgid(0, 0) = 0 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5188 attached ) = 3 [pid 5188] chdir("./2" [pid 5187] write(3, "1000", 4 [pid 5188] <... chdir resumed>) = 0 [pid 5187] <... write resumed>) = 4 [pid 5188] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5187] close(3 [pid 5188] <... prctl resumed>) = 0 [pid 5187] <... close resumed>) = 0 [pid 5188] setpgid(0, 0 [pid 5187] symlink("/dev/binderfs", "./binderfs" [pid 5188] <... setpgid resumed>) = 0 [pid 5187] <... symlink resumed>) = 0 [pid 5188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5187] memfd_create("syzkaller", 0 [pid 5188] <... openat resumed>) = 3 [pid 5187] <... memfd_create resumed>) = 3 [pid 5188] write(3, "1000", 4 [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5188] <... write resumed>) = 4 [pid 5187] <... mmap resumed>) = 0x7fd745acd000 [pid 5188] close(3) = 0 [pid 5188] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5188] memfd_create("syzkaller", 0) = 3 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5186] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5187] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5185] <... write resumed>) = 16777216 [pid 5185] munmap(0x7fd745acd000, 16777216 [pid 5183] <... write resumed>) = 16777216 [pid 5183] munmap(0x7fd745acd000, 16777216 [pid 5188] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5185] <... munmap resumed>) = 0 [pid 5184] <... write resumed>) = 16777216 [pid 5185] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5184] munmap(0x7fd745acd000, 16777216 [pid 5185] <... openat resumed>) = 4 [pid 5185] ioctl(4, LOOP_SET_FD, 3 [pid 5184] <... munmap resumed>) = 0 [pid 5183] <... munmap resumed>) = 0 [pid 5183] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5183] ioctl(4, LOOP_SET_FD, 3 [pid 5184] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5185] <... ioctl resumed>) = 0 [pid 5185] close(3 [pid 5184] <... openat resumed>) = 4 [pid 5185] <... close resumed>) = 0 [pid 5184] ioctl(4, LOOP_SET_FD, 3 [pid 5185] mkdir("./file0", 0777) = 0 [pid 5185] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5183] <... ioctl resumed>) = 0 [pid 5183] close(3 [pid 5184] <... ioctl resumed>) = 0 [pid 5183] <... close resumed>) = 0 [pid 5184] close(3) = 0 [pid 5183] mkdir("./file0", 0777 [pid 5184] mkdir("./file0", 0777 [pid 5183] <... mkdir resumed>) = 0 [pid 5184] <... mkdir resumed>) = 0 [pid 5183] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [ 57.144695][ T5185] loop4: detected capacity change from 0 to 32768 [ 57.148928][ T5183] loop5: detected capacity change from 0 to 32768 [ 57.163469][ T5184] loop2: detected capacity change from 0 to 32768 [pid 5184] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5186] <... write resumed>) = 16777216 [ 57.236556][ T5185] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 57.248496][ T5185] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.259926][ T5183] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 57.271855][ T5184] XFS (loop2): DAX unsupported by block device. Turning off DAX. [pid 5186] munmap(0x7fd745acd000, 16777216) = 0 [pid 5186] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5186] ioctl(4, LOOP_SET_FD, 3 [pid 5187] <... write resumed>) = 16777216 [pid 5186] <... ioctl resumed>) = 0 [pid 5186] close(3) = 0 [pid 5186] mkdir("./file0", 0777) = 0 [ 57.281370][ T5183] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.295054][ T5184] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5186] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5187] munmap(0x7fd745acd000, 16777216) = 0 [pid 5185] <... mount resumed>) = 0 [pid 5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5185] chdir("./file0") = 0 [pid 5185] ioctl(4, LOOP_CLR_FD) = 0 [ 57.332766][ T5186] loop1: detected capacity change from 0 to 32768 [ 57.355122][ T5185] XFS (loop4): Ending clean mount [ 57.365234][ T5185] XFS (loop4): Quotacheck needed: Please wait. [pid 5185] close(4) = 0 [pid 5188] <... write resumed>) = 16777216 [pid 5185] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5188] munmap(0x7fd745acd000, 16777216 [pid 5187] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5185] <... openat resumed>) = 4 [pid 5188] <... munmap resumed>) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5188] ioctl(4, LOOP_SET_FD, 3 [pid 5187] <... openat resumed>) = 4 [pid 5185] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5188] <... ioctl resumed>) = 0 [pid 5188] close(3) = 0 [pid 5188] mkdir("./file0", 0777) = 0 [pid 5188] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [ 57.392391][ T5183] XFS (loop5): Ending clean mount [ 57.397830][ T5185] XFS (loop4): Quotacheck: Done. [ 57.408507][ T5184] XFS (loop2): Ending clean mount [pid 5187] ioctl(4, LOOP_SET_FD, 3 [pid 5185] <... openat resumed>) = 5 [pid 5185] sendfile(5, 4, [96] [pid 5187] <... ioctl resumed>) = 0 [pid 5184] <... mount resumed>) = 0 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5184] chdir("./file0") = 0 [pid 5184] ioctl(4, LOOP_CLR_FD) = 0 [pid 5184] close(4) = 0 [pid 5184] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5184] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5184] sendfile(5, 4, [96] [pid 5187] close(3) = 0 [ 57.435695][ T5184] XFS (loop2): Quotacheck needed: Please wait. [ 57.441514][ T5188] loop0: detected capacity change from 0 to 32768 [ 57.446425][ T5186] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 57.463675][ T5187] loop3: detected capacity change from 0 to 32768 [ 57.466661][ T5183] XFS (loop5): Quotacheck needed: Please wait. [pid 5187] mkdir("./file0", 0777) = 0 [pid 5187] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5183] <... mount resumed>) = 0 [pid 5184] <... sendfile resumed> => [826], 2160) = 730 [pid 5184] exit_group(0) = ? [pid 5184] +++ exited with 0 +++ [pid 5183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=14 /* 0.14 s */} --- [pid 5183] <... openat resumed>) = 3 [pid 5064] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5183] chdir("./file0" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5183] <... chdir resumed>) = 0 [pid 5064] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./2/binderfs" [pid 5183] ioctl(4, LOOP_CLR_FD [pid 5064] <... unlink resumed>) = 0 [ 57.486409][ T5184] XFS (loop2): Quotacheck: Done. [ 57.490882][ T5186] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.512195][ T5184] syz-executor824 (5184): drop_caches: 2 [ 57.514707][ T5183] XFS (loop5): Quotacheck: Done. [ 57.519125][ T5185] syz-executor824 (5185): drop_caches: 2 [pid 5183] <... ioctl resumed>) = 0 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5183] close(4) = 0 [pid 5183] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5183] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5183] sendfile(5, 4, [96] [pid 5185] <... sendfile resumed> => [826], 2160) = 730 [pid 5185] exit_group(0) = ? [pid 5183] <... sendfile resumed> => [826], 2160) = 730 [pid 5183] exit_group(0 [pid 5185] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=27 /* 0.27 s */} --- [pid 5183] <... exit_group resumed>) = ? [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5183] +++ exited with 0 +++ [ 57.533179][ T5184] syz-executor824 (5184): drop_caches: 2 [ 57.547755][ T5188] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 57.557498][ T5185] syz-executor824 (5185): drop_caches: 2 [ 57.566562][ T5188] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.576846][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5066] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./2/binderfs", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=26 /* 0.26 s */} --- [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5066] unlink("./2/binderfs" [pid 5067] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5066] <... unlink resumed>) = 0 [pid 5067] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./2/binderfs") = 0 [ 57.590427][ T5183] syz-executor824 (5183): drop_caches: 2 [ 57.590513][ T5186] XFS (loop1): Ending clean mount [ 57.596517][ T5183] syz-executor824 (5183): drop_caches: 2 [ 57.617624][ T5187] XFS (loop3): DAX unsupported by block device. Turning off DAX. [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5186] <... mount resumed>) = 0 [pid 5186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5186] chdir("./file0") = 0 [pid 5186] ioctl(4, LOOP_CLR_FD) = 0 [pid 5186] close(4) = 0 [pid 5186] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [ 57.634649][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.646631][ T5186] XFS (loop1): Quotacheck needed: Please wait. [ 57.660008][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.660815][ T5187] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.682594][ T5186] XFS (loop1): Quotacheck: Done. [pid 5186] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 57.684732][ T5188] XFS (loop0): Ending clean mount [pid 5186] sendfile(5, 4, [96] [pid 5188] <... mount resumed>) = 0 [pid 5186] <... sendfile resumed> => [826], 2160) = 730 [pid 5188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5188] chdir("./file0") = 0 [pid 5188] ioctl(4, LOOP_CLR_FD) = 0 [pid 5188] close(4) = 0 [pid 5186] exit_group(0 [pid 5188] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5186] <... exit_group resumed>) = ? [pid 5188] <... openat resumed>) = 4 [pid 5186] +++ exited with 0 +++ [pid 5188] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 5188] sendfile(5, 4, [96] [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 57.712331][ T5188] XFS (loop0): Quotacheck needed: Please wait. [ 57.736106][ T5186] syz-executor824 (5186): drop_caches: 2 [ 57.742838][ T5186] syz-executor824 (5186): drop_caches: 2 [ 57.750386][ T5188] XFS (loop0): Quotacheck: Done. [ 57.757030][ T5187] XFS (loop3): Ending clean mount [pid 5063] unlink("./2/binderfs") = 0 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... mount resumed>) = 0 [pid 5187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 57.791806][ T5187] XFS (loop3): Quotacheck needed: Please wait. [ 57.808312][ T5188] syz-executor824 (5188): drop_caches: 2 [pid 5187] chdir("./file0") = 0 [pid 5187] ioctl(4, LOOP_CLR_FD) = 0 [pid 5187] close(4) = 0 [pid 5187] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5188] <... sendfile resumed> => [733], 2160) = 637 [pid 5188] exit_group(0) = ? [pid 5188] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5188, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5062] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./2/binderfs" [pid 5187] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5062] <... unlink resumed>) = 0 [pid 5187] <... openat resumed>) = 5 [pid 5062] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 57.852424][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.865405][ T5187] XFS (loop3): Quotacheck: Done. [ 57.881450][ T5188] syz-executor824 (5188): drop_caches: 2 [pid 5187] sendfile(5, 4, [96] [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... sendfile resumed> => [733], 2160) = 637 [pid 5187] exit_group(0) = ? [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5187] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./2/binderfs") = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./2/file0") = 0 [ 57.944737][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.959827][ T5187] syz-executor824 (5187): drop_caches: 2 [ 57.980798][ T5187] syz-executor824 (5187): drop_caches: 2 [pid 5067] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./2") = 0 [pid 5067] mkdir("./3", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5239 ./strace-static-x86_64: Process 5239 attached [pid 5239] chdir("./3") = 0 [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5239] setpgid(0, 0) = 0 [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5239] write(3, "1000", 4) = 4 [pid 5239] close(3) = 0 [pid 5239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5239] memfd_create("syzkaller", 0) = 3 [pid 5239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [ 58.055220][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./2/file0") = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5066] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./2" [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] mkdir("./3", 0777) = 0 [pid 5064] fstat(4, [pid 5062] <... umount2 resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./2/file0", [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] getdents64(4, [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 5064] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] rmdir("./2/file0") = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5240 [pid 5064] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5062] fstat(4, [pid 5064] close(3) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] rmdir("./2") = 0 [pid 5062] getdents64(4, [pid 5064] mkdir("./3", 0777 [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] close(4 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5241 [pid 5062] <... close resumed>) = 0 ./strace-static-x86_64: Process 5240 attached [pid 5062] rmdir("./2/file0" [pid 5240] chdir("./3" [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5240] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] close(3 [pid 5240] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5241 attached [pid 5240] setpgid(0, 0 [pid 5062] <... close resumed>) = 0 [pid 5241] chdir("./3" [pid 5240] <... setpgid resumed>) = 0 [pid 5062] rmdir("./2" [pid 5241] <... chdir resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5240] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5241] <... prctl resumed>) = 0 [pid 5240] write(3, "1000", 4 [pid 5062] mkdir("./3", 0777 [pid 5241] setpgid(0, 0 [pid 5240] <... write resumed>) = 4 [pid 5241] <... setpgid resumed>) = 0 [pid 5240] close(3 [pid 5062] <... mkdir resumed>) = 0 [pid 5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5240] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5241] <... openat resumed>) = 3 [pid 5240] symlink("/dev/binderfs", "./binderfs" [pid 5241] write(3, "1000", 4 [pid 5240] <... symlink resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5241] <... write resumed>) = 4 [pid 5240] memfd_create("syzkaller", 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5241] close(3 [pid 5240] <... memfd_create resumed>) = 3 [pid 5241] <... close resumed>) = 0 [pid 5240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5241] symlink("/dev/binderfs", "./binderfs" [pid 5240] <... mmap resumed>) = 0x7fd745acd000 [pid 5062] close(3 [pid 5241] <... symlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5241] memfd_create("syzkaller", 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5241] <... memfd_create resumed>) = 3 [pid 5241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5062] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5242 ./strace-static-x86_64: Process 5242 attached [pid 5242] chdir("./3") = 0 [pid 5242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5242] setpgid(0, 0) = 0 [pid 5242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5242] write(3, "1000", 4) = 4 [pid 5242] close(3) = 0 [pid 5242] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5242] memfd_create("syzkaller", 0) = 3 [pid 5242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./2/file0") = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./2") = 0 [pid 5063] mkdir("./3", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5243 ./strace-static-x86_64: Process 5243 attached [pid 5243] chdir("./3") = 0 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5243] setpgid(0, 0) = 0 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5243] write(3, "1000", 4) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 5243] close(3) = 0 [pid 5243] symlink("/dev/binderfs", "./binderfs" [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5243] <... symlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] memfd_create("syzkaller", 0 [pid 5065] lstat("./2/file0", [pid 5243] <... memfd_create resumed>) = 3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5243] <... mmap resumed>) = 0x7fd745acd000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./2/file0") = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./2") = 0 [pid 5065] mkdir("./3", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5244 [pid 5239] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216./strace-static-x86_64: Process 5244 attached [pid 5244] chdir("./3") = 0 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] setpgid(0, 0) = 0 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1000", 4) = 4 [pid 5244] close(3) = 0 [pid 5244] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5244] memfd_create("syzkaller", 0) = 3 [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5241] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5242] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5240] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5243] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5244] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5239] <... write resumed>) = 16777216 [pid 5239] munmap(0x7fd745acd000, 16777216) = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5239] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5239] close(3) = 0 [pid 5239] mkdir("./file0", 0777) = 0 [ 58.942343][ T5239] loop5: detected capacity change from 0 to 32768 [pid 5239] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5240] <... write resumed>) = 16777216 [pid 5240] munmap(0x7fd745acd000, 16777216) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5240] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5240] close(3) = 0 [pid 5240] mkdir("./file0", 0777) = 0 [ 59.030575][ T5239] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 59.064731][ T5239] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5240] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5241] <... write resumed>) = 16777216 [pid 5241] munmap(0x7fd745acd000, 16777216) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5242] <... write resumed>) = 16777216 [pid 5241] <... openat resumed>) = 4 [ 59.077208][ T5240] loop4: detected capacity change from 0 to 32768 [pid 5241] ioctl(4, LOOP_SET_FD, 3 [pid 5242] munmap(0x7fd745acd000, 16777216) = 0 [pid 5244] <... write resumed>) = 16777216 [pid 5242] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5241] <... ioctl resumed>) = 0 [pid 5244] munmap(0x7fd745acd000, 16777216 [pid 5242] <... openat resumed>) = 4 [pid 5241] close(3 [pid 5242] ioctl(4, LOOP_SET_FD, 3 [pid 5241] <... close resumed>) = 0 [pid 5243] <... write resumed>) = 16777216 [pid 5242] <... ioctl resumed>) = 0 [pid 5241] mkdir("./file0", 0777 [pid 5242] close(3) = 0 [pid 5242] mkdir("./file0", 0777 [pid 5243] munmap(0x7fd745acd000, 16777216 [pid 5242] <... mkdir resumed>) = 0 [pid 5243] <... munmap resumed>) = 0 [pid 5242] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5241] <... mkdir resumed>) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5241] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5243] <... openat resumed>) = 4 [pid 5243] ioctl(4, LOOP_SET_FD, 3 [pid 5244] <... munmap resumed>) = 0 [pid 5243] <... ioctl resumed>) = 0 [pid 5243] close(3) = 0 [pid 5243] mkdir("./file0", 0777) = 0 [pid 5243] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5244] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 59.131904][ T5240] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 59.148921][ T5241] loop2: detected capacity change from 0 to 32768 [ 59.152008][ T5240] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 59.167181][ T5239] XFS (loop5): Ending clean mount [pid 5244] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5244] close(3) = 0 [pid 5244] mkdir("./file0", 0777) = 0 [ 59.179267][ T5242] loop0: detected capacity change from 0 to 32768 [ 59.200377][ T5243] loop1: detected capacity change from 0 to 32768 [ 59.206431][ T5240] XFS (loop4): Ending clean mount [ 59.210912][ T5244] loop3: detected capacity change from 0 to 32768 [ 59.214930][ T5239] XFS (loop5): Quotacheck needed: Please wait. [pid 5244] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5239] <... mount resumed>) = 0 [pid 5239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5239] chdir("./file0") = 0 [pid 5239] ioctl(4, LOOP_CLR_FD) = 0 [pid 5239] close(4) = 0 [pid 5239] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5239] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5239] sendfile(5, 4, [96] [pid 5240] <... mount resumed>) = 0 [ 59.231143][ T5240] XFS (loop4): Quotacheck needed: Please wait. [ 59.242211][ T5243] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 59.250798][ T5242] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 59.256449][ T5239] XFS (loop5): Quotacheck: Done. [ 59.259454][ T5242] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 59.271268][ T5240] XFS (loop4): Quotacheck: Done. [pid 5240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5240] chdir("./file0") = 0 [pid 5240] ioctl(4, LOOP_CLR_FD) = 0 [pid 5239] <... sendfile resumed> => [826], 2160) = 730 [pid 5240] close(4 [pid 5239] exit_group(0 [pid 5240] <... close resumed>) = 0 [pid 5239] <... exit_group resumed>) = ? [pid 5240] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5239] +++ exited with 0 +++ [pid 5240] <... openat resumed>) = 4 [pid 5240] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5239, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5240] <... openat resumed>) = 5 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5240] sendfile(5, 4, [96] [pid 5067] <... restart_syscall resumed>) = 0 [ 59.274254][ T5243] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 59.277465][ T5241] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 59.304443][ T5239] syz-executor824 (5239): drop_caches: 2 [ 59.316238][ T5241] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 59.326982][ T5239] syz-executor824 (5239): drop_caches: 2 [pid 5067] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5240] <... sendfile resumed> => [826], 2160) = 730 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./3/binderfs", [pid 5240] exit_group(0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5240] <... exit_group resumed>) = ? [pid 5067] unlink("./3/binderfs" [pid 5240] +++ exited with 0 +++ [pid 5067] <... unlink resumed>) = 0 [ 59.359661][ T5242] XFS (loop0): Ending clean mount [ 59.367545][ T5240] syz-executor824 (5240): drop_caches: 2 [ 59.373347][ T5240] syz-executor824 (5240): drop_caches: 2 [ 59.380429][ T5244] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 59.390051][ T5244] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 59.390707][ T5243] XFS (loop1): Ending clean mount [ 59.401750][ T5242] XFS (loop0): Quotacheck needed: Please wait. [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5240, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5066] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5241] <... mount resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5241] chdir("./file0" [pid 5066] <... openat resumed>) = 3 [pid 5241] <... chdir resumed>) = 0 [pid 5066] fstat(3, [pid 5241] ioctl(4, LOOP_CLR_FD) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5241] close(4) = 0 [pid 5066] getdents64(3, [pid 5241] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5066] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5241] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5066] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5241] sendfile(5, 4, [96] [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 59.404235][ T5241] XFS (loop2): Ending clean mount [ 59.417057][ T5241] XFS (loop2): Quotacheck needed: Please wait. [ 59.431225][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 59.436707][ T5241] XFS (loop2): Quotacheck: Done. [ 59.445856][ T5243] XFS (loop1): Quotacheck needed: Please wait. [pid 5066] lstat("./3/binderfs", [pid 5242] <... mount resumed>) = 0 [pid 5241] <... sendfile resumed> => [826], 2160) = 730 [pid 5242] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5241] exit_group(0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5242] <... openat resumed>) = 3 [pid 5241] <... exit_group resumed>) = ? [pid 5066] unlink("./3/binderfs" [pid 5242] chdir("./file0" [pid 5241] +++ exited with 0 +++ [pid 5242] <... chdir resumed>) = 0 [pid 5242] ioctl(4, LOOP_CLR_FD [pid 5066] <... unlink resumed>) = 0 [pid 5242] <... ioctl resumed>) = 0 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5242] close(4) = 0 [pid 5242] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5242] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5242] sendfile(5, 4, [96] [pid 5064] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5242] <... sendfile resumed> => [826], 2160) = 730 [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, [pid 5242] exit_group(0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5242] <... exit_group resumed>) = ? [pid 5064] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./3/binderfs") = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5242] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5242, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./3/binderfs") = 0 [ 59.462660][ T5241] syz-executor824 (5241): drop_caches: 2 [ 59.471942][ T5241] syz-executor824 (5241): drop_caches: 2 [ 59.478471][ T5244] XFS (loop3): Ending clean mount [ 59.486119][ T5242] XFS (loop0): Quotacheck: Done. [pid 5062] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5243] <... mount resumed>) = 0 [pid 5243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5243] chdir("./file0") = 0 [pid 5243] ioctl(4, LOOP_CLR_FD) = 0 [pid 5243] close(4) = 0 [pid 5243] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5243] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 59.523294][ T5242] syz-executor824 (5242): drop_caches: 2 [ 59.528081][ T5244] XFS (loop3): Quotacheck needed: Please wait. [ 59.529505][ T5242] syz-executor824 (5242): drop_caches: 2 [ 59.554254][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 59.563401][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5243] sendfile(5, 4, [96] [pid 5244] <... mount resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5244] chdir("./file0") = 0 [pid 5244] ioctl(4, LOOP_CLR_FD) = 0 [pid 5244] close(4) = 0 [pid 5244] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5244] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5244] sendfile(5, 4, [96] [pid 5243] <... sendfile resumed> => [795], 2160) = 699 [ 59.568580][ T5243] XFS (loop1): Quotacheck: Done. [ 59.573832][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 59.595397][ T5244] XFS (loop3): Quotacheck: Done. [ 59.602162][ T5243] syz-executor824 (5243): drop_caches: 2 [pid 5243] exit_group(0) = ? [pid 5243] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5243, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./3/binderfs") = 0 [ 59.624198][ T5244] syz-executor824 (5244): drop_caches: 2 [ 59.628913][ T5243] syz-executor824 (5243): drop_caches: 2 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5244] <... sendfile resumed> => [795], 2160) = 699 [pid 5244] exit_group(0) = ? [pid 5244] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5065] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./3/binderfs") = 0 [ 59.694450][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 59.714704][ T5244] syz-executor824 (5244): drop_caches: 2 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./3/file0") = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./3") = 0 [pid 5067] mkdir("./4", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5293 ./strace-static-x86_64: Process 5293 attached [pid 5293] chdir("./4") = 0 [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5293] setpgid(0, 0) = 0 [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5293] write(3, "1000", 4) = 4 [pid 5293] close(3) = 0 [pid 5293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5293] memfd_create("syzkaller", 0) = 3 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [ 59.797756][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./3/file0") = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./3" [pid 5062] <... umount2 resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./4", 0777 [pid 5066] <... umount2 resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5062] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5062] lstat("./3/file0", [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3 [pid 5066] getdents64(4, [pid 5063] <... umount2 resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] close(4) = 0 [pid 5066] rmdir("./3/file0") = 0 [pid 5066] getdents64(3, [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5066] close(3) = 0 [pid 5066] rmdir("./3" [pid 5063] lstat("./3/file0", [pid 5062] fstat(4, [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5294 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] mkdir("./4", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] fstat(4, [pid 5062] close(4 [pid 5066] close(3./strace-static-x86_64: Process 5294 attached ) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(4, [pid 5062] rmdir("./3/file0" [pid 5294] chdir("./4" [pid 5066] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5295 [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5062] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5295 attached [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5294] <... chdir resumed>) = 0 [pid 5063] close(4 [pid 5295] chdir("./4") = 0 [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] <... close resumed>) = 0 [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] rmdir("./3/file0" [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5294] <... prctl resumed>) = 0 [pid 5295] setpgid(0, 0) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] close(3 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5294] setpgid(0, 0 [pid 5063] getdents64(3, [pid 5295] <... openat resumed>) = 3 [pid 5294] <... setpgid resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5295] write(3, "1000", 4 [pid 5293] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5295] <... write resumed>) = 4 [pid 5295] close(3) = 0 [pid 5295] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5295] memfd_create("syzkaller", 0) = 3 [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] rmdir("./3" [pid 5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5063] close(3) = 0 [pid 5063] rmdir("./3" [pid 5294] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] mkdir("./4", 0777 [pid 5294] write(3, "1000", 4 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] mkdir("./4", 0777 [pid 5294] <... write resumed>) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5294] close(3 [pid 5062] <... mkdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5294] <... close resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5294] symlink("/dev/binderfs", "./binderfs" [pid 5063] close(3 [pid 5294] <... symlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5294] memfd_create("syzkaller", 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5296 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5294] <... memfd_create resumed>) = 3 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] close(3 [pid 5294] <... mmap resumed>) = 0x7fd745acd000 [pid 5062] <... close resumed>) = 0 ./strace-static-x86_64: Process 5296 attached [pid 5296] chdir("./4") = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5296] setpgid(0, 0) = 0 [pid 5296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5296] write(3, "1000", 4 [pid 5062] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5297 [pid 5296] <... write resumed>) = 4 [pid 5296] close(3) = 0 [pid 5296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5296] memfd_create("syzkaller", 0) = 3 [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 ./strace-static-x86_64: Process 5297 attached [pid 5297] chdir("./4" [pid 5065] <... umount2 resumed>) = 0 [pid 5297] <... chdir resumed>) = 0 [pid 5297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5297] setpgid(0, 0) = 0 [pid 5297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5297] <... openat resumed>) = 3 [pid 5297] write(3, "1000", 4) = 4 [pid 5065] lstat("./3/file0", [pid 5297] close(3) = 0 [pid 5297] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5297] memfd_create("syzkaller", 0) = 3 [pid 5297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./3/file0") = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./3") = 0 [pid 5065] mkdir("./4", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5298 ./strace-static-x86_64: Process 5298 attached [pid 5298] chdir("./4") = 0 [pid 5298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5298] setpgid(0, 0) = 0 [pid 5298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5298] write(3, "1000", 4) = 4 [pid 5298] close(3) = 0 [pid 5298] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5298] memfd_create("syzkaller", 0) = 3 [pid 5298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5295] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5296] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5294] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5297] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5293] <... write resumed>) = 16777216 [pid 5293] munmap(0x7fd745acd000, 16777216) = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5298] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5293] <... ioctl resumed>) = 0 [pid 5293] close(3) = 0 [pid 5293] mkdir("./file0", 0777) = 0 [ 60.627955][ T5293] loop5: detected capacity change from 0 to 32768 [pid 5293] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5295] <... write resumed>) = 16777216 [pid 5295] munmap(0x7fd745acd000, 16777216) = 0 [pid 5295] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5295] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5295] close(3) = 0 [ 60.714812][ T5293] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 60.746980][ T5293] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5295] mkdir("./file0", 0777) = 0 [pid 5295] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5297] <... write resumed>) = 16777216 [pid 5297] munmap(0x7fd745acd000, 16777216) = 0 [pid 5297] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5297] ioctl(4, LOOP_SET_FD, 3) = 0 [ 60.778477][ T5295] loop4: detected capacity change from 0 to 32768 [pid 5297] close(3) = 0 [pid 5297] mkdir("./file0", 0777) = 0 [pid 5297] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5294] <... write resumed>) = 16777216 [pid 5294] munmap(0x7fd745acd000, 16777216) = 0 [ 60.841631][ T5297] loop0: detected capacity change from 0 to 32768 [ 60.859813][ T5293] XFS (loop5): Ending clean mount [ 60.879879][ T5293] XFS (loop5): Quotacheck needed: Please wait. [pid 5294] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5293] <... mount resumed>) = 0 [pid 5294] ioctl(4, LOOP_SET_FD, 3 [pid 5293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5293] chdir("./file0") = 0 [pid 5293] ioctl(4, LOOP_CLR_FD) = 0 [pid 5293] close(4) = 0 [pid 5293] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5293] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5296] <... write resumed>) = 16777216 [pid 5293] <... openat resumed>) = 5 [pid 5293] sendfile(5, 4, [96] [pid 5294] <... ioctl resumed>) = 0 [pid 5294] close(3) = 0 [pid 5294] mkdir("./file0", 0777) = 0 [ 60.894624][ T5295] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 60.913249][ T5293] XFS (loop5): Quotacheck: Done. [ 60.919571][ T5295] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 60.934634][ T5294] loop2: detected capacity change from 0 to 32768 [pid 5294] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5296] munmap(0x7fd745acd000, 16777216 [pid 5298] <... write resumed>) = 16777216 [pid 5298] munmap(0x7fd745acd000, 16777216 [pid 5293] <... sendfile resumed> => [764], 2160) = 668 [pid 5293] exit_group(0) = ? [pid 5293] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=28 /* 0.28 s */} --- [pid 5296] <... munmap resumed>) = 0 [pid 5067] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, [pid 5296] <... openat resumed>) = 4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5296] ioctl(4, LOOP_SET_FD, 3 [pid 5067] getdents64(3, [pid 5298] <... munmap resumed>) = 0 [pid 5298] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5298] ioctl(4, LOOP_SET_FD, 3 [pid 5296] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./4/binderfs") = 0 [ 60.963512][ T5297] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 60.980377][ T5293] syz-executor824 (5293): drop_caches: 2 [ 60.984668][ T5297] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 60.988538][ T5293] syz-executor824 (5293): drop_caches: 2 [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5298] <... ioctl resumed>) = 0 [pid 5296] close(3 [pid 5298] close(3 [pid 5296] <... close resumed>) = 0 [pid 5298] <... close resumed>) = 0 [pid 5296] mkdir("./file0", 0777 [pid 5298] mkdir("./file0", 0777 [pid 5296] <... mkdir resumed>) = 0 [pid 5298] <... mkdir resumed>) = 0 [pid 5296] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [ 61.029788][ T5296] loop1: detected capacity change from 0 to 32768 [ 61.033525][ T5298] loop3: detected capacity change from 0 to 32768 [ 61.037510][ T5294] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 61.052035][ T5294] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 61.053514][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5298] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5295] <... mount resumed>) = 0 [pid 5295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5295] chdir("./file0") = 0 [pid 5295] ioctl(4, LOOP_CLR_FD) = 0 [pid 5295] close(4) = 0 [ 61.080810][ T5297] XFS (loop0): Ending clean mount [ 61.094232][ T5295] XFS (loop4): Ending clean mount [ 61.101501][ T5295] XFS (loop4): Quotacheck needed: Please wait. [ 61.106455][ T5297] XFS (loop0): Quotacheck needed: Please wait. [ 61.116441][ T5296] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 61.119360][ T5295] XFS (loop4): Quotacheck: Done. [pid 5297] <... mount resumed>) = 0 [pid 5295] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5295] <... openat resumed>) = 4 [pid 5297] <... openat resumed>) = 3 [pid 5297] chdir("./file0" [pid 5295] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5297] <... chdir resumed>) = 0 [pid 5297] ioctl(4, LOOP_CLR_FD [pid 5295] <... openat resumed>) = 5 [pid 5297] <... ioctl resumed>) = 0 [pid 5295] sendfile(5, 4, [96] [pid 5297] close(4) = 0 [pid 5297] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5297] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 61.127041][ T5296] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 61.140237][ T5298] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 61.154748][ T5297] XFS (loop0): Quotacheck: Done. [ 61.159702][ T5298] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 61.171929][ T5294] XFS (loop2): Ending clean mount [pid 5297] sendfile(5, 4, [96] [pid 5294] <... mount resumed>) = 0 [pid 5294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5297] <... sendfile resumed> => [795], 2160) = 699 [pid 5294] chdir("./file0") = 0 [pid 5294] ioctl(4, LOOP_CLR_FD) = 0 [ 61.213564][ T5295] syz-executor824 (5295): drop_caches: 2 [ 61.213646][ T5294] XFS (loop2): Quotacheck needed: Please wait. [ 61.216175][ T5297] syz-executor824 (5297): drop_caches: 2 [pid 5294] close(4) = 0 [pid 5294] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5294] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5297] exit_group(0) = ? [pid 5294] <... openat resumed>) = 5 [pid 5294] sendfile(5, 4, [96] [pid 5295] <... sendfile resumed> => [826], 2160) = 730 [pid 5297] +++ exited with 0 +++ [pid 5295] exit_group(0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5297, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5295] <... exit_group resumed>) = ? [pid 5062] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, [pid 5295] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 5062] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 61.270395][ T5294] XFS (loop2): Quotacheck: Done. [ 61.270456][ T5297] syz-executor824 (5297): drop_caches: 2 [ 61.278342][ T5295] syz-executor824 (5295): drop_caches: 2 [ 61.307113][ T5296] XFS (loop1): Ending clean mount [ 61.307238][ T5298] XFS (loop3): Ending clean mount [pid 5062] lstat("./4/binderfs", [pid 5066] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5296] <... mount resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./4/binderfs" [pid 5296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5296] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5062] <... unlink resumed>) = 0 [pid 5296] chdir("./file0" [pid 5066] fstat(3, [pid 5062] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] <... chdir resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 61.313952][ T5296] XFS (loop1): Quotacheck needed: Please wait. [pid 5296] ioctl(4, LOOP_CLR_FD [pid 5066] getdents64(3, [pid 5294] <... sendfile resumed> => [795], 2160) = 699 [pid 5294] exit_group(0) = ? [pid 5294] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5294, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5296] <... ioctl resumed>) = 0 [pid 5296] close(4 [pid 5066] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5296] <... close resumed>) = 0 [pid 5066] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5064] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5296] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] lstat("./4/binderfs", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5296] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5296] <... openat resumed>) = 5 [pid 5066] unlink("./4/binderfs" [pid 5064] <... openat resumed>) = 3 [pid 5296] sendfile(5, 4, [96] [pid 5066] <... unlink resumed>) = 0 [pid 5064] fstat(3, [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5298] <... mount resumed>) = 0 [pid 5064] unlink("./4/binderfs") = 0 [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 61.356118][ T5296] XFS (loop1): Quotacheck: Done. [ 61.357099][ T5294] syz-executor824 (5294): drop_caches: 2 [ 61.361437][ T5298] XFS (loop3): Quotacheck needed: Please wait. [ 61.371403][ T5294] syz-executor824 (5294): drop_caches: 2 [ 61.385972][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5298] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./4/file0") = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./4") = 0 [pid 5067] mkdir("./5", 0777 [pid 5298] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5347 ./strace-static-x86_64: Process 5347 attached [pid 5347] chdir("./5") = 0 [pid 5347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5298] chdir("./file0") = 0 [pid 5298] ioctl(4, LOOP_CLR_FD) = 0 [pid 5347] setpgid(0, 0) = 0 [pid 5347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5298] close(4) = 0 [pid 5347] <... openat resumed>) = 3 [pid 5298] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5347] write(3, "1000", 4) = 4 [pid 5298] <... openat resumed>) = 4 [pid 5347] close(3 [pid 5298] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5347] <... close resumed>) = 0 [pid 5347] symlink("/dev/binderfs", "./binderfs" [pid 5298] <... openat resumed>) = 5 [pid 5347] <... symlink resumed>) = 0 [pid 5347] memfd_create("syzkaller", 0 [pid 5298] sendfile(5, 4, [96] [pid 5296] <... sendfile resumed> => [795], 2160) = 699 [pid 5347] <... memfd_create resumed>) = 3 [pid 5347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5296] exit_group(0) = ? [pid 5296] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5296, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [ 61.413908][ T5298] XFS (loop3): Quotacheck: Done. [ 61.416078][ T5296] syz-executor824 (5296): drop_caches: 2 [ 61.427336][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 61.438133][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 61.446895][ T5296] syz-executor824 (5296): drop_caches: 2 [pid 5063] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./4/binderfs") = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5298] <... sendfile resumed> => [764], 2160) = 668 [pid 5298] exit_group(0) = ? [pid 5298] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5298, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5065] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./4/binderfs") = 0 [ 61.485749][ T5298] syz-executor824 (5298): drop_caches: 2 [ 61.492552][ T5298] syz-executor824 (5298): drop_caches: 2 [ 61.522733][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 61.606326][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./4/file0") = 0 [pid 5062] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./4") = 0 [pid 5062] mkdir("./5", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5348 ./strace-static-x86_64: Process 5348 attached [pid 5348] chdir("./5") = 0 [pid 5348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5348] setpgid(0, 0) = 0 [pid 5348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5348] write(3, "1000", 4) = 4 [pid 5348] close(3) = 0 [pid 5348] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5348] memfd_create("syzkaller", 0) = 3 [pid 5348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5347] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(4, [pid 5066] lstat("./4/file0", [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./4/file0", [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5066] fstat(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5064] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(4 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5064] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5064] fstat(4, [pid 5063] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] rmdir("./4/file0" [pid 5066] close(4 [pid 5064] getdents64(4, [pid 5066] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] <... rmdir resumed>) = 0 [pid 5066] rmdir("./4/file0" [pid 5064] getdents64(4, [pid 5063] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5064] close(4 [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] close(3 [pid 5066] close(3 [pid 5064] rmdir("./4/file0" [pid 5066] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5066] rmdir("./4" [pid 5064] getdents64(3, [pid 5063] rmdir("./4" [pid 5066] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] mkdir("./5", 0777 [pid 5064] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] rmdir("./4" [pid 5063] mkdir("./5", 0777 [pid 5066] <... openat resumed>) = 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] mkdir("./5", 0777 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5066] close(3 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5349 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5350 ./strace-static-x86_64: Process 5350 attached [pid 5350] chdir("./5" [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5350] <... chdir resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5349 attached [pid 5350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5349] chdir("./5" [pid 5063] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5351 [pid 5350] setpgid(0, 0 [pid 5349] <... chdir resumed>) = 0 [pid 5350] <... setpgid resumed>) = 0 [pid 5349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5349] <... prctl resumed>) = 0 [pid 5350] <... openat resumed>) = 3 [pid 5349] setpgid(0, 0 [pid 5350] write(3, "1000", 4 [pid 5349] <... setpgid resumed>) = 0 [pid 5350] <... write resumed>) = 4 [pid 5349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5350] close(3 [pid 5349] <... openat resumed>) = 3 [pid 5350] <... close resumed>) = 0 [pid 5349] write(3, "1000", 4 [pid 5350] symlink("/dev/binderfs", "./binderfs" [pid 5349] <... write resumed>) = 4 [pid 5350] <... symlink resumed>) = 0 [pid 5349] close(3./strace-static-x86_64: Process 5351 attached [pid 5350] memfd_create("syzkaller", 0 [pid 5349] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5350] <... memfd_create resumed>) = 3 [pid 5349] symlink("/dev/binderfs", "./binderfs" [pid 5351] chdir("./5" [pid 5350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5349] <... symlink resumed>) = 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5350] <... mmap resumed>) = 0x7fd745acd000 [pid 5349] memfd_create("syzkaller", 0 [pid 5351] <... chdir resumed>) = 0 [pid 5349] <... memfd_create resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] lstat("./4/file0", [pid 5351] <... prctl resumed>) = 0 [pid 5349] <... mmap resumed>) = 0x7fd745acd000 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5351] setpgid(0, 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] <... setpgid resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5351] <... openat resumed>) = 3 [pid 5351] write(3, "1000", 4 [pid 5065] <... openat resumed>) = 4 [pid 5351] <... write resumed>) = 4 [pid 5065] fstat(4, [pid 5351] close(3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5351] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5351] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5351] <... symlink resumed>) = 0 [pid 5065] getdents64(4, [pid 5351] memfd_create("syzkaller", 0 [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5351] <... memfd_create resumed>) = 3 [pid 5065] close(4 [pid 5351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... close resumed>) = 0 [pid 5351] <... mmap resumed>) = 0x7fd745acd000 [pid 5065] rmdir("./4/file0") = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./4") = 0 [pid 5065] mkdir("./5", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5352 ./strace-static-x86_64: Process 5352 attached [pid 5352] chdir("./5") = 0 [pid 5352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5352] setpgid(0, 0) = 0 [pid 5352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5352] write(3, "1000", 4) = 4 [pid 5352] close(3) = 0 [pid 5352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5352] memfd_create("syzkaller", 0) = 3 [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5348] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5347] <... write resumed>) = 16777216 [pid 5347] munmap(0x7fd745acd000, 16777216 [pid 5349] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5347] <... munmap resumed>) = 0 [pid 5350] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5351] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5347] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5347] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5347] close(3) = 0 [pid 5347] mkdir("./file0", 0777) = 0 [pid 5347] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [ 62.396456][ T5347] loop5: detected capacity change from 0 to 32768 [pid 5352] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5348] <... write resumed>) = 16777216 [pid 5348] munmap(0x7fd745acd000, 16777216) = 0 [pid 5348] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 62.475567][ T5347] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 62.497752][ T5347] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5348] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5350] <... write resumed>) = 16777216 [pid 5350] munmap(0x7fd745acd000, 16777216 [pid 5348] close(3) = 0 [pid 5348] mkdir("./file0", 0777 [pid 5350] <... munmap resumed>) = 0 [pid 5348] <... mkdir resumed>) = 0 [pid 5348] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5350] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 62.584933][ T5348] loop0: detected capacity change from 0 to 32768 [pid 5350] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5350] close(3) = 0 [pid 5350] mkdir("./file0", 0777) = 0 [ 62.625819][ T5347] XFS (loop5): Ending clean mount [pid 5350] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5351] <... write resumed>) = 16777216 [pid 5347] <... mount resumed>) = 0 [ 62.649192][ T5350] loop2: detected capacity change from 0 to 32768 [ 62.649562][ T5347] XFS (loop5): Quotacheck needed: Please wait. [pid 5351] munmap(0x7fd745acd000, 16777216 [pid 5347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5351] <... munmap resumed>) = 0 [pid 5347] <... openat resumed>) = 3 [pid 5347] chdir("./file0") = 0 [pid 5347] ioctl(4, LOOP_CLR_FD) = 0 [pid 5347] close(4) = 0 [pid 5347] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5347] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5347] sendfile(5, 4, [96] [pid 5351] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 62.701331][ T5347] XFS (loop5): Quotacheck: Done. [ 62.709438][ T5348] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 62.718262][ T5350] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 62.725350][ T5348] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 62.735619][ T5350] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5351] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5349] <... write resumed>) = 16777216 [pid 5347] <... sendfile resumed> => [733], 2160) = 637 [pid 5351] close(3 [pid 5349] munmap(0x7fd745acd000, 16777216 [pid 5347] exit_group(0 [pid 5351] <... close resumed>) = 0 [pid 5349] <... munmap resumed>) = 0 [pid 5347] <... exit_group resumed>) = ? [pid 5351] mkdir("./file0", 0777 [pid 5347] +++ exited with 0 +++ [pid 5351] <... mkdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5347, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5351] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5349] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5349] ioctl(4, LOOP_SET_FD, 3 [pid 5067] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [ 62.779301][ T5351] loop1: detected capacity change from 0 to 32768 [ 62.787762][ T5347] syz-executor824 (5347): drop_caches: 2 [ 62.794109][ T5347] syz-executor824 (5347): drop_caches: 2 [pid 5067] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./5/binderfs") = 0 [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5348] <... mount resumed>) = 0 [pid 5348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5348] chdir("./file0") = 0 [pid 5348] ioctl(4, LOOP_CLR_FD) = 0 [pid 5348] close(4 [pid 5352] <... write resumed>) = 16777216 [pid 5348] <... close resumed>) = 0 [pid 5349] <... ioctl resumed>) = 0 [pid 5348] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5352] munmap(0x7fd745acd000, 16777216 [pid 5349] close(3 [pid 5348] <... openat resumed>) = 4 [ 62.820679][ T5348] XFS (loop0): Ending clean mount [ 62.829879][ T5349] loop4: detected capacity change from 0 to 32768 [ 62.846143][ T5348] XFS (loop0): Quotacheck needed: Please wait. [ 62.859192][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5348] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5348] sendfile(5, 4, [96] [pid 5352] <... munmap resumed>) = 0 [pid 5349] <... close resumed>) = 0 [pid 5349] mkdir("./file0", 0777) = 0 [pid 5349] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5352] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5348] <... sendfile resumed> => [795], 2160) = 699 [pid 5348] exit_group(0) = ? [pid 5348] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5348, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [pid 5062] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5352] <... openat resumed>) = 4 [pid 5352] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, [pid 5352] <... ioctl resumed>) = 0 [pid 5352] close(3) = 0 [pid 5352] mkdir("./file0", 0777 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 62.864550][ T5348] XFS (loop0): Quotacheck: Done. [ 62.876715][ T5350] XFS (loop2): Ending clean mount [ 62.894598][ T5350] XFS (loop2): Quotacheck needed: Please wait. [ 62.905547][ T5351] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 62.909926][ T5348] syz-executor824 (5348): drop_caches: 2 [pid 5062] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./5/binderfs") = 0 [pid 5062] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... mkdir resumed>) = 0 [pid 5352] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5350] <... mount resumed>) = 0 [pid 5350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5350] chdir("./file0") = 0 [pid 5350] ioctl(4, LOOP_CLR_FD) = 0 [pid 5350] close(4) = 0 [pid 5350] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5350] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 62.924452][ T5348] syz-executor824 (5348): drop_caches: 2 [ 62.926914][ T5351] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 62.941400][ T5352] loop3: detected capacity change from 0 to 32768 [ 62.956587][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 62.969125][ T5350] XFS (loop2): Quotacheck: Done. [pid 5350] sendfile(5, 4, [96] => [826], 2160) = 730 [pid 5351] <... mount resumed>) = 0 [pid 5351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5351] chdir("./file0") = 0 [pid 5351] ioctl(4, LOOP_CLR_FD) = 0 [ 62.990430][ T5350] syz-executor824 (5350): drop_caches: 2 [ 63.005878][ T5349] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 63.006866][ T5351] XFS (loop1): Ending clean mount [ 63.026229][ T5350] syz-executor824 (5350): drop_caches: 2 [ 63.032294][ T5351] XFS (loop1): Quotacheck needed: Please wait. [pid 5351] close(4 [pid 5350] exit_group(0) = ? [pid 5350] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5350, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=20 /* 0.20 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./5/binderfs") = 0 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [ 63.051902][ T5349] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 63.060262][ T5351] XFS (loop1): Quotacheck: Done. [ 63.069924][ T5352] XFS (loop3): DAX unsupported by block device. Turning off DAX. [pid 5351] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5067] lstat("./5/file0", [pid 5351] <... openat resumed>) = 5 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5351] sendfile(5, 4, [96] [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./5/file0") = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./5") = 0 [pid 5067] mkdir("./6", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5349] <... mount resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5349] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5349] chdir("./file0") = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5400 [pid 5349] ioctl(4, LOOP_CLR_FD) = 0 [pid 5349] close(4) = 0 [pid 5349] openat(AT_FDCWD, "/proc/partitions", O_RDONLY./strace-static-x86_64: Process 5400 attached ) = 4 [pid 5400] chdir("./6" [pid 5349] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5400] <... chdir resumed>) = 0 [pid 5349] <... openat resumed>) = 5 [ 63.119714][ T5349] XFS (loop4): Ending clean mount [ 63.126036][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 63.135023][ T5352] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 63.137009][ T5349] XFS (loop4): Quotacheck needed: Please wait. [ 63.158765][ T5351] syz-executor824 (5351): drop_caches: 2 [pid 5400] prctl(PR_SET_PDEATHSIG, SIGKILL [ 63.187247][ T5349] XFS (loop4): Quotacheck: Done. [pid 5349] sendfile(5, 4, [96] [pid 5400] <... prctl resumed>) = 0 [pid 5400] setpgid(0, 0) = 0 [pid 5400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5400] write(3, "1000", 4 [pid 5349] <... sendfile resumed> => [764], 2160) = 668 [pid 5400] <... write resumed>) = 4 [pid 5349] exit_group(0 [pid 5400] close(3 [pid 5349] <... exit_group resumed>) = ? [pid 5400] <... close resumed>) = 0 [pid 5400] symlink("/dev/binderfs", "./binderfs" [pid 5349] +++ exited with 0 +++ [pid 5400] <... symlink resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5349, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5400] memfd_create("syzkaller", 0) = 3 [pid 5066] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5400] <... mmap resumed>) = 0x7fd745acd000 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./5/binderfs", [pid 5351] <... sendfile resumed> => [764], 2160) = 668 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5351] exit_group(0 [ 63.218938][ T5351] syz-executor824 (5351): drop_caches: 2 [ 63.219516][ T5349] syz-executor824 (5349): drop_caches: 2 [ 63.251192][ T5349] syz-executor824 (5349): drop_caches: 2 [pid 5066] unlink("./5/binderfs" [pid 5062] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] <... exit_group resumed>) = ? [pid 5066] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] +++ exited with 0 +++ [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 63.268523][ T5352] XFS (loop3): Ending clean mount [pid 5062] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5062] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] <... openat resumed>) = 4 [pid 5063] fstat(3, [pid 5062] fstat(4, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5062] getdents64(4, [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] lstat("./5/binderfs", [pid 5062] close(4 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... close resumed>) = 0 [ 63.290777][ T5352] XFS (loop3): Quotacheck needed: Please wait. [pid 5063] unlink("./5/binderfs" [pid 5352] <... mount resumed>) = 0 [pid 5062] rmdir("./5/file0" [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5352] chdir("./file0" [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5352] <... chdir resumed>) = 0 [pid 5062] close(3 [pid 5352] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] <... close resumed>) = 0 [pid 5352] close(4 [pid 5062] rmdir("./5") = 0 [pid 5062] mkdir("./6", 0777) = 0 [pid 5352] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5352] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5062] <... openat resumed>) = 3 [pid 5352] <... openat resumed>) = 4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5352] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] close(3 [pid 5352] <... openat resumed>) = 5 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5352] sendfile(5, 4, [96] [pid 5062] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5402 ./strace-static-x86_64: Process 5402 attached [pid 5402] chdir("./6") = 0 [pid 5402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5402] setpgid(0, 0) = 0 [pid 5402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5402] write(3, "1000", 4) = 4 [pid 5402] close(3) = 0 [pid 5402] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5402] memfd_create("syzkaller", 0) = 3 [pid 5402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [ 63.336196][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 63.361261][ T5352] XFS (loop3): Quotacheck: Done. [ 63.375025][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 63.402910][ T5352] syz-executor824 (5352): drop_caches: 2 [pid 5352] <... sendfile resumed> => [733], 2160) = 637 [pid 5352] exit_group(0) = ? [pid 5352] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5352, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} --- [pid 5065] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = 0 [pid 5065] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./5/binderfs") = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 63.448391][ T5352] syz-executor824 (5352): drop_caches: 2 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./5/file0") = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./5") = 0 [pid 5064] mkdir("./6", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5403 ./strace-static-x86_64: Process 5403 attached [pid 5403] chdir("./6") = 0 [pid 5403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5403] setpgid(0, 0) = 0 [pid 5403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5403] write(3, "1000", 4) = 4 [pid 5403] close(3 [pid 5400] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5403] <... close resumed>) = 0 [pid 5403] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5403] memfd_create("syzkaller", 0) = 3 [pid 5403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [ 63.573095][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./5/file0", [pid 5063] <... umount2 resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./5/file0", [pid 5066] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] fstat(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(4, [pid 5063] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] fstat(4, [pid 5066] getdents64(4, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5066] close(4 [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./5/file0" [pid 5063] getdents64(4, [pid 5066] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5063] close(4 [pid 5066] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5063] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5063] rmdir("./5/file0" [pid 5066] rmdir("./5" [pid 5063] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./6", 0777 [pid 5063] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] lstat("./5/file0", [pid 5063] rmdir("./5" [pid 5066] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] mkdir("./6", 0777 [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, [pid 5063] <... mkdir resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5404 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] getdents64(4, [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5065] close(4 [pid 5063] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] rmdir("./5/file0") = 0 [pid 5065] getdents64(3, [pid 5063] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5405 [pid 5065] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5404 attached [pid 5065] close(3 [pid 5404] chdir("./6" [pid 5065] <... close resumed>) = 0 [pid 5404] <... chdir resumed>) = 0 [pid 5065] rmdir("./5" [pid 5404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... rmdir resumed>) = 0 [pid 5404] <... prctl resumed>) = 0 [pid 5404] setpgid(0, 0 [pid 5065] mkdir("./6", 0777 [pid 5404] <... setpgid resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5405 attached [pid 5405] chdir("./6") = 0 [pid 5405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5405] <... prctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5405] setpgid(0, 0 [pid 5404] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5404] write(3, "1000", 4 [pid 5405] <... setpgid resumed>) = 0 [pid 5404] <... write resumed>) = 4 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5404] close(3 [pid 5065] close(3 [pid 5405] <... openat resumed>) = 3 [pid 5404] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5405] write(3, "1000", 4 [pid 5404] symlink("/dev/binderfs", "./binderfs" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5405] <... write resumed>) = 4 [pid 5405] close(3 [pid 5404] <... symlink resumed>) = 0 [pid 5405] <... close resumed>) = 0 ./strace-static-x86_64: Process 5406 attached [pid 5405] symlink("/dev/binderfs", "./binderfs" [pid 5404] memfd_create("syzkaller", 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5406 [pid 5405] <... symlink resumed>) = 0 [pid 5404] <... memfd_create resumed>) = 3 [pid 5406] chdir("./6" [pid 5405] memfd_create("syzkaller", 0 [pid 5404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5406] <... chdir resumed>) = 0 [pid 5406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5405] <... memfd_create resumed>) = 3 [pid 5404] <... mmap resumed>) = 0x7fd745acd000 [pid 5406] <... prctl resumed>) = 0 [pid 5405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5406] setpgid(0, 0) = 0 [pid 5406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5406] write(3, "1000", 4) = 4 [pid 5406] close(3) = 0 [pid 5406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5402] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5406] memfd_create("syzkaller", 0) = 3 [pid 5406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5403] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5400] <... write resumed>) = 16777216 [pid 5400] munmap(0x7fd745acd000, 16777216) = 0 [pid 5400] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5400] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5400] close(3) = 0 [pid 5400] mkdir("./file0", 0777) = 0 [ 64.165138][ T5400] loop5: detected capacity change from 0 to 32768 [pid 5400] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5404] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5406] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5405] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5403] <... write resumed>) = 16777216 [pid 5403] munmap(0x7fd745acd000, 16777216 [pid 5402] <... write resumed>) = 16777216 [ 64.247461][ T5400] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 64.267149][ T5400] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5403] <... munmap resumed>) = 0 [pid 5402] munmap(0x7fd745acd000, 16777216) = 0 [pid 5403] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5403] ioctl(4, LOOP_SET_FD, 3 [pid 5402] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5402] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5403] <... ioctl resumed>) = 0 [pid 5400] <... mount resumed>) = 0 [pid 5403] close(3) = 0 [pid 5403] mkdir("./file0", 0777) = 0 [pid 5403] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5402] close(3) = 0 [pid 5402] mkdir("./file0", 0777) = 0 [pid 5402] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [ 64.372281][ T5400] XFS (loop5): Ending clean mount [ 64.385820][ T5400] XFS (loop5): Quotacheck needed: Please wait. [ 64.405493][ T5403] loop2: detected capacity change from 0 to 32768 [ 64.415775][ T5402] loop0: detected capacity change from 0 to 32768 [pid 5400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5400] chdir("./file0") = 0 [pid 5400] ioctl(4, LOOP_CLR_FD) = 0 [pid 5400] close(4 [pid 5404] <... write resumed>) = 16777216 [pid 5400] <... close resumed>) = 0 [pid 5404] munmap(0x7fd745acd000, 16777216 [ 64.447313][ T5400] XFS (loop5): Quotacheck: Done. [pid 5400] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5400] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5400] sendfile(5, 4, [96] [pid 5404] <... munmap resumed>) = 0 [pid 5406] <... write resumed>) = 16777216 [pid 5404] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5406] munmap(0x7fd745acd000, 16777216 [pid 5404] <... openat resumed>) = 4 [pid 5405] <... write resumed>) = 16777216 [pid 5404] ioctl(4, LOOP_SET_FD, 3 [pid 5405] munmap(0x7fd745acd000, 16777216) = 0 [pid 5405] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5405] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5405] close(3) = 0 [pid 5405] mkdir("./file0", 0777) = 0 [pid 5405] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5400] <... sendfile resumed> => [733], 2160) = 637 [pid 5400] exit_group(0) = ? [pid 5400] +++ exited with 0 +++ [pid 5404] <... ioctl resumed>) = 0 [pid 5404] close(3) = 0 [pid 5404] mkdir("./file0", 0777) = 0 [pid 5404] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5406] <... munmap resumed>) = 0 [pid 5406] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5400, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5406] <... openat resumed>) = 4 [pid 5406] ioctl(4, LOOP_SET_FD, 3 [ 64.532827][ T5400] syz-executor824 (5400): drop_caches: 2 [ 64.546537][ T5403] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 64.555063][ T5400] syz-executor824 (5400): drop_caches: 2 [ 64.564921][ T5402] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 64.573016][ T5404] loop4: detected capacity change from 0 to 32768 [pid 5067] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5406] <... ioctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5406] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./6/binderfs") = 0 [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5406] <... close resumed>) = 0 [pid 5406] mkdir("./file0", 0777) = 0 [ 64.578068][ T5405] loop1: detected capacity change from 0 to 32768 [ 64.593636][ T5403] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 64.602712][ T5402] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 64.607969][ T5406] loop3: detected capacity change from 0 to 32768 [ 64.623720][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 64.634196][ T5404] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 64.640349][ T5405] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 64.654837][ T5405] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 64.662454][ T5402] XFS (loop0): Ending clean mount [ 64.669794][ T5404] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 64.672806][ T5402] XFS (loop0): Quotacheck needed: Please wait. [ 64.693463][ T5403] XFS (loop2): Ending clean mount [ 64.694901][ T5406] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 64.701741][ T5403] XFS (loop2): Quotacheck needed: Please wait. [pid 5406] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5402] <... mount resumed>) = 0 [pid 5402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5402] chdir("./file0") = 0 [pid 5402] ioctl(4, LOOP_CLR_FD) = 0 [pid 5402] close(4) = 0 [pid 5402] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5402] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5402] sendfile(5, 4, [96] [pid 5403] <... mount resumed>) = 0 [pid 5403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5403] chdir("./file0") = 0 [pid 5403] ioctl(4, LOOP_CLR_FD) = 0 [pid 5403] close(4) = 0 [pid 5403] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5403] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 64.738677][ T5402] XFS (loop0): Quotacheck: Done. [ 64.740631][ T5404] XFS (loop4): Ending clean mount [ 64.750649][ T5404] XFS (loop4): Quotacheck needed: Please wait. [ 64.757512][ T5406] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 64.772789][ T5403] XFS (loop2): Quotacheck: Done. [ 64.782206][ T5402] syz-executor824 (5402): drop_caches: 2 [pid 5404] <... mount resumed>) = 0 [pid 5403] sendfile(5, 4, [96] [pid 5402] <... sendfile resumed> => [795], 2160) = 699 [pid 5067] <... umount2 resumed>) = 0 [pid 5404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5402] exit_group(0 [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] chdir("./file0" [pid 5402] <... exit_group resumed>) = ? [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5404] <... chdir resumed>) = 0 [pid 5404] ioctl(4, LOOP_CLR_FD) = 0 [pid 5404] close(4 [pid 5402] +++ exited with 0 +++ [pid 5067] lstat("./6/file0", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5402, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=23 /* 0.23 s */} --- [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5404] <... close resumed>) = 0 [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5062] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5403] <... sendfile resumed> => [795], 2160) = 699 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5404] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5403] exit_group(0 [pid 5067] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5404] <... openat resumed>) = 5 [pid 5403] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 5404] sendfile(5, 4, [96] [pid 5403] +++ exited with 0 +++ [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5403, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} --- [pid 5062] fstat(3, [pid 5067] getdents64(4, [ 64.799259][ T5402] syz-executor824 (5402): drop_caches: 2 [ 64.818781][ T5405] XFS (loop1): Ending clean mount [ 64.826345][ T5404] XFS (loop4): Quotacheck: Done. [ 64.834582][ T5403] syz-executor824 (5403): drop_caches: 2 [ 64.840423][ T5403] syz-executor824 (5403): drop_caches: 2 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5067] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5067] close(4 [pid 5064] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./6/file0" [pid 5064] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5067] getdents64(3, [pid 5064] fstat(3, [pid 5067] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] close(3 [pid 5064] getdents64(3, [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] rmdir("./6" [pid 5064] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./7", 0777 [pid 5064] lstat("./6/binderfs", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] unlink("./6/binderfs" [pid 5062] lstat("./6/binderfs", [pid 5067] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./6/binderfs" [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5455 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5455 attached [pid 5455] chdir("./7") = 0 [pid 5455] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5455] setpgid(0, 0) = 0 [pid 5405] <... mount resumed>) = 0 [pid 5404] <... sendfile resumed> => [795], 2160) = 699 [pid 5405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5405] chdir("./file0") = 0 [pid 5405] ioctl(4, LOOP_CLR_FD) = 0 [pid 5405] close(4) = 0 [pid 5405] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5405] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 64.898157][ T5406] XFS (loop3): Ending clean mount [ 64.909284][ T5405] XFS (loop1): Quotacheck needed: Please wait. [ 64.914251][ T5406] XFS (loop3): Quotacheck needed: Please wait. [ 64.922169][ T5404] syz-executor824 (5404): drop_caches: 2 [ 64.943012][ T5405] XFS (loop1): Quotacheck: Done. [pid 5405] sendfile(5, 4, [96] [pid 5455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5406] <... mount resumed>) = 0 [pid 5404] exit_group(0 [pid 5455] <... openat resumed>) = 3 [pid 5406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5404] <... exit_group resumed>) = ? [pid 5455] write(3, "1000", 4 [pid 5406] <... openat resumed>) = 3 [pid 5404] +++ exited with 0 +++ [pid 5455] <... write resumed>) = 4 [pid 5406] chdir("./file0" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5404, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 5455] close(3 [pid 5406] <... chdir resumed>) = 0 [pid 5066] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5455] <... close resumed>) = 0 [pid 5406] ioctl(4, LOOP_CLR_FD [pid 5455] symlink("/dev/binderfs", "./binderfs" [pid 5406] <... ioctl resumed>) = 0 [pid 5455] <... symlink resumed>) = 0 [pid 5406] close(4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5455] memfd_create("syzkaller", 0 [pid 5406] <... close resumed>) = 0 [pid 5455] <... memfd_create resumed>) = 3 [pid 5406] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5405] <... sendfile resumed> => [795], 2160) = 699 [pid 5066] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5406] <... openat resumed>) = 4 [pid 5405] exit_group(0 [pid 5455] <... mmap resumed>) = 0x7fd745acd000 [pid 5406] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5405] <... exit_group resumed>) = ? [pid 5066] <... openat resumed>) = 3 [pid 5406] <... openat resumed>) = 5 [pid 5405] +++ exited with 0 +++ [pid 5066] fstat(3, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5405, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=21 /* 0.21 s */} --- [ 64.958032][ T5404] syz-executor824 (5404): drop_caches: 2 [ 64.958274][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 64.972749][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 64.985880][ T5406] XFS (loop3): Quotacheck: Done. [ 65.001964][ T5405] syz-executor824 (5405): drop_caches: 2 [pid 5406] sendfile(5, 4, [96] [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5063] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] lstat("./6/binderfs", [pid 5406] <... sendfile resumed> => [795], 2160) = 699 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5066] unlink("./6/binderfs" [ 65.016643][ T5405] syz-executor824 (5405): drop_caches: 2 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5063] getdents64(3, [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5406] exit_group(0) = ? [pid 5406] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5406, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5063] lstat("./6/binderfs", [pid 5065] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] unlink("./6/binderfs" [pid 5065] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./6/binderfs") = 0 [ 65.059297][ T5406] syz-executor824 (5406): drop_caches: 2 [ 65.078516][ T5406] syz-executor824 (5406): drop_caches: 2 [ 65.094186][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 65.108637][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 65.124827][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./6/file0") = 0 [pid 5062] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./6" [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./6/file0") = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5062] mkdir("./7", 0777 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./6" [pid 5062] <... mkdir resumed>) = 0 [pid 5455] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5064] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] mkdir("./7", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5456 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5457 ./strace-static-x86_64: Process 5456 attached [pid 5456] chdir("./7") = 0 [pid 5456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5456] setpgid(0, 0) = 0 [pid 5456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5456] write(3, "1000", 4) = 4 [pid 5456] close(3) = 0 [pid 5456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5456] memfd_create("syzkaller", 0) = 3 [pid 5456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 ./strace-static-x86_64: Process 5457 attached [pid 5457] chdir("./7") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5457] setpgid(0, 0) = 0 [pid 5457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5457] write(3, "1000", 4 [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5457] <... write resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5457] close(3 [pid 5065] lstat("./6/file0", [pid 5457] <... close resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5457] symlink("/dev/binderfs", "./binderfs" [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5457] <... symlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5457] memfd_create("syzkaller", 0 [pid 5065] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5457] <... memfd_create resumed>) = 3 [pid 5065] <... openat resumed>) = 4 [pid 5457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] fstat(4, [pid 5457] <... mmap resumed>) = 0x7fd745acd000 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = 0 [pid 5065] getdents64(4, [pid 5063] <... umount2 resumed>) = 0 [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(4 [pid 5066] lstat("./6/file0", [pid 5065] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] rmdir("./6/file0" [pid 5063] lstat("./6/file0", [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 4 [pid 5065] close(3 [pid 5066] fstat(4, [pid 5065] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] rmdir("./6" [pid 5063] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5065] mkdir("./7", 0777 [pid 5063] <... openat resumed>) = 4 [pid 5066] getdents64(4, [pid 5065] <... mkdir resumed>) = 0 [pid 5063] fstat(4, [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5066] close(4 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(4, [pid 5066] rmdir("./6/file0" [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5066] getdents64(3, [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5065] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5458 [pid 5063] close(4 [pid 5066] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5066] rmdir("./6" [pid 5063] rmdir("./6/file0" [pid 5066] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5066] mkdir("./7", 0777 [pid 5063] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5458 attached [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5458] chdir("./7" [pid 5066] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5458] <... chdir resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5458] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... close resumed>) = 0 [pid 5458] <... prctl resumed>) = 0 [pid 5066] close(3 [pid 5063] rmdir("./6" [pid 5458] setpgid(0, 0 [pid 5066] <... close resumed>) = 0 [pid 5458] <... setpgid resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] mkdir("./7", 0777 [pid 5458] <... openat resumed>) = 3 [pid 5458] write(3, "1000", 4 [pid 5063] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5459 attached [pid 5458] <... write resumed>) = 4 [pid 5066] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5459 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5458] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5459] chdir("./7" [pid 5458] <... close resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5459] <... chdir resumed>) = 0 [pid 5458] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5458] <... symlink resumed>) = 0 [pid 5459] <... prctl resumed>) = 0 [pid 5063] close(3 [pid 5459] setpgid(0, 0 [pid 5458] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5459] <... setpgid resumed>) = 0 [pid 5458] <... memfd_create resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5460 attached [pid 5459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5460] chdir("./7" [pid 5459] <... openat resumed>) = 3 [pid 5458] <... mmap resumed>) = 0x7fd745acd000 [pid 5460] <... chdir resumed>) = 0 [pid 5459] write(3, "1000", 4 [pid 5063] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5460 [pid 5460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5459] <... write resumed>) = 4 [pid 5460] <... prctl resumed>) = 0 [pid 5459] close(3 [pid 5460] setpgid(0, 0 [pid 5459] <... close resumed>) = 0 [pid 5460] <... setpgid resumed>) = 0 [pid 5459] symlink("/dev/binderfs", "./binderfs" [pid 5460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5459] <... symlink resumed>) = 0 [pid 5460] <... openat resumed>) = 3 [pid 5459] memfd_create("syzkaller", 0 [pid 5460] write(3, "1000", 4 [pid 5459] <... memfd_create resumed>) = 3 [pid 5460] <... write resumed>) = 4 [pid 5459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5460] close(3 [pid 5459] <... mmap resumed>) = 0x7fd745acd000 [pid 5460] <... close resumed>) = 0 [pid 5460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5460] memfd_create("syzkaller", 0) = 3 [pid 5460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5456] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5457] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5455] <... write resumed>) = 16777216 [pid 5455] munmap(0x7fd745acd000, 16777216) = 0 [pid 5455] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5458] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5455] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5455] close(3) = 0 [pid 5455] mkdir("./file0", 0777) = 0 [pid 5460] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5455] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [ 65.980841][ T5455] loop5: detected capacity change from 0 to 32768 [pid 5459] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5456] <... write resumed>) = 16777216 [pid 5456] munmap(0x7fd745acd000, 16777216) = 0 [pid 5456] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 66.065829][ T5455] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 66.075833][ T5455] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5456] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5456] close(3) = 0 [pid 5456] mkdir("./file0", 0777) = 0 [ 66.150979][ T5456] loop2: detected capacity change from 0 to 32768 [ 66.181071][ T5455] XFS (loop5): Ending clean mount [ 66.190831][ T5455] XFS (loop5): Quotacheck needed: Please wait. [pid 5456] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5459] <... write resumed>) = 16777216 [pid 5459] munmap(0x7fd745acd000, 16777216) = 0 [pid 5459] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5459] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5455] <... mount resumed>) = 0 [pid 5455] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5455] chdir("./file0") = 0 [pid 5455] ioctl(4, LOOP_CLR_FD) = 0 [pid 5455] close(4) = 0 [pid 5455] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5455] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 66.229096][ T5456] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 66.254825][ T5455] XFS (loop5): Quotacheck: Done. [ 66.265020][ T5456] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5455] sendfile(5, 4, [96] [pid 5459] close(3) = 0 [pid 5458] <... write resumed>) = 16777216 [pid 5459] mkdir("./file0", 0777 [pid 5458] munmap(0x7fd745acd000, 16777216 [pid 5459] <... mkdir resumed>) = 0 [pid 5459] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5458] <... munmap resumed>) = 0 [pid 5458] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 66.287000][ T5459] loop4: detected capacity change from 0 to 32768 [pid 5458] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5460] <... write resumed>) = 16777216 [pid 5460] munmap(0x7fd745acd000, 16777216 [pid 5458] close(3 [pid 5455] <... sendfile resumed> => [733], 2160) = 637 [pid 5458] <... close resumed>) = 0 [pid 5460] <... munmap resumed>) = 0 [pid 5458] mkdir("./file0", 0777 [pid 5455] exit_group(0 [pid 5460] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5458] <... mkdir resumed>) = 0 [pid 5455] <... exit_group resumed>) = ? [pid 5458] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5455] +++ exited with 0 +++ [pid 5460] <... openat resumed>) = 4 [pid 5460] ioctl(4, LOOP_SET_FD, 3 [pid 5457] <... write resumed>) = 16777216 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5455, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=28 /* 0.28 s */} --- [pid 5067] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5460] <... ioctl resumed>) = 0 [pid 5457] munmap(0x7fd745acd000, 16777216) = 0 [pid 5457] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 66.332524][ T5455] syz-executor824 (5455): drop_caches: 2 [ 66.359688][ T5458] loop3: detected capacity change from 0 to 32768 [ 66.368847][ T5455] syz-executor824 (5455): drop_caches: 2 [pid 5457] ioctl(4, LOOP_SET_FD, 3 [pid 5460] close(3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] <... close resumed>) = 0 [pid 5457] <... ioctl resumed>) = 0 [pid 5457] close(3 [pid 5460] mkdir("./file0", 0777 [pid 5457] <... close resumed>) = 0 [pid 5457] mkdir("./file0", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5460] <... mkdir resumed>) = 0 [pid 5457] <... mkdir resumed>) = 0 [pid 5460] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5457] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5067] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./7/binderfs") = 0 [ 66.390639][ T5456] XFS (loop2): Ending clean mount [ 66.393593][ T5459] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 66.399066][ T5460] loop1: detected capacity change from 0 to 32768 [ 66.410672][ T5459] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 66.416916][ T5457] loop0: detected capacity change from 0 to 32768 [ 66.429971][ T5456] XFS (loop2): Quotacheck needed: Please wait. [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5456] <... mount resumed>) = 0 [pid 5456] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5456] chdir("./file0") = 0 [pid 5456] ioctl(4, LOOP_CLR_FD) = 0 [pid 5456] close(4) = 0 [pid 5456] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5456] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5456] sendfile(5, 4, [96] => [826], 2160) = 730 [pid 5456] exit_group(0) = ? [pid 5456] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5456, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [ 66.438972][ T5458] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 66.445765][ T5459] XFS (loop4): Ending clean mount [ 66.451483][ T5458] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 66.457289][ T5456] XFS (loop2): Quotacheck: Done. [ 66.467198][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5064] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./7/binderfs") = 0 [ 66.484084][ T5460] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 66.485417][ T5456] syz-executor824 (5456): drop_caches: 2 [ 66.498930][ T5456] syz-executor824 (5456): drop_caches: 2 [ 66.504757][ T5460] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 66.507661][ T5459] XFS (loop4): Quotacheck needed: Please wait. [ 66.516023][ T5457] XFS (loop0): DAX unsupported by block device. Turning off DAX. [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] <... mount resumed>) = 0 [pid 5459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5459] chdir("./file0") = 0 [pid 5459] ioctl(4, LOOP_CLR_FD) = 0 [pid 5459] close(4) = 0 [ 66.542293][ T5457] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 66.561335][ T5459] XFS (loop4): Quotacheck: Done. [ 66.561970][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 66.579104][ T5458] XFS (loop3): Ending clean mount [ 66.579564][ T5460] XFS (loop1): Ending clean mount [pid 5459] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5459] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5459] sendfile(5, 4, [96] => [795], 2160) = 699 [ 66.592532][ T5460] XFS (loop1): Quotacheck needed: Please wait. [ 66.616797][ T5458] XFS (loop3): Quotacheck needed: Please wait. [ 66.633595][ T5459] syz-executor824 (5459): drop_caches: 2 [pid 5460] <... mount resumed>) = 0 [pid 5458] <... mount resumed>) = 0 [pid 5460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5460] chdir("./file0" [pid 5459] exit_group(0 [pid 5460] <... chdir resumed>) = 0 [pid 5459] <... exit_group resumed>) = ? [pid 5460] ioctl(4, LOOP_CLR_FD) = 0 [pid 5459] +++ exited with 0 +++ [pid 5460] close(4 [pid 5458] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5459, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=24 /* 0.24 s */} --- [pid 5460] <... close resumed>) = 0 [pid 5458] <... openat resumed>) = 3 [pid 5460] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5458] chdir("./file0" [pid 5460] <... openat resumed>) = 4 [pid 5458] <... chdir resumed>) = 0 [pid 5066] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5458] ioctl(4, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5460] <... openat resumed>) = 5 [pid 5066] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5460] sendfile(5, 4, [96] [pid 5458] <... ioctl resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5458] close(4 [pid 5066] fstat(3, [pid 5458] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5458] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5066] getdents64(3, [pid 5458] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [ 66.655058][ T5459] syz-executor824 (5459): drop_caches: 2 [ 66.670774][ T5460] XFS (loop1): Quotacheck: Done. [ 66.674878][ T5458] XFS (loop3): Quotacheck: Done. [ 66.693910][ T5457] XFS (loop0): Ending clean mount [pid 5460] <... sendfile resumed> => [764], 2160) = 668 [pid 5458] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5067] <... umount2 resumed>) = 0 [pid 5066] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] exit_group(0 [pid 5458] <... openat resumed>) = 5 [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5460] <... exit_group resumed>) = ? [pid 5458] sendfile(5, 4, [96] [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./7/binderfs", [pid 5460] +++ exited with 0 +++ [pid 5067] lstat("./7/file0", [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] unlink("./7/binderfs" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5460, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=26 /* 0.26 s */} --- [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] fstat(4, [pid 5063] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./7/binderfs") = 0 [pid 5067] getdents64(4, [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [ 66.750010][ T5460] syz-executor824 (5460): drop_caches: 2 [ 66.758449][ T5460] syz-executor824 (5460): drop_caches: 2 [ 66.777157][ T5458] syz-executor824 (5458): drop_caches: 2 [ 66.783135][ T5458] syz-executor824 (5458): drop_caches: 2 [pid 5067] rmdir("./7/file0" [pid 5458] <... sendfile resumed> => [764], 2160) = 668 [pid 5457] <... mount resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./7") = 0 [pid 5067] mkdir("./8", 0777) = 0 [pid 5457] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5457] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5457] chdir("./file0" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5457] <... chdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5457] ioctl(4, LOOP_CLR_FD [pid 5067] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5457] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] lstat("./7/file0", [pid 5457] close(4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5457] <... close resumed>) = 0 [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5457] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5067] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5509 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5457] <... openat resumed>) = 4 [pid 5457] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5064] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5457] <... openat resumed>) = 5 [pid 5064] <... openat resumed>) = 4 [pid 5457] sendfile(5, 4, [96] [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5509 attached [pid 5064] getdents64(4, [pid 5509] chdir("./8" [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5509] <... chdir resumed>) = 0 [pid 5064] close(4 [pid 5509] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... close resumed>) = 0 [pid 5509] <... prctl resumed>) = 0 [pid 5064] rmdir("./7/file0" [pid 5509] setpgid(0, 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5509] <... setpgid resumed>) = 0 [pid 5064] getdents64(3, [pid 5509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5458] exit_group(0 [pid 5064] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5509] <... openat resumed>) = 3 [pid 5458] <... exit_group resumed>) = ? [pid 5064] close(3 [pid 5509] write(3, "1000", 4 [pid 5064] <... close resumed>) = 0 [pid 5509] <... write resumed>) = 4 [pid 5064] rmdir("./7" [pid 5509] close(3 [pid 5064] <... rmdir resumed>) = 0 [pid 5509] <... close resumed>) = 0 [pid 5064] mkdir("./8", 0777 [pid 5509] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... mkdir resumed>) = 0 [pid 5509] <... symlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5509] memfd_create("syzkaller", 0 [pid 5064] <... openat resumed>) = 3 [pid 5509] <... memfd_create resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5509] <... mmap resumed>) = 0x7fd745acd000 [ 66.798640][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 66.808868][ T5457] XFS (loop0): Quotacheck needed: Please wait. [ 66.827316][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 66.832750][ T5457] XFS (loop0): Quotacheck: Done. [pid 5064] close(3 [pid 5458] +++ exited with 0 +++ [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5458, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- [pid 5064] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5510 ./strace-static-x86_64: Process 5510 attached [pid 5510] chdir("./8") = 0 [pid 5065] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5510] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5510] setpgid(0, 0) = 0 [pid 5510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5510] <... openat resumed>) = 3 [pid 5510] write(3, "1000", 4) = 4 [pid 5510] close(3 [pid 5065] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5510] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5510] symlink("/dev/binderfs", "./binderfs" [pid 5065] fstat(3, [pid 5510] <... symlink resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5510] memfd_create("syzkaller", 0) = 3 [pid 5510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5065] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./7/binderfs", [pid 5457] <... sendfile resumed> => [764], 2160) = 668 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5457] exit_group(0) = ? [pid 5065] unlink("./7/binderfs" [pid 5457] +++ exited with 0 +++ [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5457, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5062] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./7/binderfs") = 0 [ 66.860085][ T5457] syz-executor824 (5457): drop_caches: 2 [ 66.897016][ T5457] syz-executor824 (5457): drop_caches: 2 [ 66.935816][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 66.952215][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5062] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./7/file0") = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./7" [pid 5066] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./8", 0777 [pid 5066] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5063] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5066] close(4) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] rmdir("./7/file0") = 0 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5066] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./7" [pid 5063] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./8", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5511 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5512 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5511 attached ) = -1 EINVAL (Invalid argument) [pid 5511] chdir("./8" [pid 5065] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5512 attached [pid 5512] chdir("./8" [pid 5065] <... openat resumed>) = 4 [pid 5512] <... chdir resumed>) = 0 [pid 5065] fstat(4, [pid 5512] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5511] <... chdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5512] <... prctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5512] setpgid(0, 0 [pid 5511] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5512] <... setpgid resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5511] <... prctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5512] <... openat resumed>) = 3 [pid 5511] setpgid(0, 0 [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5512] write(3, "1000", 4 [pid 5511] <... setpgid resumed>) = 0 [pid 5065] close(4 [pid 5512] <... write resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5512] close(3 [pid 5065] rmdir("./7/file0" [pid 5512] <... close resumed>) = 0 [pid 5511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... rmdir resumed>) = 0 [pid 5512] symlink("/dev/binderfs", "./binderfs" [pid 5065] getdents64(3, [pid 5511] <... openat resumed>) = 3 [pid 5512] <... symlink resumed>) = 0 [pid 5509] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5512] memfd_create("syzkaller", 0 [pid 5511] write(3, "1000", 4 [pid 5065] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5512] <... memfd_create resumed>) = 3 [pid 5512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5511] <... write resumed>) = 4 [pid 5065] close(3 [pid 5062] <... umount2 resumed>) = 0 [pid 5511] close(3 [pid 5065] <... close resumed>) = 0 [pid 5511] <... close resumed>) = 0 [pid 5065] rmdir("./7" [pid 5062] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5511] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 5511] <... symlink resumed>) = 0 [pid 5065] mkdir("./8", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5511] memfd_create("syzkaller", 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5062] lstat("./7/file0", [pid 5511] <... memfd_create resumed>) = 3 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5510] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5065] <... openat resumed>) = 3 [pid 5062] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5511] <... mmap resumed>) = 0x7fd745acd000 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5062] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... openat resumed>) = 4 [pid 5062] fstat(4, [pid 5065] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5513 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5513 attached [pid 5062] close(4 [pid 5513] chdir("./8" [pid 5062] <... close resumed>) = 0 [pid 5513] <... chdir resumed>) = 0 [pid 5062] rmdir("./7/file0" [pid 5513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5513] setpgid(0, 0 [pid 5062] getdents64(3, [pid 5513] <... setpgid resumed>) = 0 [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] close(3 [pid 5513] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5513] write(3, "1000", 4 [pid 5062] rmdir("./7" [pid 5513] <... write resumed>) = 4 [pid 5513] close(3 [pid 5062] <... rmdir resumed>) = 0 [pid 5513] <... close resumed>) = 0 [pid 5062] mkdir("./8", 0777 [pid 5513] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... mkdir resumed>) = 0 [pid 5513] <... symlink resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5513] memfd_create("syzkaller", 0 [pid 5062] <... openat resumed>) = 3 [pid 5513] <... memfd_create resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5513] <... mmap resumed>) = 0x7fd745acd000 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5514 ./strace-static-x86_64: Process 5514 attached [pid 5514] chdir("./8") = 0 [pid 5514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5514] setpgid(0, 0) = 0 [pid 5514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5514] write(3, "1000", 4) = 4 [pid 5514] close(3) = 0 [pid 5514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5514] memfd_create("syzkaller", 0) = 3 [pid 5514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5512] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5511] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5513] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5509] <... write resumed>) = 16777216 [pid 5509] munmap(0x7fd745acd000, 16777216) = 0 [pid 5510] <... write resumed>) = 16777216 [pid 5509] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5509] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5509] close(3) = 0 [pid 5509] mkdir("./file0", 0777) = 0 [pid 5510] munmap(0x7fd745acd000, 16777216 [pid 5509] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5514] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5510] <... munmap resumed>) = 0 [pid 5510] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 67.831909][ T5509] loop5: detected capacity change from 0 to 32768 [pid 5510] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5510] close(3) = 0 [pid 5510] mkdir("./file0", 0777) = 0 [ 67.894908][ T5510] loop2: detected capacity change from 0 to 32768 [ 67.927916][ T5509] XFS (loop5): DAX unsupported by block device. Turning off DAX. [pid 5510] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5511] <... write resumed>) = 16777216 [pid 5511] munmap(0x7fd745acd000, 16777216) = 0 [pid 5511] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5511] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5511] close(3) = 0 [pid 5511] mkdir("./file0", 0777) = 0 [ 67.941822][ T5509] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 67.980673][ T5510] XFS (loop2): DAX unsupported by block device. Turning off DAX. [pid 5511] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5514] <... write resumed>) = 16777216 [ 68.024594][ T5510] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 68.037227][ T5511] loop4: detected capacity change from 0 to 32768 [pid 5514] munmap(0x7fd745acd000, 16777216) = 0 [pid 5512] <... write resumed>) = 16777216 [pid 5512] munmap(0x7fd745acd000, 16777216 [pid 5514] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5512] <... munmap resumed>) = 0 [pid 5514] <... openat resumed>) = 4 [pid 5512] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5514] ioctl(4, LOOP_SET_FD, 3 [pid 5512] <... openat resumed>) = 4 [pid 5512] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5514] <... ioctl resumed>) = 0 [pid 5509] <... mount resumed>) = 0 [pid 5512] close(3 [pid 5514] close(3 [pid 5509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5514] <... close resumed>) = 0 [pid 5512] <... close resumed>) = 0 [pid 5509] chdir("./file0" [pid 5514] mkdir("./file0", 0777 [pid 5512] mkdir("./file0", 0777 [pid 5509] <... chdir resumed>) = 0 [pid 5509] ioctl(4, LOOP_CLR_FD [pid 5514] <... mkdir resumed>) = 0 [pid 5512] <... mkdir resumed>) = 0 [pid 5509] <... ioctl resumed>) = 0 [ 68.072987][ T5509] XFS (loop5): Ending clean mount [ 68.088184][ T5509] XFS (loop5): Quotacheck needed: Please wait. [ 68.088610][ T5511] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 68.111821][ T5511] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5514] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5509] close(4 [pid 5512] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5509] <... close resumed>) = 0 [pid 5509] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5509] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 68.122885][ T5509] XFS (loop5): Quotacheck: Done. [ 68.128511][ T5514] loop0: detected capacity change from 0 to 32768 [ 68.135578][ T5512] loop1: detected capacity change from 0 to 32768 [pid 5509] sendfile(5, 4, [96] [pid 5513] <... write resumed>) = 16777216 [pid 5513] munmap(0x7fd745acd000, 16777216) = 0 [pid 5513] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5513] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5513] close(3) = 0 [pid 5513] mkdir("./file0", 0777) = 0 [ 68.186845][ T5509] syz-executor824 (5509): drop_caches: 2 [ 68.202650][ T5510] XFS (loop2): Ending clean mount [ 68.211755][ T5510] XFS (loop2): Quotacheck needed: Please wait. [ 68.223710][ T5509] syz-executor824 (5509): drop_caches: 2 [pid 5513] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5509] <... sendfile resumed> => [795], 2160) = 699 [pid 5509] exit_group(0) = ? [pid 5509] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5509, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5510] <... mount resumed>) = 0 [pid 5067] fstat(3, [pid 5510] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5510] chdir("./file0") = 0 [pid 5510] ioctl(4, LOOP_CLR_FD [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5510] <... ioctl resumed>) = 0 [pid 5067] getdents64(3, [pid 5510] close(4 [pid 5067] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5510] <... close resumed>) = 0 [pid 5510] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5510] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5510] sendfile(5, 4, [96] [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 68.245345][ T5514] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 68.255071][ T5513] loop3: detected capacity change from 0 to 32768 [ 68.260080][ T5512] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 68.273552][ T5511] XFS (loop4): Ending clean mount [ 68.273974][ T5510] XFS (loop2): Quotacheck: Done. [ 68.283815][ T5514] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5067] unlink("./8/binderfs") = 0 [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5510] <... sendfile resumed> => [826], 2160) = 730 [pid 5510] exit_group(0) = ? [pid 5510] +++ exited with 0 +++ [pid 5511] <... mount resumed>) = 0 [pid 5511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5511] chdir("./file0") = 0 [pid 5511] ioctl(4, LOOP_CLR_FD) = 0 [pid 5511] close(4) = 0 [pid 5511] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5511] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5511] sendfile(5, 4, [96] [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5510, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=37 /* 0.37 s */} --- [pid 5064] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./8/binderfs") = 0 [ 68.293674][ T5512] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 68.294392][ T5511] XFS (loop4): Quotacheck needed: Please wait. [ 68.314297][ T5510] syz-executor824 (5510): drop_caches: 2 [ 68.331039][ T5510] syz-executor824 (5510): drop_caches: 2 [ 68.331060][ T5513] XFS (loop3): DAX unsupported by block device. Turning off DAX. [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5511] <... sendfile resumed> => [826], 2160) = 730 [pid 5511] exit_group(0) = ? [pid 5511] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5511, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5066] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./8/binderfs") = 0 [ 68.347078][ T5511] XFS (loop4): Quotacheck: Done. [ 68.348621][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 68.359937][ T5511] syz-executor824 (5511): drop_caches: 2 [ 68.374753][ T5511] syz-executor824 (5511): drop_caches: 2 [ 68.374934][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 68.384998][ T5513] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 68.425522][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 68.450076][ T5514] XFS (loop0): Ending clean mount [ 68.469528][ T5513] XFS (loop3): Ending clean mount [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5513] <... mount resumed>) = 0 [pid 5513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5513] chdir("./file0") = 0 [pid 5513] ioctl(4, LOOP_CLR_FD) = 0 [pid 5513] close(4) = 0 [ 68.479604][ T5513] XFS (loop3): Quotacheck needed: Please wait. [ 68.492017][ T5512] XFS (loop1): Ending clean mount [ 68.501392][ T5513] XFS (loop3): Quotacheck: Done. [ 68.518376][ T5514] XFS (loop0): Quotacheck needed: Please wait. [pid 5513] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5513] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5514] <... mount resumed>) = 0 [ 68.522401][ T5512] XFS (loop1): Quotacheck needed: Please wait. [pid 5513] sendfile(5, 4, [96] [pid 5514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5514] chdir("./file0") = 0 [pid 5514] ioctl(4, LOOP_CLR_FD) = 0 [pid 5512] <... mount resumed>) = 0 [pid 5514] close(4) = 0 [pid 5514] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5514] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5514] sendfile(5, 4, [96] [pid 5513] <... sendfile resumed> => [733], 2160) = 637 [pid 5512] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5513] exit_group(0 [pid 5512] <... openat resumed>) = 3 [pid 5513] <... exit_group resumed>) = ? [pid 5512] chdir("./file0") = 0 [pid 5513] +++ exited with 0 +++ [pid 5512] ioctl(4, LOOP_CLR_FD [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5513, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} --- [ 68.565118][ T5514] XFS (loop0): Quotacheck: Done. [ 68.582361][ T5512] XFS (loop1): Quotacheck: Done. [ 68.592098][ T5513] syz-executor824 (5513): drop_caches: 2 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5512] <... ioctl resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5512] close(4) = 0 [pid 5065] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5512] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5065] getdents64(3, [pid 5512] <... openat resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5512] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5065] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5512] <... openat resumed>) = 5 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./8/binderfs", [pid 5512] sendfile(5, 4, [96] [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./8/binderfs") = 0 [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5514] <... sendfile resumed> => [733], 2160) = 637 [pid 5512] <... sendfile resumed> => [733], 2160) = 637 [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5514] exit_group(0 [pid 5512] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5514] <... exit_group resumed>) = ? [pid 5512] <... exit_group resumed>) = ? [pid 5067] lstat("./8/file0", [pid 5514] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5514, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=24 /* 0.24 s */} --- [pid 5512] +++ exited with 0 +++ [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5512, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [ 68.617822][ T5514] syz-executor824 (5514): drop_caches: 2 [ 68.618453][ T5513] syz-executor824 (5513): drop_caches: 2 [ 68.624018][ T5514] syz-executor824 (5514): drop_caches: 2 [ 68.657458][ T5512] syz-executor824 (5512): drop_caches: 2 [pid 5062] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5063] fstat(3, [pid 5062] fstat(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5062] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] lstat("./8/binderfs", [pid 5062] lstat("./8/binderfs", [pid 5067] <... openat resumed>) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] fstat(4, [pid 5063] unlink("./8/binderfs" [pid 5062] unlink("./8/binderfs" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = 0 [pid 5067] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [ 68.666076][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 68.670424][ T5512] syz-executor824 (5512): drop_caches: 2 [ 68.706408][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 5066] lstat("./8/file0", [pid 5067] rmdir("./8/file0" [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 5066] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5066] fstat(4, [pid 5067] rmdir("./8" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] getdents64(4, [pid 5067] mkdir("./9", 0777 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] close(4 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] rmdir("./8/file0" [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... rmdir resumed>) = 0 [pid 5067] close(3 [pid 5066] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] close(3) = 0 [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5563 [pid 5066] rmdir("./8" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 68.715670][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5066] <... rmdir resumed>) = 0 [pid 5063] lstat("./8/file0", [pid 5066] mkdir("./9", 0777) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5563 attached [pid 5563] chdir("./9" [pid 5066] <... openat resumed>) = 3 [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5563] <... chdir resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5563] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5563] setpgid(0, 0) = 0 [pid 5563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... openat resumed>) = 4 [pid 5066] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5564 [pid 5563] <... openat resumed>) = 3 [pid 5063] fstat(4, [pid 5563] write(3, "1000", 4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5563] <... write resumed>) = 4 [pid 5063] getdents64(4, [pid 5563] close(3 [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5563] <... close resumed>) = 0 [pid 5563] symlink("/dev/binderfs", "./binderfs" [pid 5063] getdents64(4, [pid 5563] <... symlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5563] memfd_create("syzkaller", 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./8/file0" [pid 5563] <... memfd_create resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... close resumed>) = 0 [pid 5563] <... mmap resumed>) = 0x7fd745acd000 [pid 5063] rmdir("./8"./strace-static-x86_64: Process 5564 attached [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5564] chdir("./9" [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./9", 0777 [pid 5564] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5564] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] lstat("./8/file0", [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5564] <... prctl resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5564] setpgid(0, 0 [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5564] <... setpgid resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3 [pid 5564] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5064] fstat(4, [pid 5564] write(3, "1000", 4 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5564] <... write resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5564] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5565 [pid 5064] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5564] <... close resumed>) = 0 [pid 5064] close(4 [pid 5564] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... close resumed>) = 0 [pid 5564] <... symlink resumed>) = 0 [pid 5064] rmdir("./8/file0") = 0 [pid 5564] memfd_create("syzkaller", 0 [pid 5064] getdents64(3, [pid 5564] <... memfd_create resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... close resumed>) = 0 [pid 5564] <... mmap resumed>) = 0x7fd745acd000 [pid 5064] rmdir("./8") = 0 [pid 5064] mkdir("./9", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5565 attached ) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5565] chdir("./9" [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5565] <... chdir resumed>) = 0 [pid 5064] close(3 [pid 5565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... close resumed>) = 0 [pid 5565] <... prctl resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5565] setpgid(0, 0) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5566 [pid 5565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5565] write(3, "1000", 4) = 4 [pid 5565] close(3) = 0 [pid 5565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5565] memfd_create("syzkaller", 0) = 3 [pid 5565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 ./strace-static-x86_64: Process 5566 attached [pid 5566] chdir("./9") = 0 [pid 5566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5566] setpgid(0, 0) = 0 [pid 5566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5566] write(3, "1000", 4) = 4 [pid 5566] close(3) = 0 [pid 5566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5566] memfd_create("syzkaller", 0) = 3 [pid 5566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./8/file0") = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./8") = 0 [pid 5065] mkdir("./9", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5567 attached [pid 5062] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5567 [pid 5567] chdir("./9" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5567] <... chdir resumed>) = 0 [pid 5062] lstat("./8/file0", [pid 5567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5567] setpgid(0, 0 [pid 5062] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5567] <... setpgid resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5567] <... openat resumed>) = 3 [pid 5567] write(3, "1000", 4 [pid 5062] <... openat resumed>) = 4 [pid 5567] <... write resumed>) = 4 [pid 5062] fstat(4, [pid 5567] close(3 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5567] <... close resumed>) = 0 [pid 5567] symlink("/dev/binderfs", "./binderfs" [pid 5062] getdents64(4, [pid 5567] <... symlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5567] memfd_create("syzkaller", 0 [pid 5062] getdents64(4, [pid 5567] <... memfd_create resumed>) = 3 [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] close(4 [pid 5567] <... mmap resumed>) = 0x7fd745acd000 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./8/file0") = 0 [pid 5062] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./8") = 0 [pid 5062] mkdir("./9", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5568 ./strace-static-x86_64: Process 5568 attached [pid 5563] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5568] chdir("./9") = 0 [pid 5568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5568] setpgid(0, 0) = 0 [pid 5568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5568] write(3, "1000", 4) = 4 [pid 5568] close(3) = 0 [pid 5568] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5568] memfd_create("syzkaller", 0) = 3 [pid 5568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5564] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5565] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5566] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5567] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5568] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5563] <... write resumed>) = 16777216 [pid 5563] munmap(0x7fd745acd000, 16777216) = 0 [pid 5564] <... write resumed>) = 16777216 [pid 5563] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5563] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5563] close(3) = 0 [pid 5563] mkdir("./file0", 0777 [pid 5564] munmap(0x7fd745acd000, 16777216 [pid 5563] <... mkdir resumed>) = 0 [pid 5563] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5564] <... munmap resumed>) = 0 [pid 5564] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5564] ioctl(4, LOOP_SET_FD, 3 [pid 5565] <... write resumed>) = 16777216 [pid 5565] munmap(0x7fd745acd000, 16777216 [pid 5564] <... ioctl resumed>) = 0 [pid 5564] close(3) = 0 [pid 5564] mkdir("./file0", 0777) = 0 [ 69.712243][ T5563] loop5: detected capacity change from 0 to 32768 [pid 5564] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5565] <... munmap resumed>) = 0 [pid 5565] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 69.757011][ T5564] loop4: detected capacity change from 0 to 32768 [ 69.790464][ T5563] XFS (loop5): DAX unsupported by block device. Turning off DAX. [pid 5565] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5568] <... write resumed>) = 16777216 [ 69.805515][ T5563] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 69.835273][ T5565] loop1: detected capacity change from 0 to 32768 [ 69.847343][ T5564] XFS (loop4): DAX unsupported by block device. Turning off DAX. [pid 5568] munmap(0x7fd745acd000, 16777216) = 0 [pid 5565] close(3) = 0 [pid 5565] mkdir("./file0", 0777) = 0 [pid 5565] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5568] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5568] ioctl(4, LOOP_SET_FD, 3 [pid 5567] <... write resumed>) = 16777216 [pid 5567] munmap(0x7fd745acd000, 16777216) = 0 [pid 5568] <... ioctl resumed>) = 0 [pid 5568] close(3 [pid 5567] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5568] <... close resumed>) = 0 [ 69.857553][ T5564] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 69.878159][ T5563] XFS (loop5): Ending clean mount [ 69.898813][ T5563] XFS (loop5): Quotacheck needed: Please wait. [pid 5566] <... write resumed>) = 16777216 [pid 5568] mkdir("./file0", 0777 [pid 5567] <... openat resumed>) = 4 [pid 5568] <... mkdir resumed>) = 0 [pid 5568] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5567] ioctl(4, LOOP_SET_FD, 3 [pid 5566] munmap(0x7fd745acd000, 16777216 [pid 5563] <... mount resumed>) = 0 [pid 5567] <... ioctl resumed>) = 0 [pid 5563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5567] close(3 [pid 5563] <... openat resumed>) = 3 [pid 5567] <... close resumed>) = 0 [pid 5566] <... munmap resumed>) = 0 [pid 5566] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5567] mkdir("./file0", 0777 [pid 5566] ioctl(4, LOOP_SET_FD, 3 [ 69.913115][ T5568] loop0: detected capacity change from 0 to 32768 [ 69.933137][ T5563] XFS (loop5): Quotacheck: Done. [ 69.950086][ T5567] loop3: detected capacity change from 0 to 32768 [pid 5563] chdir("./file0" [pid 5567] <... mkdir resumed>) = 0 [pid 5566] <... ioctl resumed>) = 0 [pid 5563] <... chdir resumed>) = 0 [pid 5567] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5564] <... mount resumed>) = 0 [pid 5563] ioctl(4, LOOP_CLR_FD [pid 5566] close(3 [pid 5563] <... ioctl resumed>) = 0 [pid 5563] close(4 [pid 5566] <... close resumed>) = 0 [pid 5564] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5563] <... close resumed>) = 0 [pid 5563] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5564] <... openat resumed>) = 3 [pid 5563] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5564] chdir("./file0" [pid 5563] <... openat resumed>) = 5 [pid 5564] <... chdir resumed>) = 0 [pid 5563] sendfile(5, 4, [96] [pid 5564] ioctl(4, LOOP_CLR_FD [pid 5566] mkdir("./file0", 0777 [pid 5564] <... ioctl resumed>) = 0 [pid 5566] <... mkdir resumed>) = 0 [pid 5564] close(4 [pid 5566] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5564] <... close resumed>) = 0 [pid 5564] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [ 69.957953][ T5565] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 69.962231][ T5564] XFS (loop4): Ending clean mount [ 69.973451][ T5564] XFS (loop4): Quotacheck needed: Please wait. [ 69.980030][ T5565] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 69.991352][ T5566] loop2: detected capacity change from 0 to 32768 [ 69.991456][ T5564] XFS (loop4): Quotacheck: Done. [ 70.005180][ T5568] XFS (loop0): DAX unsupported by block device. Turning off DAX. [pid 5564] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5564] sendfile(5, 4, [96] => [826], 2160) = 730 [pid 5564] exit_group(0) = ? [pid 5564] +++ exited with 0 +++ [ 70.018680][ T5568] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 70.043245][ T5563] syz-executor824 (5563): drop_caches: 2 [ 70.053389][ T5564] syz-executor824 (5564): drop_caches: 2 [ 70.059460][ T5565] XFS (loop1): Ending clean mount [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5564, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} --- [pid 5066] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, [pid 5563] <... sendfile resumed> => [826], 2160) = 730 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5563] exit_group(0) = ? [pid 5563] +++ exited with 0 +++ [pid 5066] getdents64(3, [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5563, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5066] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./9/binderfs", [pid 5067] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5565] <... mount resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5565] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5565] chdir("./file0") = 0 [pid 5565] ioctl(4, LOOP_CLR_FD) = 0 [pid 5565] close(4) = 0 [pid 5067] fstat(3, [pid 5066] unlink("./9/binderfs" [pid 5565] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5565] <... openat resumed>) = 4 [pid 5565] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5067] getdents64(3, [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 70.067639][ T5564] syz-executor824 (5564): drop_caches: 2 [ 70.081860][ T5567] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 70.082398][ T5565] XFS (loop1): Quotacheck needed: Please wait. [ 70.095099][ T5563] syz-executor824 (5563): drop_caches: 2 [ 70.104190][ T5567] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5565] <... openat resumed>) = 5 [pid 5067] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5565] sendfile(5, 4, [96] [pid 5067] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 70.118105][ T5565] XFS (loop1): Quotacheck: Done. [ 70.123634][ T5566] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 70.134940][ T5566] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 70.143769][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 70.156204][ T5568] XFS (loop0): Ending clean mount [pid 5067] lstat("./9/binderfs", [pid 5565] <... sendfile resumed> => [826], 2160) = 730 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./9/binderfs" [pid 5565] exit_group(0 [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5565] <... exit_group resumed>) = ? [pid 5565] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5565, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} --- [pid 5063] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5568] <... mount resumed>) = 0 [pid 5566] <... mount resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] fstat(3, [pid 5568] <... openat resumed>) = 3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5568] chdir("./file0" [pid 5063] getdents64(3, [pid 5566] <... openat resumed>) = 3 [pid 5568] <... chdir resumed>) = 0 [pid 5566] chdir("./file0" [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [ 70.170785][ T5565] syz-executor824 (5565): drop_caches: 2 [ 70.182489][ T5568] XFS (loop0): Quotacheck needed: Please wait. [ 70.188277][ T5566] XFS (loop2): Ending clean mount [ 70.191011][ T5565] syz-executor824 (5565): drop_caches: 2 [ 70.196009][ T5566] XFS (loop2): Quotacheck needed: Please wait. [pid 5063] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5568] ioctl(4, LOOP_CLR_FD) = 0 [pid 5568] close(4) = 0 [pid 5566] <... chdir resumed>) = 0 [pid 5063] lstat("./9/binderfs", [pid 5568] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./9/binderfs" [pid 5568] <... openat resumed>) = 4 [pid 5566] ioctl(4, LOOP_CLR_FD [pid 5063] <... unlink resumed>) = 0 [pid 5566] <... ioctl resumed>) = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5566] close(4 [pid 5568] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5568] sendfile(5, 4, [96] [pid 5566] <... close resumed>) = 0 [pid 5566] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5567] <... mount resumed>) = 0 [ 70.216278][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 70.223952][ T5566] XFS (loop2): Quotacheck: Done. [ 70.233532][ T5568] XFS (loop0): Quotacheck: Done. [ 70.247992][ T5567] XFS (loop3): Ending clean mount [ 70.255559][ T5567] XFS (loop3): Quotacheck needed: Please wait. [pid 5566] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5566] <... openat resumed>) = 5 [pid 5567] <... openat resumed>) = 3 [pid 5566] sendfile(5, 4, [96] [pid 5567] chdir("./file0") = 0 [pid 5567] ioctl(4, LOOP_CLR_FD) = 0 [pid 5567] close(4) = 0 [pid 5567] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5567] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5567] sendfile(5, 4, [96] [pid 5566] <... sendfile resumed> => [795], 2160) = 699 [ 70.269682][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 70.287017][ T5567] XFS (loop3): Quotacheck: Done. [ 70.287667][ T5568] syz-executor824 (5568): drop_caches: 2 [ 70.306963][ T5566] syz-executor824 (5566): drop_caches: 2 [ 70.313346][ T5566] syz-executor824 (5566): drop_caches: 2 [pid 5566] exit_group(0 [pid 5568] <... sendfile resumed> => [795], 2160) = 699 [pid 5566] <... exit_group resumed>) = ? [pid 5568] exit_group(0 [pid 5567] <... sendfile resumed> => [795], 2160) = 699 [ 70.335383][ T5567] syz-executor824 (5567): drop_caches: 2 [ 70.341225][ T5567] syz-executor824 (5567): drop_caches: 2 [ 70.346160][ T5568] syz-executor824 (5568): drop_caches: 2 [pid 5568] <... exit_group resumed>) = ? [pid 5567] exit_group(0) = ? [pid 5568] +++ exited with 0 +++ [pid 5567] +++ exited with 0 +++ [pid 5566] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5567, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} --- [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5566, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=26 /* 0.26 s */} --- [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5568, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5065] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... restart_syscall resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... restart_syscall resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./9/binderfs", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./9/binderfs" [pid 5064] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] fstat(3, [pid 5062] <... openat resumed>) = 3 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] fstat(3, [pid 5064] getdents64(3, [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5062] getdents64(3, [pid 5064] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] lstat("./9/binderfs", [pid 5062] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./9/binderfs" [pid 5062] lstat("./9/binderfs", [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./9/binderfs") = 0 [pid 5062] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./9/file0") = 0 [pid 5066] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./9") = 0 [pid 5066] mkdir("./10", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5617 [ 70.451176][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 70.468897][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 70.479447][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb ./strace-static-x86_64: Process 5617 attached [pid 5617] chdir("./10") = 0 [pid 5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5617] setpgid(0, 0) = 0 [pid 5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5617] write(3, "1000", 4) = 4 [pid 5617] close(3) = 0 [pid 5617] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5617] memfd_create("syzkaller", 0) = 3 [pid 5617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./9/file0", [pid 5063] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5067] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./9/file0" [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5067] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./9" [pid 5067] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./10", 0777 [pid 5067] close(4) = 0 [pid 5067] rmdir("./9/file0") = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] getdents64(3, [pid 5063] close(3 [pid 5067] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./9") = 0 [pid 5067] mkdir("./10", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5618 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5619 ./strace-static-x86_64: Process 5618 attached [pid 5618] chdir("./10") = 0 [pid 5618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5618] setpgid(0, 0) = 0 [pid 5618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5618] write(3, "1000", 4) = 4 [pid 5618] close(3) = 0 [pid 5618] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5619 attached [pid 5619] chdir("./10" [pid 5618] <... symlink resumed>) = 0 [pid 5619] <... chdir resumed>) = 0 [pid 5619] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5618] memfd_create("syzkaller", 0 [pid 5619] <... prctl resumed>) = 0 [pid 5619] setpgid(0, 0 [pid 5618] <... memfd_create resumed>) = 3 [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5619] <... setpgid resumed>) = 0 [pid 5619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5618] <... mmap resumed>) = 0x7fd745acd000 [pid 5619] <... openat resumed>) = 3 [pid 5619] write(3, "1000", 4) = 4 [pid 5619] close(3) = 0 [pid 5619] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5619] memfd_create("syzkaller", 0) = 3 [pid 5619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5064] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./9/file0" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, [pid 5064] lstat("./9/file0", [pid 5065] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5062] lstat("./9/file0", [pid 5065] close(3 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... close resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] rmdir("./9" [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] mkdir("./10", 0777 [pid 5064] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5062] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] fstat(4, [pid 5065] <... openat resumed>) = 3 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] getdents64(4, [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5062] fstat(4, [pid 5065] close(3 [pid 5064] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] close(4) = 0 [pid 5062] getdents64(4, [pid 5065] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5620 [pid 5064] rmdir("./9/file0") = 0 [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(3, [pid 5062] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5062] close(4 [pid 5064] rmdir("./9"./strace-static-x86_64: Process 5620 attached ) = 0 [pid 5620] chdir("./10" [pid 5064] mkdir("./10", 0777 [pid 5620] <... chdir resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5620] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5620] <... prctl resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5620] setpgid(0, 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] <... close resumed>) = 0 [pid 5620] <... setpgid resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] rmdir("./9/file0" [pid 5620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] close(3 [pid 5620] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5620] write(3, "1000", 4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] getdents64(3, [pid 5620] <... write resumed>) = 4 [pid 5620] close(3 [pid 5064] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5621 [pid 5062] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5620] <... close resumed>) = 0 [pid 5620] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(3 [pid 5620] <... symlink resumed>) = 0 [pid 5620] memfd_create("syzkaller", 0 [pid 5062] <... close resumed>) = 0 [pid 5620] <... memfd_create resumed>) = 3 [pid 5062] rmdir("./9"./strace-static-x86_64: Process 5621 attached [pid 5620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5621] chdir("./10" [pid 5620] <... mmap resumed>) = 0x7fd745acd000 [pid 5062] <... rmdir resumed>) = 0 [pid 5621] <... chdir resumed>) = 0 [pid 5062] mkdir("./10", 0777 [pid 5621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5621] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5621] write(3, "1000", 4) = 4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5621] close(3) = 0 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5621] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(3 [pid 5621] <... symlink resumed>) = 0 [pid 5621] memfd_create("syzkaller", 0 [pid 5062] <... close resumed>) = 0 [pid 5621] <... memfd_create resumed>) = 3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5062] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5622 ./strace-static-x86_64: Process 5622 attached [pid 5622] chdir("./10") = 0 [pid 5622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5622] setpgid(0, 0) = 0 [pid 5622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5622] write(3, "1000", 4) = 4 [pid 5622] close(3) = 0 [pid 5622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5622] memfd_create("syzkaller", 0) = 3 [pid 5622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5617] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5619] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5618] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5621] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5620] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5622] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5617] <... write resumed>) = 16777216 [pid 5617] munmap(0x7fd745acd000, 16777216) = 0 [pid 5617] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5619] <... write resumed>) = 16777216 [pid 5618] <... write resumed>) = 16777216 [pid 5617] <... openat resumed>) = 4 [pid 5617] ioctl(4, LOOP_SET_FD, 3 [pid 5618] munmap(0x7fd745acd000, 16777216 [pid 5619] munmap(0x7fd745acd000, 16777216) = 0 [pid 5618] <... munmap resumed>) = 0 [pid 5617] <... ioctl resumed>) = 0 [pid 5617] close(3) = 0 [pid 5617] mkdir("./file0", 0777) = 0 [pid 5617] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5618] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5618] ioctl(4, LOOP_SET_FD, 3 [pid 5619] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5619] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5618] <... ioctl resumed>) = 0 [pid 5618] close(3) = 0 [pid 5618] mkdir("./file0", 0777) = 0 [ 71.661589][ T5617] loop4: detected capacity change from 0 to 32768 [ 71.697476][ T5618] loop5: detected capacity change from 0 to 32768 [pid 5618] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5619] close(3) = 0 [pid 5619] mkdir("./file0", 0777) = 0 [ 71.715676][ T5619] loop1: detected capacity change from 0 to 32768 [pid 5619] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5621] <... write resumed>) = 16777216 [pid 5620] <... write resumed>) = 16777216 [pid 5620] munmap(0x7fd745acd000, 16777216 [pid 5622] <... write resumed>) = 16777216 [pid 5621] munmap(0x7fd745acd000, 16777216 [pid 5620] <... munmap resumed>) = 0 [pid 5622] munmap(0x7fd745acd000, 16777216 [pid 5621] <... munmap resumed>) = 0 [pid 5620] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5621] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5620] <... openat resumed>) = 4 [pid 5621] <... openat resumed>) = 4 [pid 5620] ioctl(4, LOOP_SET_FD, 3 [ 71.794482][ T5617] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 71.814486][ T5617] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 71.823560][ T5619] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 71.832274][ T5618] XFS (loop5): DAX unsupported by block device. Turning off DAX. [pid 5621] ioctl(4, LOOP_SET_FD, 3 [pid 5622] <... munmap resumed>) = 0 [pid 5621] <... ioctl resumed>) = 0 [pid 5620] <... ioctl resumed>) = 0 [pid 5622] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5621] close(3 [pid 5620] close(3 [pid 5622] <... openat resumed>) = 4 [pid 5621] <... close resumed>) = 0 [pid 5620] <... close resumed>) = 0 [pid 5622] ioctl(4, LOOP_SET_FD, 3 [pid 5621] mkdir("./file0", 0777 [pid 5620] mkdir("./file0", 0777 [pid 5622] <... ioctl resumed>) = 0 [pid 5622] close(3) = 0 [pid 5621] <... mkdir resumed>) = 0 [pid 5620] <... mkdir resumed>) = 0 [pid 5622] mkdir("./file0", 0777 [pid 5621] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5620] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5622] <... mkdir resumed>) = 0 [ 71.845486][ T5618] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 71.854940][ T5619] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 71.868283][ T5620] loop3: detected capacity change from 0 to 32768 [ 71.875644][ T5621] loop2: detected capacity change from 0 to 32768 [ 71.897567][ T5622] loop0: detected capacity change from 0 to 32768 [ 71.908074][ T5618] XFS (loop5): Ending clean mount [ 71.917208][ T5619] XFS (loop1): Ending clean mount [ 71.925985][ T5617] XFS (loop4): Ending clean mount [ 71.926990][ T5618] XFS (loop5): Quotacheck needed: Please wait. [ 71.931607][ T5619] XFS (loop1): Quotacheck needed: Please wait. [ 71.995245][ T5621] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 72.003537][ T5620] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 72.004024][ T5621] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 72.011377][ T5622] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 72.024893][ T5620] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5622] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5618] <... mount resumed>) = 0 [pid 5619] <... mount resumed>) = 0 [pid 5618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5618] chdir("./file0" [pid 5619] <... openat resumed>) = 3 [pid 5618] <... chdir resumed>) = 0 [pid 5619] chdir("./file0" [pid 5618] ioctl(4, LOOP_CLR_FD [pid 5619] <... chdir resumed>) = 0 [pid 5617] <... mount resumed>) = 0 [pid 5617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5619] ioctl(4, LOOP_CLR_FD [pid 5618] <... ioctl resumed>) = 0 [pid 5617] chdir("./file0") = 0 [pid 5617] ioctl(4, LOOP_CLR_FD) = 0 [pid 5617] close(4 [pid 5619] <... ioctl resumed>) = 0 [pid 5618] close(4 [pid 5617] <... close resumed>) = 0 [pid 5619] close(4 [pid 5618] <... close resumed>) = 0 [pid 5619] <... close resumed>) = 0 [pid 5618] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5619] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5618] <... openat resumed>) = 4 [pid 5617] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5619] <... openat resumed>) = 4 [pid 5618] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5617] <... openat resumed>) = 4 [pid 5619] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5618] <... openat resumed>) = 5 [pid 5617] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5619] <... openat resumed>) = 5 [ 72.041872][ T5622] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 72.053786][ T5617] XFS (loop4): Quotacheck needed: Please wait. [ 72.067711][ T5618] XFS (loop5): Quotacheck: Done. [ 72.074052][ T5619] XFS (loop1): Quotacheck: Done. [ 72.083961][ T5621] XFS (loop2): Ending clean mount [ 72.087687][ T5617] XFS (loop4): Quotacheck: Done. [pid 5618] sendfile(5, 4, [96] [pid 5617] <... openat resumed>) = 5 [pid 5619] sendfile(5, 4, [96] [pid 5617] sendfile(5, 4, [96] => [826], 2160) = 730 [pid 5617] exit_group(0) = ? [pid 5617] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- [pid 5066] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./10/binderfs") = 0 [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5618] <... sendfile resumed> => [826], 2160) = 730 [pid 5618] exit_group(0) = ? [pid 5618] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5618, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 72.118801][ T5621] XFS (loop2): Quotacheck needed: Please wait. [ 72.151973][ T5617] syz-executor824 (5617): drop_caches: 2 [ 72.158158][ T5617] syz-executor824 (5617): drop_caches: 2 [pid 5067] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./10/binderfs" [pid 5619] <... sendfile resumed> => [826], 2160) = 730 [pid 5067] <... unlink resumed>) = 0 [pid 5619] exit_group(0 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5619] <... exit_group resumed>) = ? [pid 5619] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5619, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=31 /* 0.31 s */} --- [pid 5621] <... mount resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 72.175640][ T5619] syz-executor824 (5619): drop_caches: 2 [ 72.175699][ T5618] syz-executor824 (5618): drop_caches: 2 [ 72.190626][ T5618] syz-executor824 (5618): drop_caches: 2 [ 72.207977][ T5619] syz-executor824 (5619): drop_caches: 2 [ 72.216820][ T5620] XFS (loop3): Ending clean mount [pid 5621] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5621] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5621] chdir("./file0" [pid 5063] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./10/binderfs") = 0 [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5621] <... chdir resumed>) = 0 [pid 5621] ioctl(4, LOOP_CLR_FD) = 0 [pid 5620] <... mount resumed>) = 0 [pid 5621] close(4) = 0 [pid 5621] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5621] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5621] sendfile(5, 4, [96] [ 72.219292][ T5622] XFS (loop0): Ending clean mount [ 72.226988][ T5620] XFS (loop3): Quotacheck needed: Please wait. [ 72.227641][ T5066] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 72.236674][ T5621] XFS (loop2): Quotacheck: Done. [ 72.259867][ T5622] XFS (loop0): Quotacheck needed: Please wait. [ 72.260099][ T5067] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5621] <... sendfile resumed> => [826], 2160) = 730 [pid 5621] exit_group(0) = ? [pid 5620] chdir("./file0") = 0 [pid 5620] ioctl(4, LOOP_CLR_FD) = 0 [pid 5622] <... mount resumed>) = 0 [pid 5622] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5620] close(4 [pid 5622] chdir("./file0") = 0 [pid 5622] ioctl(4, LOOP_CLR_FD) = 0 [pid 5622] close(4) = 0 [pid 5622] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5620] <... close resumed>) = 0 [pid 5620] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5622] <... openat resumed>) = 4 [pid 5620] <... openat resumed>) = 4 [pid 5622] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5620] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5622] <... openat resumed>) = 5 [pid 5620] <... openat resumed>) = 5 [pid 5620] sendfile(5, 4, [96] [pid 5622] sendfile(5, 4, [96] [pid 5621] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5621, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} --- [ 72.266235][ T5620] XFS (loop3): Quotacheck: Done. [ 72.280746][ T5063] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 72.286897][ T5621] syz-executor824 (5621): drop_caches: 2 [ 72.296140][ T5621] syz-executor824 (5621): drop_caches: 2 [ 72.309887][ T5622] XFS (loop0): Quotacheck: Done. [pid 5064] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5620] <... sendfile resumed> => [826], 2160) = 730 [pid 5064] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5622] <... sendfile resumed> => [826], 2160) = 730 [pid 5620] exit_group(0 [pid 5064] <... openat resumed>) = 3 [pid 5620] <... exit_group resumed>) = ? [pid 5064] fstat(3, [pid 5620] +++ exited with 0 +++ [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5620, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5064] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./10/binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... unlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./10/binderfs") = 0 [ 72.351802][ T5620] syz-executor824 (5620): drop_caches: 2 [ 72.352109][ T5622] syz-executor824 (5622): drop_caches: 2 [ 72.376462][ T5620] syz-executor824 (5620): drop_caches: 2 [ 72.377970][ T5622] syz-executor824 (5622): drop_caches: 2 [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5622] exit_group(0) = ? [pid 5622] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5622, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./10/binderfs") = 0 [ 72.412385][ T5064] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 72.433417][ T5065] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 72.480323][ T5062] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5062] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./10/file0") = 0 [pid 5067] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./10") = 0 [pid 5067] mkdir("./11", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5672 ./strace-static-x86_64: Process 5672 attached [pid 5672] chdir("./11") = 0 [pid 5672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5672] setpgid(0, 0) = 0 [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... openat resumed>) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5672] <... openat resumed>) = 3 [pid 5063] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5672] write(3, "1000", 4 [pid 5063] <... close resumed>) = 0 [pid 5672] <... write resumed>) = 4 [pid 5672] close(3 [pid 5063] rmdir("./10/file0" [pid 5672] <... close resumed>) = 0 [pid 5672] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5672] memfd_create("syzkaller", 0) = 3 [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] close(3) = 0 [pid 5672] <... mmap resumed>) = 0x7fd745acd000 [pid 5063] rmdir("./10") = 0 [pid 5063] mkdir("./11", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5673 ./strace-static-x86_64: Process 5673 attached [pid 5673] chdir("./11") = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5673] setpgid(0, 0) = 0 [pid 5673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5673] write(3, "1000", 4) = 4 [pid 5673] close(3) = 0 [pid 5673] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5673] memfd_create("syzkaller", 0) = 3 [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./10/file0") = 0 [pid 5066] getdents64(3, 0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./10") = 0 [pid 5066] mkdir("./11", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566c85d0) = 5674 ./strace-static-x86_64: Process 5674 attached [pid 5674] chdir("./11") = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5674] setpgid(0, 0) = 0 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5674] write(3, "1000", 4) = 4 [pid 5674] close(3) = 0 [pid 5674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5674] memfd_create("syzkaller", 0) = 3 [pid 5674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5064] lstat("./10/file0", [pid 5065] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] close(4 [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./10/file0" [pid 5064] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] fstat(4, [pid 5065] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5065] close(3 [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5065] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5065] rmdir("./10" [pid 5064] <... getdents64 resumed>0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] mkdir("./11", 0777 [pid 5064] rmdir("./10/file0" [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555566c9620 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] close(3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(3 [pid 5064] rmdir("./10" [pid 5065] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5062] lstat("./10/file0", [pid 5064] mkdir("./11", 0777) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... openat resumed>) = 4 [pid 5064] close(3 [pid 5062] fstat(4, [pid 5064] <... close resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] getdents64(4, [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... getdents64 resumed>0x5555566d1660 /* 2 entries */, 32768) = 48 [pid 5064] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5675 [pid 5062] getdents64(4, 0x5555566d1660 /* 0 entries */, 32768) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5676 [pid 5062] close(4) = 0 [pid 5062] rmdir("./10/file0") = 0 [pid 5062] getdents64(3, ./strace-static-x86_64: Process 5676 attached 0x5555566c9620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5675 attached [pid 5676] chdir("./11" [pid 5062] close(3 [pid 5676] <... chdir resumed>) = 0 [pid 5675] chdir("./11" [pid 5062] <... close resumed>) = 0 [pid 5676] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5675] <... chdir resumed>) = 0 [pid 5062] rmdir("./10" [pid 5676] <... prctl resumed>) = 0 [pid 5675] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... rmdir resumed>) = 0 [pid 5676] setpgid(0, 0 [pid 5675] <... prctl resumed>) = 0 [pid 5062] mkdir("./11", 0777 [pid 5676] <... setpgid resumed>) = 0 [pid 5675] setpgid(0, 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5675] <... setpgid resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5676] <... openat resumed>) = 3 [pid 5675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... openat resumed>) = 3 [pid 5676] write(3, "1000", 4 [pid 5675] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5676] <... write resumed>) = 4 [pid 5675] write(3, "1000", 4 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5676] close(3 [pid 5675] <... write resumed>) = 4 [pid 5062] close(3 [pid 5676] <... close resumed>) = 0 [pid 5675] close(3 [pid 5062] <... close resumed>) = 0 [pid 5676] symlink("/dev/binderfs", "./binderfs" [pid 5675] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5676] <... symlink resumed>) = 0 [pid 5675] symlink("/dev/binderfs", "./binderfs" [pid 5676] memfd_create("syzkaller", 0 [pid 5675] <... symlink resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x5555566c85d0) = 5677 [pid 5676] <... memfd_create resumed>) = 3 [pid 5675] memfd_create("syzkaller", 0 [pid 5676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5675] <... memfd_create resumed>) = 3 [pid 5676] <... mmap resumed>) = 0x7fd745acd000 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 ./strace-static-x86_64: Process 5677 attached [pid 5677] chdir("./11") = 0 [pid 5677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5677] setpgid(0, 0) = 0 [pid 5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5677] write(3, "1000", 4) = 4 [pid 5677] close(3) = 0 [pid 5677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5677] memfd_create("syzkaller", 0) = 3 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd745acd000 [pid 5672] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5673] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5674] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5675] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5676] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5677] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216 [pid 5672] <... write resumed>) = 16777216 [pid 5672] munmap(0x7fd745acd000, 16777216) = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5673] <... write resumed>) = 16777216 [pid 5672] <... openat resumed>) = 4 [pid 5672] ioctl(4, LOOP_SET_FD, 3 [pid 5673] munmap(0x7fd745acd000, 16777216) = 0 [pid 5672] <... ioctl resumed>) = 0 [pid 5672] close(3) = 0 [pid 5672] mkdir("./file0", 0777) = 0 [pid 5672] mount("/dev/loop5", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5673] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5673] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5673] close(3) = 0 [pid 5673] mkdir("./file0", 0777 [pid 5674] <... write resumed>) = 16777216 [pid 5673] <... mkdir resumed>) = 0 [pid 5674] munmap(0x7fd745acd000, 16777216 [ 73.562388][ T5672] loop5: detected capacity change from 0 to 32768 [ 73.597162][ T5673] loop1: detected capacity change from 0 to 32768 [pid 5673] mount("/dev/loop1", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5674] <... munmap resumed>) = 0 [pid 5674] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5674] ioctl(4, LOOP_SET_FD, 3 [pid 5675] <... write resumed>) = 16777216 [pid 5674] <... ioctl resumed>) = 0 [pid 5674] close(3) = 0 [pid 5675] munmap(0x7fd745acd000, 16777216 [pid 5674] mkdir("./file0", 0777) = 0 [ 73.631194][ T5672] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 73.649385][ T5672] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 73.666694][ T5673] XFS (loop1): DAX unsupported by block device. Turning off DAX. [pid 5674] mount("/dev/loop4", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5676] <... write resumed>) = 16777216 [pid 5676] munmap(0x7fd745acd000, 16777216) = 0 [pid 5676] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5675] <... munmap resumed>) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5675] ioctl(4, LOOP_SET_FD, 3 [pid 5676] <... openat resumed>) = 4 [pid 5676] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5676] close(3) = 0 [pid 5675] <... ioctl resumed>) = 0 [pid 5676] mkdir("./file0", 0777 [pid 5675] close(3 [pid 5676] <... mkdir resumed>) = 0 [pid 5675] <... close resumed>) = 0 [pid 5676] mount("/dev/loop3", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5675] mkdir("./file0", 0777) = 0 [ 73.678288][ T5674] loop4: detected capacity change from 0 to 32768 [ 73.687223][ T5673] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [pid 5675] mount("/dev/loop2", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5677] <... write resumed>) = 16777216 [pid 5677] munmap(0x7fd745acd000, 16777216) = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 73.735403][ T5675] loop2: detected capacity change from 0 to 32768 [ 73.738411][ T5676] loop3: detected capacity change from 0 to 32768 [ 73.754458][ T5672] XFS (loop5): Ending clean mount [ 73.766928][ T5674] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 73.767818][ T5672] XFS (loop5): Quotacheck needed: Please wait. [pid 5677] ioctl(4, LOOP_SET_FD, 3 [pid 5672] <... mount resumed>) = 0 [pid 5672] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5677] <... ioctl resumed>) = 0 [pid 5673] <... mount resumed>) = 0 [pid 5672] <... openat resumed>) = 3 [pid 5677] close(3 [pid 5673] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5672] chdir("./file0" [pid 5677] <... close resumed>) = 0 [pid 5673] <... openat resumed>) = 3 [pid 5672] <... chdir resumed>) = 0 [pid 5677] mkdir("./file0", 0777 [pid 5673] chdir("./file0" [pid 5672] ioctl(4, LOOP_CLR_FD [pid 5677] <... mkdir resumed>) = 0 [pid 5673] <... chdir resumed>) = 0 [pid 5672] <... ioctl resumed>) = 0 [pid 5677] mount("/dev/loop0", "./file0", "xfs", MS_NOSUID|MS_SYNCHRONOUS|MS_SILENT, "pqnoenforce,qnoenforce,grpquota,dax,,nouuid" [pid 5673] ioctl(4, LOOP_CLR_FD [pid 5672] close(4 [pid 5673] <... ioctl resumed>) = 0 [pid 5672] <... close resumed>) = 0 [pid 5673] close(4 [pid 5672] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5673] <... close resumed>) = 0 [pid 5672] <... openat resumed>) = 4 [pid 5673] openat(AT_FDCWD, "/proc/partitions", O_RDONLY [pid 5672] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5673] <... openat resumed>) = 4 [ 73.776847][ T5674] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 73.794486][ T5676] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 73.808006][ T5672] XFS (loop5): Quotacheck: Done. [ 73.812745][ T5673] XFS (loop1): Ending clean mount [ 73.813753][ T5677] loop0: detected capacity change from 0 to 32768 [ 73.819597][ T5673] XFS (loop1): Quotacheck needed: Please wait. [pid 5673] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY [pid 5672] <... openat resumed>) = 5 [pid 5673] <... openat resumed>) = 5 [pid 5672] sendfile(5, 4, [96] [ 73.827417][ T5676] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 73.840701][ T5673] XFS (loop1): Quotacheck: Done. [ 73.847890][ T5675] XFS (loop2): DAX unsupported by block device. Turning off DAX. [pid 5673] sendfile(5, 4, [96] [pid 5672] <... sendfile resumed> => [826], 2160) = 730 [ 73.879388][ T5673] syz-executor824 (5673): drop_caches: 2 [ 73.887890][ T5672] syz-executor824 (5672): drop_caches: 2 [ 73.899054][ T5675] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 73.909894][ T5672] syz-executor824 (5672): drop_caches: 2 [ 73.913270][ T5673] syz-executor824 (5673): drop_caches: 2 [pid 5672] exit_group(0) = ? [pid 5673] <... sendfile resumed> => [826], 2160) = 730 [pid 5672] +++ exited with 0 +++ [pid 5673] exit_group(0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5672, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} --- [pid 5673] <... exit_group resumed>) = ? [pid 5067] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] +++ exited with 0 +++ [pid 5676] <... mount resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5676] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5676] chdir("./file0") = 0 [pid 5676] ioctl(4, LOOP_CLR_FD) = 0 [pid 5676] close(4 [pid 5067] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5673, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} --- [pid 5676] <... close resumed>) = 0 [pid 5676] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5676] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [pid 5676] sendfile(5, 4, [96] [pid 5067] <... openat resumed>) = 3 [ 73.922906][ T5677] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 73.931234][ T5677] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 73.931825][ T5674] XFS (loop4): Ending clean mount [ 73.941966][ T5676] XFS (loop3): Ending clean mount [ 73.951506][ T5676] XFS (loop3): Quotacheck needed: Please wait. [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5067] fstat(3, [pid 5063] <... restart_syscall resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5063] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] lstat("./11/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] fstat(3, [pid 5067] unlink("./11/binderfs" [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5063] getdents64(3, [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./11/binderfs") = 0 [ 73.978996][ T5676] XFS (loop3): Quotacheck: Done. [ 73.985327][ T5674] XFS (loop4): Quotacheck needed: Please wait. [ 73.985906][ T5675] XFS (loop2): Ending clean mount [ 73.999928][ T5675] XFS (loop2): Quotacheck needed: Please wait. [pid 5063] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5675] <... mount resumed>) = 0 [pid 5675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5675] chdir("./file0") = 0 [pid 5675] ioctl(4, LOOP_CLR_FD) = 0 [pid 5675] close(4) = 0 [pid 5675] openat(AT_FDCWD, "/proc/partitions", O_RDONLY) = 4 [pid 5675] openat(AT_FDCWD, "/proc/sys/vm/drop_caches", O_WRONLY) = 5 [ 74.041098][ T5676] ================================================================== [ 74.049213][ T5676] BUG: KASAN: stack-out-of-bounds in xfs_buf_lock+0xd0/0x750 [ 74.051239][ T5677] XFS (loop0): Ending clean mount [ 74.056602][ T5676] Read of size 4 at addr ffffc9000654fbec by task syz-executor824/5676 [ 74.056619][ T5676] [ 74.056624][ T5676] CPU: 0 PID: 5676 Comm: syz-executor824 Not tainted 6.2.0-rc3-syzkaller-00021-g7dd4b804e080 #0 [ 74.056647][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 74.056658][ T5676] Call Trace: [ 74.056664][ T5676] [ 74.056670][ T5676] dump_stack_lvl+0xd1/0x138 [ 74.065432][ T5675] XFS (loop2): Quotacheck: Done. [ 74.069882][ T5676] print_report+0x15e/0x45d [ 74.069916][ T5676] ? xfs_buf_lock+0xd0/0x750 [ 74.069939][ T5676] kasan_report+0xbf/0x1f0 [ 74.086113][ T5675] syz-executor824 (5675): drop_caches: 2 [ 74.092667][ T5676] ? xfs_buf_lock+0xd0/0x750 [ 74.092698][ T5676] kasan_check_range+0x141/0x190 [ 74.099894][ T5675] syz-executor824 (5675): drop_caches: 2 [ 74.103454][ T5676] xfs_buf_lock+0xd0/0x750 [ 74.103481][ T5676] xfs_buf_delwri_submit_buffers+0x131/0xae0 [ 74.103512][ T5676] ? xfs_buf_delwri_submit+0x8a/0x260 [ 74.158479][ T5676] ? xfs_buf_read_uncached+0x2f0/0x2f0 [ 74.163931][ T5676] ? list_lru_walk_one+0xb3/0xe0 [ 74.168858][ T5676] ? lock_downgrade+0x6e0/0x6e0 [ 74.173696][ T5676] xfs_buf_delwri_submit+0x8a/0x260 [ 74.178886][ T5676] ? xfs_buf_delwri_submit_nowait+0x20/0x20 [ 74.184771][ T5676] ? _raw_spin_unlock+0x28/0x40 [ 74.189615][ T5676] ? list_lru_walk_one+0xb3/0xe0 [ 74.194542][ T5676] xfs_qm_shrink_scan+0x1a7/0x370 [ 74.199552][ T5676] ? xfs_buftarg_shrink_scan+0x1d3/0x2c0 [ 74.205175][ T5676] ? xfs_qm_flush_one+0x3b0/0x3b0 [ 74.210190][ T5676] do_shrink_slab+0x464/0xce0 [ 74.214866][ T5676] shrink_slab+0x175/0x660 [ 74.219276][ T5676] ? lock_downgrade+0x6e0/0x6e0 [ 74.224111][ T5676] ? do_shrink_slab+0xce0/0xce0 [ 74.228958][ T5676] ? mem_cgroup_iter+0x291/0x6f0 [ 74.233903][ T5676] drop_slab+0x13a/0x2a0 [ 74.238134][ T5676] drop_caches_sysctl_handler+0xfa/0x110 [ 74.243757][ T5676] proc_sys_call_handler+0x49c/0x6d0 [ 74.249033][ T5676] ? proc_sys_lookup+0x630/0x630 [ 74.253960][ T5676] ? do_sendfile+0xb19/0x1270 [ 74.258626][ T5676] ? do_syscall_64+0x39/0xb0 [ 74.263208][ T5676] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.269267][ T5676] do_iter_readv_writev+0x20b/0x3b0 [ 74.274454][ T5676] ? generic_copy_file_range+0x1d0/0x1d0 [ 74.280074][ T5676] ? bpf_lsm_file_permission+0x9/0x10 [ 74.285435][ T5676] ? security_file_permission+0xaf/0xd0 [ 74.290978][ T5676] do_iter_write+0x182/0x700 [ 74.295561][ T5676] vfs_iter_write+0x74/0xa0 [ 74.300053][ T5676] iter_file_splice_write+0x745/0xc90 [ 74.305438][ T5676] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 74.311405][ T5676] ? add_to_pipe+0x3b0/0x3b0 [ 74.315984][ T5676] ? security_file_permission+0xaf/0xd0 [ 74.321526][ T5676] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 74.327493][ T5676] direct_splice_actor+0x114/0x180 [ 74.332677][ T5676] splice_direct_to_actor+0x335/0x8a0 [ 74.338038][ T5676] ? do_splice_direct+0x280/0x280 [ 74.343065][ T5676] ? folio_flags.constprop.0+0x150/0x150 [ 74.348774][ T5676] ? bpf_lsm_file_permission+0x9/0x10 [ 74.354139][ T5676] ? security_file_permission+0xaf/0xd0 [ 74.359766][ T5676] do_splice_direct+0x1ab/0x280 [ 74.364604][ T5676] ? splice_direct_to_actor+0x8a0/0x8a0 [ 74.370142][ T5676] do_sendfile+0xb19/0x1270 [ 74.374635][ T5676] ? vfs_iocb_iter_write+0x480/0x480 [ 74.379928][ T5676] __x64_sys_sendfile64+0x14d/0x210 [ 74.385120][ T5676] ? __ia32_sys_sendfile+0x220/0x220 [ 74.390398][ T5676] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.395584][ T5676] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.400776][ T5676] ? ptrace_notify+0xfe/0x140 [ 74.405441][ T5676] do_syscall_64+0x39/0xb0 [ 74.409954][ T5676] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.415837][ T5676] RIP: 0033:0x7fd74df22779 [ 74.420241][ T5676] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 74.439834][ T5676] RSP: 002b:00007ffe1c61a0e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 74.448238][ T5676] RAX: ffffffffffffffda RBX: 00000000000114e9 RCX: 00007fd74df22779 [ 74.456218][ T5676] RDX: 0000000020002080 RSI: 0000000000000004 RDI: 0000000000000005 [ 74.464176][ T5676] RBP: 0000000000000000 R08: 00007ffe1c61a110 R09: 00007ffe1c61a110 [ 74.472133][ T5676] R10: 0000000000000870 R11: 0000000000000246 R12: 00007ffe1c61a10c [ 74.480109][ T5676] R13: 00007ffe1c61a140 R14: 00007ffe1c61a120 R15: 000000000000000b [ 74.488072][ T5676] [ 74.491075][ T5676] [ 74.493381][ T5676] The buggy address belongs to the virtual mapping at [ 74.493381][ T5676] [ffffc90006548000, ffffc90006551000) created by: [ 74.493381][ T5676] kernel_clone+0xeb/0x990 [ 74.510816][ T5676] [ 74.513121][ T5676] The buggy address belongs to the physical page: [ 74.519513][ T5676] page:ffffea00008d3f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x234fc [ 74.530005][ T5676] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.537127][ T5676] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 74.545698][ T5676] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 74.554262][ T5676] page dumped because: kasan: bad access detected [ 74.560651][ T5676] page_owner tracks the page as allocated [ 74.566345][ T5676] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 71883428260, free_ts 70232816920 [ 74.584654][ T5676] get_page_from_freelist+0x119c/0x2ce0 [ 74.590189][ T5676] __alloc_pages+0x1cb/0x5b0 [ 74.594771][ T5676] alloc_pages+0x1aa/0x270 [ 74.599174][ T5676] __vmalloc_node_range+0x978/0x13c0 [ 74.604443][ T5676] copy_process+0x12d2/0x7520 [ 74.609109][ T5676] kernel_clone+0xeb/0x990 [ 74.613511][ T5676] kernel_thread+0xb9/0xf0 [ 74.617914][ T5676] kthreadd+0x4f2/0x750 [ 74.622053][ T5676] ret_from_fork+0x1f/0x30 [ 74.626459][ T5676] page last free stack trace: [ 74.631109][ T5676] free_pcp_prepare+0x65c/0xc00 [ 74.635944][ T5676] free_unref_page_list+0x176/0xcd0 [ 74.641129][ T5676] release_pages+0xcb1/0x1330 [ 74.645797][ T5676] tlb_batch_pages_flush+0xa8/0x1a0 [ 74.650982][ T5676] tlb_finish_mmu+0x14b/0x7e0 [ 74.655644][ T5676] exit_mmap+0x202/0x7b0 [ 74.659874][ T5676] __mmput+0x128/0x4c0 [ 74.663925][ T5676] mmput+0x60/0x70 [ 74.667631][ T5676] do_exit+0x9ac/0x2950 [ 74.671779][ T5676] do_group_exit+0xd4/0x2a0 [ 74.676273][ T5676] __x64_sys_exit_group+0x3e/0x50 [ 74.681288][ T5676] do_syscall_64+0x39/0xb0 [ 74.685693][ T5676] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.691574][ T5676] [pid 5675] sendfile(5, 4, [96] => [826], 2160) = 730 [pid 5675] exit_group(0) = ? [pid 5675] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5675, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=29 /* 0.29 s */} --- [pid 5064] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555566c9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./11/binderfs") = 0 [ 74.693881][ T5676] Memory state around the buggy address: [ 74.699490][ T5676] ffffc9000654fa80: 00 00 00 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 00 [ 74.707619][ T5676] ffffc9000654fb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 74.715662][ T5676] >ffffc9000654fb80: 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 04 [ 74.723702][ T5676] ^ [ 74.731137][ T5676] ffffc9000654fc00: f2 04 f2 00 f2 f2 f2 00 f3 f3 f3 00 00 00 00 00 [ 74.739182][ T5676] ffffc9000654fc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 74.747225][ T5676] ================================================================== [ 74.775635][ T5676] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 74.782845][ T5676] CPU: 0 PID: 5676 Comm: syz-executor824 Not tainted 6.2.0-rc3-syzkaller-00021-g7dd4b804e080 #0 [ 74.793266][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 74.803324][ T5676] Call Trace: [ 74.806605][ T5676] [ 74.809539][ T5676] dump_stack_lvl+0xd1/0x138 [ 74.814146][ T5676] panic+0x2cc/0x626 [ 74.818047][ T5676] ? panic_print_sys_info.part.0+0x110/0x110 [ 74.824074][ T5676] ? preempt_schedule_thunk+0x1a/0x20 [ 74.829473][ T5676] ? preempt_schedule_common+0x59/0xc0 [ 74.834972][ T5676] check_panic_on_warn.cold+0x19/0x35 [ 74.840371][ T5676] end_report.part.0+0x36/0x73 [ 74.845158][ T5676] ? xfs_buf_lock+0xd0/0x750 [ 74.849761][ T5676] kasan_report.cold+0xa/0xf [ 74.854373][ T5676] ? xfs_buf_lock+0xd0/0x750 [ 74.858974][ T5676] kasan_check_range+0x141/0x190 [ 74.863915][ T5676] xfs_buf_lock+0xd0/0x750 [ 74.868344][ T5676] xfs_buf_delwri_submit_buffers+0x131/0xae0 [ 74.874361][ T5676] ? xfs_buf_delwri_submit+0x8a/0x260 [ 74.879745][ T5676] ? xfs_buf_read_uncached+0x2f0/0x2f0 [ 74.885221][ T5676] ? list_lru_walk_one+0xb3/0xe0 [ 74.890169][ T5676] ? lock_downgrade+0x6e0/0x6e0 [ 74.895042][ T5676] xfs_buf_delwri_submit+0x8a/0x260 [ 74.900255][ T5676] ? xfs_buf_delwri_submit_nowait+0x20/0x20 [ 74.906161][ T5676] ? _raw_spin_unlock+0x28/0x40 [ 74.911023][ T5676] ? list_lru_walk_one+0xb3/0xe0 [ 74.915975][ T5676] xfs_qm_shrink_scan+0x1a7/0x370 [ 74.921017][ T5676] ? xfs_buftarg_shrink_scan+0x1d3/0x2c0 [ 74.926661][ T5676] ? xfs_qm_flush_one+0x3b0/0x3b0 [ 74.931696][ T5676] do_shrink_slab+0x464/0xce0 [ 74.936397][ T5676] shrink_slab+0x175/0x660 [ 74.940838][ T5676] ? lock_downgrade+0x6e0/0x6e0 [ 74.945698][ T5676] ? do_shrink_slab+0xce0/0xce0 [ 74.950578][ T5676] ? mem_cgroup_iter+0x291/0x6f0 [ 74.955526][ T5676] drop_slab+0x13a/0x2a0 [ 74.959776][ T5676] drop_caches_sysctl_handler+0xfa/0x110 [ 74.965420][ T5676] proc_sys_call_handler+0x49c/0x6d0 [ 74.970819][ T5676] ? proc_sys_lookup+0x630/0x630 [ 74.975776][ T5676] ? do_sendfile+0xb19/0x1270 [ 74.980469][ T5676] ? do_syscall_64+0x39/0xb0 [ 74.985081][ T5676] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.991171][ T5676] do_iter_readv_writev+0x20b/0x3b0 [ 74.996398][ T5676] ? generic_copy_file_range+0x1d0/0x1d0 [ 75.002025][ T5676] ? bpf_lsm_file_permission+0x9/0x10 [ 75.007415][ T5676] ? security_file_permission+0xaf/0xd0 [ 75.012991][ T5676] do_iter_write+0x182/0x700 [ 75.017593][ T5676] vfs_iter_write+0x74/0xa0 [ 75.022088][ T5676] iter_file_splice_write+0x745/0xc90 [ 75.027485][ T5676] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 75.033488][ T5676] ? add_to_pipe+0x3b0/0x3b0 [ 75.038107][ T5676] ? security_file_permission+0xaf/0xd0 [ 75.043678][ T5676] ? page_cache_pipe_buf_confirm+0x5b0/0x5b0 [ 75.049686][ T5676] direct_splice_actor+0x114/0x180 [ 75.054810][ T5676] splice_direct_to_actor+0x335/0x8a0 [ 75.060182][ T5676] ? do_splice_direct+0x280/0x280 [ 75.065193][ T5676] ? folio_flags.constprop.0+0x150/0x150 [ 75.070835][ T5676] ? bpf_lsm_file_permission+0x9/0x10 [ 75.076195][ T5676] ? security_file_permission+0xaf/0xd0 [ 75.081731][ T5676] do_splice_direct+0x1ab/0x280 [ 75.086578][ T5676] ? splice_direct_to_actor+0x8a0/0x8a0 [ 75.092152][ T5676] do_sendfile+0xb19/0x1270 [ 75.096671][ T5676] ? vfs_iocb_iter_write+0x480/0x480 [ 75.101960][ T5676] __x64_sys_sendfile64+0x14d/0x210 [ 75.107181][ T5676] ? __ia32_sys_sendfile+0x220/0x220 [ 75.112494][ T5676] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.117706][ T5676] ? _raw_spin_unlock_irq+0x2e/0x50 [ 75.122915][ T5676] ? ptrace_notify+0xfe/0x140 [ 75.127588][ T5676] do_syscall_64+0x39/0xb0 [ 75.132046][ T5676] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.137928][ T5676] RIP: 0033:0x7fd74df22779 [ 75.142340][ T5676] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 01 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 75.161999][ T5676] RSP: 002b:00007ffe1c61a0e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 75.170428][ T5676] RAX: ffffffffffffffda RBX: 00000000000114e9 RCX: 00007fd74df22779 [ 75.178422][ T5676] RDX: 0000000020002080 RSI: 0000000000000004 RDI: 0000000000000005 [ 75.186404][ T5676] RBP: 0000000000000000 R08: 00007ffe1c61a110 R09: 00007ffe1c61a110 [ 75.194373][ T5676] R10: 0000000000000870 R11: 0000000000000246 R12: 00007ffe1c61a10c [ 75.202339][ T5676] R13: 00007ffe1c61a140 R14: 00007ffe1c61a120 R15: 000000000000000b [ 75.210340][ T5676] [ 75.214219][ T5676] Kernel Offset: disabled [ 75.218535][ T5676] Rebooting in 86400 seconds..