./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3689054213 <...> forked to background, child pid 4657 no interfaces have a carrier [ 50.258114][ T4658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.279708][ T4658] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.157' (ECDSA) to the list of known hosts. execve("./syz-executor3689054213", ["./syz-executor3689054213"], 0x7fffea449c60 /* 10 vars */) = 0 brk(NULL) = 0x555556b7f000 brk(0x555556b7fc40) = 0x555556b7fc40 arch_prctl(ARCH_SET_FS, 0x555556b7f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3689054213", 4096) = 28 brk(0x555556ba0c40) = 0x555556ba0c40 brk(0x555556ba1000) = 0x555556ba1000 mprotect(0x7fbb1faad000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 5084 mkdir("./syzkaller.JDOe9A", 0700) = 0 chmod("./syzkaller.JDOe9A", 0777) = 0 chdir("./syzkaller.JDOe9A") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5085 ./strace-static-x86_64: Process 5085 attached [pid 5085] chdir("./0") = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5085] memfd_create("syzkaller", 0) = 3 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 syzkaller login: [ 74.852525][ T5085] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5085 'syz-executor368' [pid 5085] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5085] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5085] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5085] close(3) = 0 [pid 5085] mkdir("./file0", 0777) = 0 [ 75.329405][ T5085] loop0: detected capacity change from 0 to 65536 [ 75.340296][ T5085] XFS: attr2 mount option is deprecated. [ 75.345976][ T5085] XFS: ikeep mount option is deprecated. [ 75.360654][ T5085] XFS (loop0): Deprecated V4 format (crc=0) will not be supported after September 2030. [ 75.371048][ T5085] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 75.380585][ T5085] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [ 75.415164][ T5085] XFS (loop0): Ending clean mount [ 75.425822][ T5085] XFS (loop0): Quotacheck needed: Please wait. [pid 5085] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5085] chdir("./file0") = 0 [pid 5085] ioctl(4, LOOP_CLR_FD) = 0 [pid 5085] close(4) = 0 [pid 5085] creat("./bus", 000) = 4 [pid 5085] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5085] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5085] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5085] write(6, "15", 2) = 2 [ 75.453311][ T5085] XFS (loop0): Quotacheck: Done. [ 75.459082][ T5085] xfs filesystem being mounted at /root/syzkaller.JDOe9A/0/file0 supports timestamps until 2038 (0x7fffffff) [pid 5085] lchown("./bus", 3327, 0) = 0 [pid 5085] exit_group(0) = ? [pid 5085] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=47 /* 0.47 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 [ 75.510499][ T5085] ERROR: Out of memory at tomoyo_memory_ok. [ 75.535726][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5095 ./strace-static-x86_64: Process 5095 attached [pid 5095] chdir("./1") = 0 [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] setpgid(0, 0) = 0 [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1000", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5095] memfd_create("syzkaller", 0) = 3 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5095] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5095] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5095] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5095] close(3) = 0 [pid 5095] mkdir("./file0", 0777) = 0 [ 76.202900][ T5095] loop0: detected capacity change from 0 to 65536 [ 76.214612][ T5095] XFS: attr2 mount option is deprecated. [ 76.220364][ T5095] XFS: ikeep mount option is deprecated. [ 76.229908][ T5095] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 76.239109][ T5095] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5095] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5095] chdir("./file0") = 0 [pid 5095] ioctl(4, LOOP_CLR_FD) = 0 [pid 5095] close(4) = 0 [pid 5095] creat("./bus", 000) = 4 [pid 5095] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5095] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5095] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5095] write(6, "15", 2) = 2 [ 76.276408][ T5095] XFS (loop0): Ending clean mount [ 76.283309][ T5095] XFS (loop0): Quotacheck needed: Please wait. [ 76.306538][ T5095] XFS (loop0): Quotacheck: Done. [ 76.311825][ T5095] xfs filesystem being mounted at /root/syzkaller.JDOe9A/1/file0 supports timestamps until 2038 (0x7fffffff) [pid 5095] lchown("./bus", 3327, 0) = 0 [pid 5095] exit_group(0) = ? [pid 5095] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=49 /* 0.49 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 [ 76.348412][ T5095] ERROR: Out of memory at tomoyo_memory_ok. [ 76.371367][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5104 ./strace-static-x86_64: Process 5104 attached [pid 5104] chdir("./2") = 0 [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5104] setpgid(0, 0) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5104] write(3, "1000", 4) = 4 [pid 5104] close(3) = 0 [pid 5104] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5104] memfd_create("syzkaller", 0) = 3 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5104] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5104] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5104] close(3) = 0 [pid 5104] mkdir("./file0", 0777) = 0 [ 76.993253][ T5104] loop0: detected capacity change from 0 to 65536 [ 77.003214][ T5104] XFS: attr2 mount option is deprecated. [ 77.008897][ T5104] XFS: ikeep mount option is deprecated. [ 77.018479][ T5104] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 77.027128][ T5104] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5104] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5104] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5104] chdir("./file0") = 0 [pid 5104] ioctl(4, LOOP_CLR_FD) = 0 [pid 5104] close(4) = 0 [pid 5104] creat("./bus", 000) = 4 [pid 5104] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5104] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5104] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5104] write(6, "15", 2) = 2 [pid 5104] lchown("./bus", 3327, 0) = 0 [pid 5104] exit_group(0) = ? [pid 5104] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5104, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=38 /* 0.38 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 77.062337][ T5104] XFS (loop0): Ending clean mount [ 77.069932][ T5104] XFS (loop0): Quotacheck needed: Please wait. [ 77.089871][ T5104] XFS (loop0): Quotacheck: Done. [ 77.095002][ T5104] xfs filesystem being mounted at /root/syzkaller.JDOe9A/2/file0 supports timestamps until 2038 (0x7fffffff) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 [ 77.145538][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5113 ./strace-static-x86_64: Process 5113 attached [pid 5113] chdir("./3") = 0 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3) = 0 [pid 5113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5113] memfd_create("syzkaller", 0) = 3 [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5113] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5113] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5113] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5113] close(3) = 0 [pid 5113] mkdir("./file0", 0777) = 0 [ 77.783423][ T5113] loop0: detected capacity change from 0 to 65536 [ 77.794062][ T5113] XFS: attr2 mount option is deprecated. [ 77.799880][ T5113] XFS: ikeep mount option is deprecated. [ 77.808843][ T5113] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 77.817432][ T5113] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5113] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5113] chdir("./file0") = 0 [pid 5113] ioctl(4, LOOP_CLR_FD) = 0 [pid 5113] close(4) = 0 [pid 5113] creat("./bus", 000) = 4 [pid 5113] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5113] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5113] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5113] write(6, "15", 2) = 2 [pid 5113] lchown("./bus", 3327, 0) = 0 [pid 5113] exit_group(0) = ? [pid 5113] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5113, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=42 /* 0.42 s */} --- umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./3/binderfs") = 0 [ 77.850527][ T5113] XFS (loop0): Ending clean mount [ 77.857767][ T5113] XFS (loop0): Quotacheck needed: Please wait. [ 77.879807][ T5113] XFS (loop0): Quotacheck: Done. [ 77.884918][ T5113] xfs filesystem being mounted at /root/syzkaller.JDOe9A/3/file0 supports timestamps until 2038 (0x7fffffff) [ 77.928872][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5122 ./strace-static-x86_64: Process 5122 attached [pid 5122] chdir("./4") = 0 [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5122] setpgid(0, 0) = 0 [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5122] write(3, "1000", 4) = 4 [pid 5122] close(3) = 0 [pid 5122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5122] memfd_create("syzkaller", 0) = 3 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5122] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5122] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5122] close(3) = 0 [pid 5122] mkdir("./file0", 0777) = 0 [ 78.574717][ T5122] loop0: detected capacity change from 0 to 65536 [ 78.584663][ T5122] XFS: attr2 mount option is deprecated. [ 78.590858][ T5122] XFS: ikeep mount option is deprecated. [ 78.600205][ T5122] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 78.608637][ T5122] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5122] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5122] chdir("./file0") = 0 [pid 5122] ioctl(4, LOOP_CLR_FD) = 0 [pid 5122] close(4) = 0 [pid 5122] creat("./bus", 000) = 4 [pid 5122] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5122] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5122] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5122] write(6, "15", 2) = 2 [pid 5122] lchown("./bus", 3327, 0) = 0 [pid 5122] exit_group(0) = ? [pid 5122] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=43 /* 0.43 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./4/binderfs") = 0 [ 78.646141][ T5122] XFS (loop0): Ending clean mount [ 78.654042][ T5122] XFS (loop0): Quotacheck needed: Please wait. [ 78.673585][ T5122] XFS (loop0): Quotacheck: Done. [ 78.678723][ T5122] xfs filesystem being mounted at /root/syzkaller.JDOe9A/4/file0 supports timestamps until 2038 (0x7fffffff) [ 78.717183][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5131 ./strace-static-x86_64: Process 5131 attached [pid 5131] chdir("./5") = 0 [pid 5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5131] setpgid(0, 0) = 0 [pid 5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5131] write(3, "1000", 4) = 4 [pid 5131] close(3) = 0 [pid 5131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5131] memfd_create("syzkaller", 0) = 3 [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5131] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5131] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5131] close(3) = 0 [pid 5131] mkdir("./file0", 0777) = 0 [ 79.348393][ T5131] loop0: detected capacity change from 0 to 65536 [ 79.357720][ T5131] XFS: attr2 mount option is deprecated. [ 79.363513][ T5131] XFS: ikeep mount option is deprecated. [ 79.373137][ T5131] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 79.381826][ T5131] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5131] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5131] chdir("./file0") = 0 [pid 5131] ioctl(4, LOOP_CLR_FD) = 0 [pid 5131] close(4) = 0 [pid 5131] creat("./bus", 000) = 4 [pid 5131] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5131] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5131] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5131] write(6, "15", 2) = 2 [pid 5131] lchown("./bus", 3327, 0) = 0 [pid 5131] exit_group(0) = ? [pid 5131] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5131, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=45 /* 0.45 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 79.417011][ T5131] XFS (loop0): Ending clean mount [ 79.424011][ T5131] XFS (loop0): Quotacheck needed: Please wait. [ 79.447998][ T5131] XFS (loop0): Quotacheck: Done. [ 79.454001][ T5131] xfs filesystem being mounted at /root/syzkaller.JDOe9A/5/file0 supports timestamps until 2038 (0x7fffffff) lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./5/binderfs") = 0 [ 79.500443][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5140 ./strace-static-x86_64: Process 5140 attached [pid 5140] chdir("./6") = 0 [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5140] setpgid(0, 0) = 0 [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5140] write(3, "1000", 4) = 4 [pid 5140] close(3) = 0 [pid 5140] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5140] memfd_create("syzkaller", 0) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5140] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5140] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5140] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5140] close(3) = 0 [pid 5140] mkdir("./file0", 0777) = 0 [ 80.267626][ T5140] loop0: detected capacity change from 0 to 65536 [ 80.277834][ T5140] XFS: attr2 mount option is deprecated. [ 80.284136][ T5140] XFS: ikeep mount option is deprecated. [ 80.293704][ T5140] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 80.302378][ T5140] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5140] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5140] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5140] chdir("./file0") = 0 [pid 5140] ioctl(4, LOOP_CLR_FD) = 0 [pid 5140] close(4) = 0 [pid 5140] creat("./bus", 000) = 4 [pid 5140] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5140] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5140] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5140] write(6, "15", 2) = 2 [pid 5140] lchown("./bus", 3327, 0) = 0 [pid 5140] exit_group(0) = ? [pid 5140] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=46 /* 0.46 s */} --- umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 80.337277][ T5140] XFS (loop0): Ending clean mount [ 80.344745][ T5140] XFS (loop0): Quotacheck needed: Please wait. [ 80.365262][ T5140] XFS (loop0): Quotacheck: Done. [ 80.370558][ T5140] xfs filesystem being mounted at /root/syzkaller.JDOe9A/6/file0 supports timestamps until 2038 (0x7fffffff) lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./6/binderfs") = 0 [ 80.411138][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5149 ./strace-static-x86_64: Process 5149 attached [pid 5149] chdir("./7") = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5149] write(3, "1000", 4) = 4 [pid 5149] close(3) = 0 [pid 5149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5149] memfd_create("syzkaller", 0) = 3 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5149] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5149] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5149] close(3) = 0 [pid 5149] mkdir("./file0", 0777) = 0 [ 81.054883][ T5149] loop0: detected capacity change from 0 to 65536 [ 81.064606][ T5149] XFS: attr2 mount option is deprecated. [ 81.070380][ T5149] XFS: ikeep mount option is deprecated. [ 81.079570][ T5149] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 81.087830][ T5149] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5149] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5149] chdir("./file0") = 0 [pid 5149] ioctl(4, LOOP_CLR_FD) = 0 [pid 5149] close(4) = 0 [pid 5149] creat("./bus", 000) = 4 [pid 5149] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5149] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5149] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5149] write(6, "15", 2) = 2 [pid 5149] lchown("./bus", 3327, 0) = 0 [pid 5149] exit_group(0) = ? [pid 5149] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=40 /* 0.40 s */} --- [ 81.122527][ T5149] XFS (loop0): Ending clean mount [ 81.129762][ T5149] XFS (loop0): Quotacheck needed: Please wait. [ 81.150547][ T5149] XFS (loop0): Quotacheck: Done. [ 81.155640][ T5149] xfs filesystem being mounted at /root/syzkaller.JDOe9A/7/file0 supports timestamps until 2038 (0x7fffffff) umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./7/binderfs") = 0 [ 81.208481][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5158 ./strace-static-x86_64: Process 5158 attached [pid 5158] chdir("./8") = 0 [pid 5158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5158] setpgid(0, 0) = 0 [pid 5158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5158] write(3, "1000", 4) = 4 [pid 5158] close(3) = 0 [pid 5158] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5158] memfd_create("syzkaller", 0) = 3 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5158] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5158] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5158] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5158] close(3) = 0 [pid 5158] mkdir("./file0", 0777) = 0 [ 81.897926][ T5158] loop0: detected capacity change from 0 to 65536 [ 81.908645][ T5158] XFS: attr2 mount option is deprecated. [ 81.914984][ T5158] XFS: ikeep mount option is deprecated. [ 81.924791][ T5158] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 81.933480][ T5158] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5158] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5158] chdir("./file0") = 0 [pid 5158] ioctl(4, LOOP_CLR_FD) = 0 [pid 5158] close(4) = 0 [pid 5158] creat("./bus", 000) = 4 [pid 5158] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5158] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5158] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5158] write(6, "15", 2) = 2 [pid 5158] lchown("./bus", 3327, 0) = 0 [pid 5158] exit_group(0) = ? [pid 5158] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5158, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=47 /* 0.47 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 [ 81.970578][ T5158] XFS (loop0): Ending clean mount [ 81.977318][ T5158] XFS (loop0): Quotacheck needed: Please wait. [ 81.998927][ T5158] XFS (loop0): Quotacheck: Done. [ 82.004475][ T5158] xfs filesystem being mounted at /root/syzkaller.JDOe9A/8/file0 supports timestamps until 2038 (0x7fffffff) umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./8/binderfs") = 0 [ 82.054538][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5167 ./strace-static-x86_64: Process 5167 attached [pid 5167] chdir("./9") = 0 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5167] setpgid(0, 0) = 0 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5167] write(3, "1000", 4) = 4 [pid 5167] close(3) = 0 [pid 5167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5167] memfd_create("syzkaller", 0) = 3 [pid 5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5167] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5167] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5167] close(3) = 0 [pid 5167] mkdir("./file0", 0777) = 0 [ 82.692285][ T5167] loop0: detected capacity change from 0 to 65536 [ 82.702302][ T5167] XFS: attr2 mount option is deprecated. [ 82.707975][ T5167] XFS: ikeep mount option is deprecated. [ 82.717387][ T5167] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 82.725878][ T5167] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5167] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5167] chdir("./file0") = 0 [pid 5167] ioctl(4, LOOP_CLR_FD) = 0 [pid 5167] close(4) = 0 [pid 5167] creat("./bus", 000) = 4 [pid 5167] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5167] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5167] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5167] write(6, "15", 2) = 2 [pid 5167] lchown("./bus", 3327, 0) = 0 [pid 5167] exit_group(0) = ? [pid 5167] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=45 /* 0.45 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 82.759678][ T5167] XFS (loop0): Ending clean mount [ 82.766329][ T5167] XFS (loop0): Quotacheck needed: Please wait. [ 82.787399][ T5167] XFS (loop0): Quotacheck: Done. [ 82.792835][ T5167] xfs filesystem being mounted at /root/syzkaller.JDOe9A/9/file0 supports timestamps until 2038 (0x7fffffff) umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./9/binderfs") = 0 [ 82.845600][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5176 ./strace-static-x86_64: Process 5176 attached [pid 5176] chdir("./10") = 0 [pid 5176] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5176] setpgid(0, 0) = 0 [pid 5176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5176] write(3, "1000", 4) = 4 [pid 5176] close(3) = 0 [pid 5176] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5176] memfd_create("syzkaller", 0) = 3 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5176] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5176] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5176] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5176] close(3) = 0 [pid 5176] mkdir("./file0", 0777) = 0 [ 83.469662][ T5176] loop0: detected capacity change from 0 to 65536 [ 83.480187][ T5176] XFS: attr2 mount option is deprecated. [ 83.485872][ T5176] XFS: ikeep mount option is deprecated. [ 83.495393][ T5176] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 83.503966][ T5176] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5176] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5176] chdir("./file0") = 0 [pid 5176] ioctl(4, LOOP_CLR_FD) = 0 [pid 5176] close(4) = 0 [pid 5176] creat("./bus", 000) = 4 [pid 5176] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5176] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5176] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5176] write(6, "15", 2) = 2 [pid 5176] lchown("./bus", 3327, 0) = 0 [pid 5176] exit_group(0) = ? [pid 5176] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5176, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=42 /* 0.42 s */} --- umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 83.537842][ T5176] XFS (loop0): Ending clean mount [ 83.545494][ T5176] XFS (loop0): Quotacheck needed: Please wait. [ 83.567252][ T5176] XFS (loop0): Quotacheck: Done. [ 83.572535][ T5176] xfs filesystem being mounted at /root/syzkaller.JDOe9A/10/file0 supports timestamps until 2038 (0x7fffffff) unlink("./10/binderfs") = 0 [ 83.620308][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5185 ./strace-static-x86_64: Process 5185 attached [pid 5185] chdir("./11") = 0 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5185] setpgid(0, 0) = 0 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5185] write(3, "1000", 4) = 4 [pid 5185] close(3) = 0 [pid 5185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5185] memfd_create("syzkaller", 0) = 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5185] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5185] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5185] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5185] close(3) = 0 [pid 5185] mkdir("./file0", 0777) = 0 [ 84.243172][ T5185] loop0: detected capacity change from 0 to 65536 [ 84.251998][ T5185] XFS: attr2 mount option is deprecated. [ 84.258027][ T5185] XFS: ikeep mount option is deprecated. [ 84.268111][ T5185] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 84.276412][ T5185] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5185] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5185] chdir("./file0") = 0 [pid 5185] ioctl(4, LOOP_CLR_FD) = 0 [pid 5185] close(4) = 0 [pid 5185] creat("./bus", 000) = 4 [pid 5185] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5185] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5185] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5185] write(6, "15", 2) = 2 [pid 5185] lchown("./bus", 3327, 0) = 0 [pid 5185] exit_group(0) = ? [pid 5185] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=45 /* 0.45 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 84.309220][ T5185] XFS (loop0): Ending clean mount [ 84.316148][ T5185] XFS (loop0): Quotacheck needed: Please wait. [ 84.338851][ T5185] XFS (loop0): Quotacheck: Done. [ 84.344114][ T5185] xfs filesystem being mounted at /root/syzkaller.JDOe9A/11/file0 supports timestamps until 2038 (0x7fffffff) unlink("./11/binderfs") = 0 [ 84.391414][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5194 ./strace-static-x86_64: Process 5194 attached [pid 5194] chdir("./12") = 0 [pid 5194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5194] setpgid(0, 0) = 0 [pid 5194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5194] write(3, "1000", 4) = 4 [pid 5194] close(3) = 0 [pid 5194] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5194] memfd_create("syzkaller", 0) = 3 [pid 5194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5194] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5194] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5194] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5194] close(3) = 0 [pid 5194] mkdir("./file0", 0777) = 0 [ 85.094646][ T5194] loop0: detected capacity change from 0 to 65536 [ 85.105452][ T5194] XFS: attr2 mount option is deprecated. [ 85.111221][ T5194] XFS: ikeep mount option is deprecated. [ 85.120671][ T5194] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 85.129231][ T5194] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5194] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5194] chdir("./file0") = 0 [pid 5194] ioctl(4, LOOP_CLR_FD) = 0 [pid 5194] close(4) = 0 [pid 5194] creat("./bus", 000) = 4 [pid 5194] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5194] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5194] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5194] write(6, "15", 2) = 2 [pid 5194] lchown("./bus", 3327, 0) = 0 [pid 5194] exit_group(0) = ? [pid 5194] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5194, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=44 /* 0.44 s */} --- umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./12/binderfs") = 0 [ 85.164677][ T5194] XFS (loop0): Ending clean mount [ 85.171586][ T5194] XFS (loop0): Quotacheck needed: Please wait. [ 85.193417][ T5194] XFS (loop0): Quotacheck: Done. [ 85.198636][ T5194] xfs filesystem being mounted at /root/syzkaller.JDOe9A/12/file0 supports timestamps until 2038 (0x7fffffff) [ 85.240609][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5203 ./strace-static-x86_64: Process 5203 attached [pid 5203] chdir("./13") = 0 [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5203] setpgid(0, 0) = 0 [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5203] write(3, "1000", 4) = 4 [pid 5203] close(3) = 0 [pid 5203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5203] memfd_create("syzkaller", 0) = 3 [pid 5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5203] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5203] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5203] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5203] close(3) = 0 [pid 5203] mkdir("./file0", 0777) = 0 [ 85.882896][ T5203] loop0: detected capacity change from 0 to 65536 [ 85.892290][ T5203] XFS: attr2 mount option is deprecated. [ 85.898074][ T5203] XFS: ikeep mount option is deprecated. [ 85.907367][ T5203] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 85.916116][ T5203] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5203] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5203] chdir("./file0") = 0 [pid 5203] ioctl(4, LOOP_CLR_FD) = 0 [pid 5203] close(4) = 0 [pid 5203] creat("./bus", 000) = 4 [pid 5203] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5203] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5203] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5203] write(6, "15", 2) = 2 [pid 5203] lchown("./bus", 3327, 0) = 0 [pid 5203] exit_group(0) = ? [pid 5203] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5203, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=38 /* 0.38 s */} --- umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 85.949497][ T5203] XFS (loop0): Ending clean mount [ 85.956718][ T5203] XFS (loop0): Quotacheck needed: Please wait. [ 85.979658][ T5203] XFS (loop0): Quotacheck: Done. [ 85.984799][ T5203] xfs filesystem being mounted at /root/syzkaller.JDOe9A/13/file0 supports timestamps until 2038 (0x7fffffff) unlink("./13/binderfs") = 0 [ 86.031147][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5212 ./strace-static-x86_64: Process 5212 attached [pid 5212] chdir("./14") = 0 [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5212] setpgid(0, 0) = 0 [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5212] write(3, "1000", 4) = 4 [pid 5212] close(3) = 0 [pid 5212] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5212] memfd_create("syzkaller", 0) = 3 [pid 5212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [ 86.511566][ T7] cfg80211: failed to load regulatory.db [pid 5212] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5212] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5212] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5212] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5212] close(3) = 0 [pid 5212] mkdir("./file0", 0777) = 0 [ 86.718125][ T5212] loop0: detected capacity change from 0 to 65536 [ 86.731706][ T5212] XFS: attr2 mount option is deprecated. [ 86.737463][ T5212] XFS: ikeep mount option is deprecated. [ 86.789312][ T5212] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 86.797909][ T5212] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5212] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5212] chdir("./file0") = 0 [pid 5212] ioctl(4, LOOP_CLR_FD) = 0 [pid 5212] close(4) = 0 [pid 5212] creat("./bus", 000) = 4 [pid 5212] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5212] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5212] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5212] write(6, "15", 2) = 2 [pid 5212] lchown("./bus", 3327, 0) = 0 [ 86.870232][ T5212] XFS (loop0): Ending clean mount [ 86.877208][ T5212] XFS (loop0): Quotacheck needed: Please wait. [ 86.901612][ T5212] XFS (loop0): Quotacheck: Done. [ 86.907388][ T5212] xfs filesystem being mounted at /root/syzkaller.JDOe9A/14/file0 supports timestamps until 2038 (0x7fffffff) [pid 5212] exit_group(0) = ? [pid 5212] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5212, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=38 /* 0.38 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./14/binderfs") = 0 [ 86.970676][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5221 ./strace-static-x86_64: Process 5221 attached [pid 5221] chdir("./15") = 0 [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5221] setpgid(0, 0) = 0 [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5221] write(3, "1000", 4) = 4 [pid 5221] close(3) = 0 [pid 5221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5221] memfd_create("syzkaller", 0) = 3 [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5221] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5221] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5221] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5221] close(3) = 0 [pid 5221] mkdir("./file0", 0777) = 0 [ 87.733520][ T5221] loop0: detected capacity change from 0 to 65536 [ 87.742492][ T5221] XFS: attr2 mount option is deprecated. [ 87.748195][ T5221] XFS: ikeep mount option is deprecated. [ 87.757738][ T5221] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 87.766401][ T5221] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5221] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5221] chdir("./file0") = 0 [pid 5221] ioctl(4, LOOP_CLR_FD) = 0 [pid 5221] close(4) = 0 [pid 5221] creat("./bus", 000) = 4 [pid 5221] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5221] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5221] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5221] write(6, "15", 2) = 2 [pid 5221] lchown("./bus", 3327, 0) = 0 [pid 5221] exit_group(0) = ? [pid 5221] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=40 /* 0.40 s */} --- umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556b80620 /* 4 entries */, 32768) = 112 umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./15/binderfs") = 0 [ 87.801092][ T5221] XFS (loop0): Ending clean mount [ 87.807796][ T5221] XFS (loop0): Quotacheck needed: Please wait. [ 87.829236][ T5221] XFS (loop0): Quotacheck: Done. [ 87.834416][ T5221] xfs filesystem being mounted at /root/syzkaller.JDOe9A/15/file0 supports timestamps until 2038 (0x7fffffff) [ 87.864130][ T5084] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556b88660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556b88660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file0") = 0 getdents64(3, 0x555556b80620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b7f5d0) = 5230 ./strace-static-x86_64: Process 5230 attached [pid 5230] chdir("./16") = 0 [pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5230] setpgid(0, 0) = 0 [pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5230] write(3, "1000", 4) = 4 [pid 5230] close(3) = 0 [pid 5230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5230] memfd_create("syzkaller", 0) = 3 [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb175e6000 [pid 5230] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432 [pid 5230] munmap(0x7fbb175e6000, 33554432) = 0 [pid 5230] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5230] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5230] close(3) = 0 [pid 5230] mkdir("./file0", 0777) = 0 [ 88.496240][ T5230] loop0: detected capacity change from 0 to 65536 [ 88.506056][ T5230] XFS: attr2 mount option is deprecated. [ 88.511919][ T5230] XFS: ikeep mount option is deprecated. [ 88.521876][ T5230] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 88.530581][ T5230] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [pid 5230] mount("/dev/loop0", "./file0", "xfs", 0, "pqnoenforce,attr2,ikeep,wsync,uquota,dax,,nouuid") = 0 [pid 5230] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5230] chdir("./file0") = 0 [pid 5230] ioctl(4, LOOP_CLR_FD) = 0 [pid 5230] close(4) = 0 [pid 5230] creat("./bus", 000) = 4 [pid 5230] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 5 [pid 5230] getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=0, uid=3327, gid=4294967040}, [12]) = 0 [pid 5230] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5230] write(6, "15", 2) = 2 [ 88.565644][ T5230] XFS (loop0): Ending clean mount [ 88.572514][ T5230] XFS (loop0): Quotacheck needed: Please wait. [ 88.594830][ T5230] XFS (loop0): Quotacheck: Done. [ 88.599996][ T5230] xfs filesystem being mounted at /root/syzkaller.JDOe9A/16/file0 supports timestamps until 2038 (0x7fffffff) [ 88.632136][ T5230] FAULT_INJECTION: forcing a failure. [ 88.632136][ T5230] name failslab, interval 1, probability 0, space 0, times 0 [ 88.645267][ T5230] CPU: 0 PID: 5230 Comm: syz-executor368 Not tainted 6.2.0-next-20230303-syzkaller #0 [ 88.654856][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 88.664993][ T5230] Call Trace: [ 88.668276][ T5230] [ 88.671228][ T5230] dump_stack_lvl+0x136/0x150 [ 88.675951][ T5230] should_fail_ex+0x4a3/0x5b0 [ 88.680663][ T5230] should_failslab+0x9/0x20 [ 88.685183][ T5230] kmem_cache_alloc+0x63/0x320 [ 88.689967][ T5230] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 88.696254][ T5230] radix_tree_insert+0x23f/0x640 [ 88.701256][ T5230] xfs_qm_dqget_cache_insert.constprop.0+0x38/0x430 [ 88.707906][ T5230] xfs_qm_dqget+0x16e/0x4b0 [ 88.712470][ T5230] ? xfs_dquot_to_disk+0x750/0x750 [ 88.717609][ T5230] ? map_id_up+0x2f0/0x2f0 [ 88.722072][ T5230] ? rcu_read_lock_sched_held+0x3e/0x70 [ 88.727663][ T5230] xfs_qm_vop_dqalloc+0x473/0xfe0 [ 88.732743][ T5230] ? xfs_qm_mount_quotas+0x690/0x690 [ 88.738071][ T5230] ? xfs_attr_get+0x3ba/0x510 [ 88.742777][ T5230] ? rcu_read_lock_sched_held+0x3e/0x70 [ 88.748339][ T5230] ? from_kgid+0x8b/0xd0 [ 88.752610][ T5230] ? from_vfsuid+0x10f/0x170 [ 88.757211][ T5230] ? make_vfsuid+0x170/0x170 [ 88.761811][ T5230] ? apparmor_capable+0x1dc/0x460 [ 88.767132][ T5230] xfs_setattr_nonsize+0xab1/0xd30 [ 88.772280][ T5230] ? xfs_initxattrs+0x1f0/0x1f0 [ 88.777142][ T5230] ? setattr_prepare+0x140/0x9b0 [ 88.782113][ T5230] ? xfs_vn_change_ok+0xc0/0x160 [ 88.787087][ T5230] xfs_vn_setattr+0x1fb/0x260 [ 88.791806][ T5230] ? xfs_vn_change_ok+0x160/0x160 [ 88.796854][ T5230] ? make_vfsgid+0x170/0x170 [ 88.801494][ T5230] ? xfs_vn_change_ok+0x160/0x160 [ 88.806551][ T5230] notify_change+0xb2c/0x1180 [ 88.811242][ T5230] ? from_vfsuid+0x10f/0x170 [ 88.815850][ T5230] ? chown_common+0x57f/0x650 [ 88.820537][ T5230] chown_common+0x57f/0x650 [ 88.825056][ T5230] ? __ia32_sys_chmod+0x80/0x80 [ 88.829927][ T5230] ? lock_release+0x780/0x780 [ 88.834653][ T5230] ? __mnt_want_write+0x3f/0x2e0 [ 88.839667][ T5230] ? __mnt_want_write+0x1fe/0x2e0 [ 88.844758][ T5230] do_fchownat+0x12a/0x1e0 [ 88.849189][ T5230] ? chown_common+0x650/0x650 [ 88.853933][ T5230] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.859200][ T5230] ? lockdep_hardirqs_on+0x7d/0x100 [ 88.864443][ T5230] ? _raw_spin_unlock_irq+0x2e/0x50 [ 88.869692][ T5230] __x64_sys_lchown+0x7e/0xc0 [ 88.874423][ T5230] do_syscall_64+0x39/0xb0 [ 88.878874][ T5230] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 88.884795][ T5230] RIP: 0033:0x7fbb1fa33ae9 [ 88.889220][ T5230] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 88.908846][ T5230] RSP: 002b:00007ffea94a7a78 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 88.917289][ T5230] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fbb1fa33ae9 [ 88.925284][ T5230] RDX: 0000000000000000 RSI: 0000000000000cff RDI: 0000000020000340 [ 88.933259][ T5230] RBP: 00007ffea94a7aa0 R08: 0000000000000002 R09: 00007ffea94a7ab0 [ 88.941256][ T5230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 88.949253][ T5230] R13: 00007ffea94a7ae0 R14: 00007ffea94a7ac0 R15: 0000000000000010 [ 88.957250][ T5230] [ 88.961530][ T5230] ------------[ cut here ]------------ [ 88.967023][ T5230] WARNING: CPU: 0 PID: 5230 at fs/xfs/xfs_dquot.c:801 xfs_qm_dqget_cache_insert.constprop.0+0x36a/0x430 [ 88.979066][ T5230] Modules linked in: [ 88.983013][ T5230] CPU: 0 PID: 5230 Comm: syz-executor368 Not tainted 6.2.0-next-20230303-syzkaller #0 [ 88.992609][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 89.002730][ T5230] RIP: 0010:xfs_qm_dqget_cache_insert.constprop.0+0x36a/0x430 [ 89.010263][ T5230] Code: e9 c4 fd ff ff e8 c6 36 62 fe 0f 0b e9 1c ff ff ff e8 8a a1 b4 fe e9 59 fd ff ff e8 20 a2 b4 fe e9 20 fd ff ff e8 a6 36 62 fe <0f> 0b e9 7f fd ff ff e8 9a 36 62 fe e8 d5 8f 4a fe 31 ff 89 c3 89 [ 89.029920][ T5230] RSP: 0018:ffffc9000423f8a8 EFLAGS: 00010293 [ 89.036002][ T5230] RAX: 0000000000000000 RBX: ffff888029768000 RCX: 0000000000000000 [ 89.044036][ T5230] RDX: ffff888026a50000 RSI: ffffffff8322814a RDI: 0000000000000005 [ 89.052085][ T5230] RBP: ffff88807a40b400 R08: 0000000000000005 R09: 00000000ffffffef [ 89.060138][ T5230] R10: 00000000fffffff4 R11: 0000000000000000 R12: 00000000fffffff4 [ 89.068142][ T5230] R13: ffff8880297680f0 R14: ffff888029768000 R15: 0000000000000000 [ 89.076197][ T5230] FS: 0000555556b7f300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 89.085193][ T5230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.091839][ T5230] CR2: 00007fbb17ce2000 CR3: 000000007de9f000 CR4: 00000000003506f0 [ 89.099892][ T5230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.107906][ T5230] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.115941][ T5230] Call Trace: [ 89.119272][ T5230] [ 89.122222][ T5230] xfs_qm_dqget+0x16e/0x4b0 [ 89.126762][ T5230] ? xfs_dquot_to_disk+0x750/0x750 [ 89.131993][ T5230] ? map_id_up+0x2f0/0x2f0 [ 89.136452][ T5230] ? rcu_read_lock_sched_held+0x3e/0x70 [ 89.142101][ T5230] xfs_qm_vop_dqalloc+0x473/0xfe0 [ 89.147170][ T5230] ? xfs_qm_mount_quotas+0x690/0x690 [ 89.152544][ T5230] ? xfs_attr_get+0x3ba/0x510 [ 89.157292][ T5230] ? rcu_read_lock_sched_held+0x3e/0x70 [ 89.162932][ T5230] ? from_kgid+0x8b/0xd0 [ 89.167214][ T5230] ? from_vfsuid+0x10f/0x170 [ 89.171870][ T5230] ? make_vfsuid+0x170/0x170 [ 89.176500][ T5230] ? apparmor_capable+0x1dc/0x460 [ 89.181636][ T5230] xfs_setattr_nonsize+0xab1/0xd30 [ 89.186816][ T5230] ? xfs_initxattrs+0x1f0/0x1f0 [ 89.191744][ T5230] ? setattr_prepare+0x140/0x9b0 [ 89.196724][ T5230] ? xfs_vn_change_ok+0xc0/0x160 [ 89.201747][ T5230] xfs_vn_setattr+0x1fb/0x260 [ 89.206479][ T5230] ? xfs_vn_change_ok+0x160/0x160 [ 89.211605][ T5230] ? make_vfsgid+0x170/0x170 [ 89.216234][ T5230] ? xfs_vn_change_ok+0x160/0x160 [ 89.221334][ T5230] notify_change+0xb2c/0x1180 [ 89.226052][ T5230] ? from_vfsuid+0x10f/0x170 [ 89.230746][ T5230] ? chown_common+0x57f/0x650 [ 89.235465][ T5230] chown_common+0x57f/0x650 [ 89.240062][ T5230] ? __ia32_sys_chmod+0x80/0x80 [ 89.244958][ T5230] ? lock_release+0x780/0x780 [ 89.249745][ T5230] ? __mnt_want_write+0x3f/0x2e0 [ 89.254747][ T5230] ? __mnt_want_write+0x1fe/0x2e0 [ 89.259861][ T5230] do_fchownat+0x12a/0x1e0 [ 89.264342][ T5230] ? chown_common+0x650/0x650 [ 89.269109][ T5230] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.274394][ T5230] ? lockdep_hardirqs_on+0x7d/0x100 [ 89.279689][ T5230] ? _raw_spin_unlock_irq+0x2e/0x50 [ 89.284947][ T5230] __x64_sys_lchown+0x7e/0xc0 [ 89.289701][ T5230] do_syscall_64+0x39/0xb0 [ 89.294164][ T5230] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 89.300141][ T5230] RIP: 0033:0x7fbb1fa33ae9 [ 89.304593][ T5230] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 89.324271][ T5230] RSP: 002b:00007ffea94a7a78 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 89.332794][ T5230] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fbb1fa33ae9 [ 89.340848][ T5230] RDX: 0000000000000000 RSI: 0000000000000cff RDI: 0000000020000340 [ 89.348847][ T5230] RBP: 00007ffea94a7aa0 R08: 0000000000000002 R09: 00007ffea94a7ab0 [ 89.356901][ T5230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 89.364965][ T5230] R13: 00007ffea94a7ae0 R14: 00007ffea94a7ac0 R15: 0000000000000010 [ 89.373029][ T5230] [ 89.376068][ T5230] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.383345][ T5230] CPU: 0 PID: 5230 Comm: syz-executor368 Not tainted 6.2.0-next-20230303-syzkaller #0 [ 89.392913][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 89.403022][ T5230] Call Trace: [ 89.406318][ T5230] [ 89.409257][ T5230] dump_stack_lvl+0xd9/0x150 [ 89.413885][ T5230] panic+0x688/0x730 [ 89.417805][ T5230] ? panic_smp_self_stop+0x90/0x90 [ 89.422938][ T5230] ? show_trace_log_lvl+0x285/0x390 [ 89.428203][ T5230] ? xfs_qm_dqget_cache_insert.constprop.0+0x36a/0x430 [ 89.435109][ T5230] check_panic_on_warn+0xb1/0xc0 [ 89.440074][ T5230] __warn+0xf2/0x4f0 [ 89.444002][ T5230] ? xfs_qm_dqget_cache_insert.constprop.0+0x36a/0x430 [ 89.450895][ T5230] report_bug+0x2da/0x500 [ 89.455305][ T5230] handle_bug+0x3c/0x70 [ 89.459519][ T5230] exc_invalid_op+0x18/0x50 [ 89.464074][ T5230] asm_exc_invalid_op+0x1a/0x20 [ 89.468965][ T5230] RIP: 0010:xfs_qm_dqget_cache_insert.constprop.0+0x36a/0x430 [ 89.476494][ T5230] Code: e9 c4 fd ff ff e8 c6 36 62 fe 0f 0b e9 1c ff ff ff e8 8a a1 b4 fe e9 59 fd ff ff e8 20 a2 b4 fe e9 20 fd ff ff e8 a6 36 62 fe <0f> 0b e9 7f fd ff ff e8 9a 36 62 fe e8 d5 8f 4a fe 31 ff 89 c3 89 [ 89.496175][ T5230] RSP: 0018:ffffc9000423f8a8 EFLAGS: 00010293 [ 89.502279][ T5230] RAX: 0000000000000000 RBX: ffff888029768000 RCX: 0000000000000000 [ 89.510283][ T5230] RDX: ffff888026a50000 RSI: ffffffff8322814a RDI: 0000000000000005 [ 89.518259][ T5230] RBP: ffff88807a40b400 R08: 0000000000000005 R09: 00000000ffffffef [ 89.526244][ T5230] R10: 00000000fffffff4 R11: 0000000000000000 R12: 00000000fffffff4 [ 89.534240][ T5230] R13: ffff8880297680f0 R14: ffff888029768000 R15: 0000000000000000 [ 89.542233][ T5230] ? xfs_qm_dqget_cache_insert.constprop.0+0x36a/0x430 [ 89.549126][ T5230] ? xfs_qm_dqget_cache_insert.constprop.0+0x36a/0x430 [ 89.556023][ T5230] xfs_qm_dqget+0x16e/0x4b0 [ 89.560604][ T5230] ? xfs_dquot_to_disk+0x750/0x750 [ 89.565758][ T5230] ? map_id_up+0x2f0/0x2f0 [ 89.570187][ T5230] ? rcu_read_lock_sched_held+0x3e/0x70 [ 89.575748][ T5230] xfs_qm_vop_dqalloc+0x473/0xfe0 [ 89.580790][ T5230] ? xfs_qm_mount_quotas+0x690/0x690 [ 89.586095][ T5230] ? xfs_attr_get+0x3ba/0x510 [ 89.590823][ T5230] ? rcu_read_lock_sched_held+0x3e/0x70 [ 89.596403][ T5230] ? from_kgid+0x8b/0xd0 [ 89.600703][ T5230] ? from_vfsuid+0x10f/0x170 [ 89.605313][ T5230] ? make_vfsuid+0x170/0x170 [ 89.609920][ T5230] ? apparmor_capable+0x1dc/0x460 [ 89.614983][ T5230] xfs_setattr_nonsize+0xab1/0xd30 [ 89.620152][ T5230] ? xfs_initxattrs+0x1f0/0x1f0 [ 89.625012][ T5230] ? setattr_prepare+0x140/0x9b0 [ 89.629980][ T5230] ? xfs_vn_change_ok+0xc0/0x160 [ 89.634968][ T5230] xfs_vn_setattr+0x1fb/0x260 [ 89.639683][ T5230] ? xfs_vn_change_ok+0x160/0x160 [ 89.644742][ T5230] ? make_vfsgid+0x170/0x170 [ 89.649385][ T5230] ? xfs_vn_change_ok+0x160/0x160 [ 89.654474][ T5230] notify_change+0xb2c/0x1180 [ 89.659189][ T5230] ? from_vfsuid+0x10f/0x170 [ 89.663809][ T5230] ? chown_common+0x57f/0x650 [ 89.668505][ T5230] chown_common+0x57f/0x650 [ 89.673039][ T5230] ? __ia32_sys_chmod+0x80/0x80 [ 89.677927][ T5230] ? lock_release+0x780/0x780 [ 89.682663][ T5230] ? __mnt_want_write+0x3f/0x2e0 [ 89.687653][ T5230] ? __mnt_want_write+0x1fe/0x2e0 [ 89.692707][ T5230] do_fchownat+0x12a/0x1e0 [ 89.697133][ T5230] ? chown_common+0x650/0x650 [ 89.701816][ T5230] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.707027][ T5230] ? lockdep_hardirqs_on+0x7d/0x100 [ 89.712257][ T5230] ? _raw_spin_unlock_irq+0x2e/0x50 [ 89.717470][ T5230] __x64_sys_lchown+0x7e/0xc0 [ 89.722178][ T5230] do_syscall_64+0x39/0xb0 [ 89.726619][ T5230] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 89.732548][ T5230] RIP: 0033:0x7fbb1fa33ae9 [ 89.736984][ T5230] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 89.756664][ T5230] RSP: 002b:00007ffea94a7a78 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 89.765122][ T5230] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fbb1fa33ae9 [ 89.773160][ T5230] RDX: 0000000000000000 RSI: 0000000000000cff RDI: 0000000020000340 [ 89.781189][ T5230] RBP: 00007ffea94a7aa0 R08: 0000000000000002 R09: 00007ffea94a7ab0 [ 89.789172][ T5230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 89.797163][ T5230] R13: 00007ffea94a7ae0 R14: 00007ffea94a7ac0 R15: 0000000000000010 [ 89.805176][ T5230] [ 89.808488][ T5230] Kernel Offset: disabled [ 89.812930][ T5230] Rebooting in 86400 seconds.. [pid 5230] lchown("./bus", 3327, 0