./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor676477338 <...> ? gfs2_reconfigure+0xf90/0xf90 [ 222.726688][ T5674] ? snprintf+0xbf/0x100 [ 222.730987][ T5674] ? vsprintf+0x30/0x30 [ 222.735206][ T5674] ? wait_for_completion_io_timeout+0x20/0x20 [ 222.741345][ T5674] ? set_blocksize+0x2d8/0x370 [ 222.746169][ T5674] get_tree_bdev+0x43e/0x7d0 [ 222.750827][ T5674] ? gfs2_reconfigure+0xf90/0xf90 [ 222.755919][ T5674] gfs2_get_tree+0x4e/0x270 [ 222.760485][ T5674] vfs_get_tree+0x8d/0x350 [ 222.764961][ T5674] path_mount+0x136e/0x1e70 [ 222.769530][ T5674] ? putname+0x102/0x140 [ 222.773836][ T5674] ? lockdep_hardirqs_on+0x7d/0x100 [ 222.779106][ T5674] ? finish_automount+0xa30/0xa30 [ 222.784204][ T5674] ? putname+0x102/0x140 [ 222.788595][ T5674] __x64_sys_mount+0x283/0x300 [ 222.793508][ T5674] ? copy_mnt_ns+0xb30/0xb30 [ 222.798161][ T5674] ? lockdep_hardirqs_on+0x7d/0x100 [ 222.803422][ T5674] ? _raw_spin_unlock_irq+0x2e/0x50 [ 222.808701][ T5674] ? ptrace_notify+0xfe/0x140 [ 222.813550][ T5674] do_syscall_64+0x39/0xb0 [ 222.818030][ T5674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 222.824013][ T5674] RIP: 0033:0x7f4f6dd11c5a [ 222.828488][ T5674] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 222.848157][ T5674] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 222.856659][ T5674] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 222.864675][ T5674] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5662] close(9) = -1 EBADF (Bad file descriptor) [pid 5666] <... clone3 resumed> => {parent_tid=[74]}, 88) = 74 [pid 5662] close(10 [pid 5666] rt_sigprocmask(SIG_SETMASK, [], [pid 5662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5662] close(11 [pid 5666] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5666] <... futex resumed>) = 0 [pid 5662] close(12 [pid 5670] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5666] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] close(13 [pid 5670] <... futex resumed>) = 0 [pid 5662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5662] close(14 [pid 5670] <... mmap resumed>) = 0x7f4f6607f000 [pid 5662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5662] close(15 [pid 5670] <... mprotect resumed>) = 0 [pid 5662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5662] close(16 [pid 5670] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5662] close(17) = -1 EBADF (Bad file descriptor) [pid 5670] <... clone3 resumed> => {parent_tid=[73]}, 88) = 73 [pid 5662] close(18 [pid 5670] rt_sigprocmask(SIG_SETMASK, [], [pid 5662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5662] close(19 [pid 5670] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] <... futex resumed>) = 0 [pid 5662] close(20 [pid 5670] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5662] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5662] close(21) = -1 EBADF (Bad file descriptor) [pid 5662] close(22) = -1 EBADF (Bad file descriptor) [pid 5662] close(23) = -1 EBADF (Bad file descriptor) [pid 5662] close(24) = -1 EBADF (Bad file descriptor) [pid 5662] close(25) = -1 EBADF (Bad file descriptor) [pid 5662] close(26) = -1 EBADF (Bad file descriptor) [pid 5662] close(27) = -1 EBADF (Bad file descriptor) [pid 5662] close(28) = -1 EBADF (Bad file descriptor) [pid 5662] close(29) = -1 EBADF (Bad file descriptor) [pid 5662] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5662] <... write resumed>) = 156 [pid 5666] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] exit_group(0 [pid 5678] <... futex resumed>) = ? [pid 5666] <... futex resumed>) = 0 [pid 5663] <... futex resumed>) = ? [pid 5662] <... exit_group resumed>) = ? [pid 5678] +++ exited with 0 +++ [pid 5666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5663] +++ exited with 0 +++ [pid 5662] +++ exited with 0 +++ [pid 5666] <... mmap resumed>) = 0x7f4f6605e000 [pid 5031] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=66 /* 0.66 s */} --- [pid 5666] mprotect(0x7f4f6605f000, 131072, PROT_READ|PROT_WRITE [pid 5031] restart_syscall(<... resuming interrupted clone ...> [pid 5666] <... mprotect resumed>) = 0 [pid 5031] <... restart_syscall resumed>) = 0 [pid 5666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6607e990, parent_tid=0x7f4f6607e990, exit_signal=0, stack=0x7f4f6605e000, stack_size=0x20300, tls=0x7f4f6607e6c0} [pid 5031] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5672] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5666] <... clone3 resumed> => {parent_tid=[75]}, 88) = 75 [pid 5031] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5672] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5666] rt_sigprocmask(SIG_SETMASK, [], [pid 5031] <... openat resumed>) = 3 [pid 5672] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5031] newfstatat(3, "", [pid 5672] <... futex resumed>) = 0 [pid 5666] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5672] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5666] <... futex resumed>) = 0 [pid 5031] getdents64(3, [pid 5666] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5031] umount2("./23/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./23/cgroup.cpu") = 0 [pid 5031] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./23/binderfs") = 0 [pid 5031] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5666] futex(0x7f4f6dda471c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6603d000 [pid 5666] mprotect(0x7f4f6603e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6605d990, parent_tid=0x7f4f6605d990, exit_signal=0, stack=0x7f4f6603d000, stack_size=0x20300, tls=0x7f4f6605d6c0}./strace-static-x86_64: Process 5687 attached [pid 5687] rseq(0x7f4f6605dfe0, 0x20, 0, 0x53053053 [pid 5666] <... clone3 resumed> => {parent_tid=[76]}, 88) = 76 [pid 5687] <... rseq resumed>) = 0 [pid 5666] rt_sigprocmask(SIG_SETMASK, [], [pid 5687] set_robust_list(0x7f4f6605d9a0, 24 [pid 5666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5687] <... set_robust_list resumed>) = 0 [pid 5666] futex(0x7f4f6dda4718, FUTEX_WAKE_PRIVATE, 1000000 [pid 5687] rt_sigprocmask(SIG_SETMASK, [], [pid 5666] <... futex resumed>) = 0 [pid 5687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5666] futex(0x7f4f6dda471c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5687] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5686 attached ./strace-static-x86_64: Process 5685 attached ./strace-static-x86_64: Process 5684 attached [pid 5671] <... mount resumed>) = -1 EEXIST (File exists) [pid 5671] ioctl(4, LOOP_CLR_FD [pid 5687] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5686] rseq(0x7f4f6607efe0, 0x20, 0, 0x53053053 [pid 5685] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5684] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5687] futex(0x7f4f6dda471c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 222.872698][ T5674] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 222.880729][ T5674] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 222.888760][ T5674] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 222.896792][ T5674] [ 222.911137][ T5674] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [pid 5687] futex(0x7f4f6dda4718, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5686] <... rseq resumed>) = 0 [pid 5685] <... rseq resumed>) = 0 [pid 5684] <... rseq resumed>) = 0 [pid 5669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5686] set_robust_list(0x7f4f6607e9a0, 24 [pid 5685] set_robust_list(0x7f4f6609f9a0, 24 [pid 5684] set_robust_list(0x7f4f6609f9a0, 24 [pid 5669] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5686] <... set_robust_list resumed>) = 0 [pid 5685] <... set_robust_list resumed>) = 0 [pid 5684] <... set_robust_list resumed>) = 0 [pid 5669] <... futex resumed>) = 0 [pid 5686] rt_sigprocmask(SIG_SETMASK, [], [pid 5685] rt_sigprocmask(SIG_SETMASK, [], [pid 5684] rt_sigprocmask(SIG_SETMASK, [], [pid 5669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5686] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 222.926525][ T5674] gfs2: fsid=syz:syz: error -17 adding sysfs files [pid 5685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5684] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5669] <... mmap resumed>) = 0x7f4f6607f000 [pid 5685] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH) = -1 ENOENT (No such file or directory) [pid 5685] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5685] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5670] close(3) = 0 [pid 5670] close(4) = -1 EBADF (Bad file descriptor) [pid 5670] close(5) = -1 EBADF (Bad file descriptor) [pid 5670] close(6 [pid 5669] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5670] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5686] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5684] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5670] close(7 [pid 5669] <... mprotect resumed>) = 0 [pid 5670] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5674] <... mount resumed>) = -1 EEXIST (File exists) [pid 5670] close(8 [pid 5674] ioctl(4, LOOP_CLR_FD [pid 5670] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] close(9) = -1 EBADF (Bad file descriptor) [pid 5670] close(10) = -1 EBADF (Bad file descriptor) [pid 5670] close(11) = -1 EBADF (Bad file descriptor) [pid 5670] close(12) = -1 EBADF (Bad file descriptor) [pid 5670] close(13) = -1 EBADF (Bad file descriptor) [pid 5670] close(14) = -1 EBADF (Bad file descriptor) [pid 5670] close(15) = -1 EBADF (Bad file descriptor) [pid 5670] close(16) = -1 EBADF (Bad file descriptor) [pid 5670] close(17) = -1 EBADF (Bad file descriptor) [pid 5670] close(18) = -1 EBADF (Bad file descriptor) [pid 5670] close(19) = -1 EBADF (Bad file descriptor) [pid 5670] close(20) = -1 EBADF (Bad file descriptor) [pid 5670] close(21 [pid 5669] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5670] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] close(22) = -1 EBADF (Bad file descriptor) [pid 5670] close(23 [pid 5686] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5684] <... openat resumed>) = 3 [pid 5670] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5669] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5686] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5684] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] close(24 [pid 5686] <... futex resumed>) = 0 [pid 5684] <... futex resumed>) = 0 [pid 5670] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] close(25 [pid 5686] futex(0x7f4f6dda4708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5684] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5670] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5670] close(26) = -1 EBADF (Bad file descriptor) [pid 5670] close(27) = -1 EBADF (Bad file descriptor) [pid 5670] close(28) = -1 EBADF (Bad file descriptor) [pid 5669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5670] close(29) = -1 EBADF (Bad file descriptor) [pid 5670] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory ./strace-static-x86_64: Process 5688 attached ) = 156 [pid 5669] <... clone3 resumed> => {parent_tid=[72]}, 88) = 72 [pid 5670] exit_group(0 [pid 5669] rt_sigprocmask(SIG_SETMASK, [], [pid 5670] <... exit_group resumed>) = ? [pid 5669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5669] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5669] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5685] <... futex resumed>) = ? [pid 5672] <... futex resumed>) = ? [pid 5672] +++ exited with 0 +++ [pid 5685] +++ exited with 0 +++ [pid 5670] +++ exited with 0 +++ [pid 5033] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=64 /* 0.64 s */} --- [pid 5033] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5688] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053) = 0 [pid 5688] set_robust_list(0x7f4f6609f9a0, 24) = 0 [pid 5688] rt_sigprocmask(SIG_SETMASK, [], [pid 5033] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5688] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5688] <... openat resumed>) = 3 [pid 5033] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5688] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... openat resumed>) = 3 [pid 5033] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5033] umount2("./25/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./25/cgroup.cpu") = 0 [pid 5033] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./25/binderfs") = 0 [pid 5033] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5688] <... futex resumed>) = 1 [pid 5669] <... futex resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5688] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5669] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5688] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5669] <... futex resumed>) = 0 [pid 5033] <... openat resumed>) = 4 [pid 5688] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] getdents64(4, [pid 5688] <... futex resumed>) = 0 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5688] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5669] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] getdents64(4, [pid 5688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] <... futex resumed>) = 0 [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5688] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5669] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] close(4 [pid 5688] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5033] <... close resumed>) = 0 [pid 5688] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] rmdir("./25/file0" [pid 5688] <... futex resumed>) = 1 [pid 5669] <... futex resumed>) = 0 [pid 5033] <... rmdir resumed>) = 0 [pid 5688] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] umount2("./25/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./25/cgroup") = 0 [pid 5033] umount2("./25/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./25/cgroup.net") = 0 [pid 5033] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5033] close(3) = 0 [pid 5033] rmdir("./25") = 0 [pid 5033] mkdir("./26", 0777) = 0 [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5033] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5033] close(3) = 0 [pid 5033] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5689 attached [pid 5689] set_robust_list(0x55555654e6a0, 24 [pid 5033] <... clone resumed>, child_tidptr=0x55555654e690) = 74 [pid 5689] <... set_robust_list resumed>) = 0 [pid 5689] chdir("./26") = 0 [pid 5689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5689] setpgid(0, 0) = 0 [pid 5689] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 5689] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 5689] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 5689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5689] write(3, "1000", 4) = 4 [pid 5689] close(3) = 0 [pid 5689] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5689] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5689] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5689] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5690 attached [pid 5690] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5689] <... clone3 resumed> => {parent_tid=[75]}, 88) = 75 [pid 5690] <... rseq resumed>) = 0 [pid 5689] rt_sigprocmask(SIG_SETMASK, [], [pid 5690] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5690] <... set_robust_list resumed>) = 0 [pid 5689] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5690] rt_sigprocmask(SIG_SETMASK, [], [pid 5689] <... futex resumed>) = 0 [pid 5690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5689] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5690] memfd_create("syzkaller", 0) = 3 [pid 5690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5671] <... ioctl resumed>) = 0 [pid 5671] close(4) = 0 [pid 5671] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5669] close(3 [pid 5671] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5669] <... close resumed>) = 0 [pid 5669] close(4) = -1 EBADF (Bad file descriptor) [pid 5667] <... ioctl resumed>) = 0 [pid 5669] close(5) = -1 EBADF (Bad file descriptor) [pid 5669] close(6) = -1 EBADF (Bad file descriptor) [pid 5669] close(7) = -1 EBADF (Bad file descriptor) [pid 5669] close(8) = -1 EBADF (Bad file descriptor) [pid 5669] close(9) = -1 EBADF (Bad file descriptor) [pid 5669] close(10) = -1 EBADF (Bad file descriptor) [pid 5667] close(4 [pid 5674] <... ioctl resumed>) = 0 [pid 5669] close(11) = -1 EBADF (Bad file descriptor) [pid 5667] <... close resumed>) = 0 [pid 5034] kill(-72, SIGKILL [pid 5684] <... futex resumed>) = ? [pid 5669] close(12 [pid 5686] <... futex resumed>) = ? [pid 5034] <... kill resumed>) = 0 [pid 5687] <... futex resumed>) = ? [pid 5686] +++ killed by SIGKILL +++ [pid 5684] +++ killed by SIGKILL +++ [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5669] close(13 [pid 5687] +++ killed by SIGKILL +++ [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] kill(72, SIGKILL [pid 5669] close(14) = -1 EBADF (Bad file descriptor) [pid 5674] close(4 [pid 5669] close(15 [pid 5667] +++ killed by SIGKILL +++ [pid 5666] +++ killed by SIGKILL +++ [pid 5034] <... kill resumed>) = 0 [pid 5674] <... close resumed>) = 0 [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=72, si_uid=0, si_status=SIGKILL, si_utime=6 /* 0.06 s */, si_stime=60 /* 0.60 s */} --- [pid 5674] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] close(16 [pid 5673] <... futex resumed>) = 0 [pid 5674] <... futex resumed>) = 1 [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5674] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5673] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] close(17 [pid 5674] <... openat resumed>) = 3 [pid 5673] <... futex resumed>) = 0 [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5669] close(18 [pid 5673] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5674] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] close(19 [pid 5674] <... futex resumed>) = 0 [pid 5034] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5673] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5673] <... futex resumed>) = 0 [pid 5034] <... openat resumed>) = 3 [pid 5674] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5669] close(20 [pid 5034] newfstatat(3, "", [pid 5673] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5674] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5674] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] close(21 [pid 5034] getdents64(3, [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5674] <... futex resumed>) = 1 [pid 5673] <... futex resumed>) = 0 [pid 5669] close(22 [pid 5673] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5674] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5673] <... futex resumed>) = 0 [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] umount2("./24/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5674] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5669] close(23 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5674] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] newfstatat(AT_FDCWD, "./24/cgroup.cpu", [pid 5674] <... futex resumed>) = 1 [pid 5673] <... futex resumed>) = 0 [pid 5669] close(24 [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5674] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5673] close(3 [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] unlink("./24/cgroup.cpu" [pid 5673] <... close resumed>) = 0 [pid 5669] close(25 [pid 5034] <... unlink resumed>) = 0 [pid 5673] close(4) = -1 EBADF (Bad file descriptor) [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] close(5 [pid 5669] close(26 [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5673] close(6 [pid 5669] close(27 [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5673] close(7 [pid 5669] close(28 [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5673] close(8 [pid 5669] close(29 [pid 5034] unlink("./24/binderfs" [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5669] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5673] close(9 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5669] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5034] <... unlink resumed>) = 0 [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5669] <... write resumed>) = 156 [pid 5034] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] close(10 [pid 5669] exit_group(0 [pid 5688] <... futex resumed>) = ? [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5671] <... futex resumed>) = ? [pid 5669] <... exit_group resumed>) = ? [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5688] +++ exited with 0 +++ [pid 5673] close(11) = -1 EBADF (Bad file descriptor) [pid 5034] newfstatat(AT_FDCWD, "./24/file0", [pid 5673] close(12 [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5671] +++ exited with 0 +++ [pid 5669] +++ exited with 0 +++ [pid 5034] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] close(13 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=63 /* 0.63 s */} --- [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5673] close(14) = -1 EBADF (Bad file descriptor) [pid 5034] newfstatat(4, "", [pid 5673] close(15 [pid 5032] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5673] close(16 [pid 5034] getdents64(4, [pid 5032] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... openat resumed>) = 3 [pid 5673] close(17) = -1 EBADF (Bad file descriptor) [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5673] close(18 [pid 5032] newfstatat(3, "", [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(4, [pid 5032] getdents64(3, [pid 5673] close(19 [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5673] close(20 [pid 5034] close(4 [pid 5032] umount2("./24/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... close resumed>) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5673] close(21 [pid 5034] rmdir("./24/file0" [pid 5032] newfstatat(AT_FDCWD, "./24/cgroup.cpu", [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5673] close(22 [pid 5034] <... rmdir resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] umount2("./24/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] unlink("./24/cgroup.cpu" [pid 5673] close(23 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] newfstatat(AT_FDCWD, "./24/cgroup", [pid 5032] <... unlink resumed>) = 0 [pid 5673] close(24) = -1 EBADF (Bad file descriptor) [pid 5673] close(25 [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] unlink("./24/cgroup" [pid 5032] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] close(26 [pid 5034] <... unlink resumed>) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] umount2("./24/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5673] close(27 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] newfstatat(AT_FDCWD, "./24/cgroup.net", [pid 5032] unlink("./24/binderfs" [pid 5673] close(28 [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... unlink resumed>) = 0 [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] unlink("./24/cgroup.net" [pid 5673] close(29 [pid 5034] <... unlink resumed>) = 0 [pid 5032] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5673] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5673] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5034] getdents64(3, [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5673] <... write resumed>) = 156 [pid 5032] newfstatat(AT_FDCWD, "./24/file0", [pid 5034] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5673] exit_group(0 [pid 5034] close(3 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5674] <... futex resumed>) = ? [pid 5673] <... exit_group resumed>) = ? [pid 5034] <... close resumed>) = 0 [pid 5032] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5674] +++ exited with 0 +++ [pid 5673] +++ exited with 0 +++ [pid 5030] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=62 /* 0.62 s */} --- [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] rmdir("./24" [pid 5032] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5030] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... rmdir resumed>) = 0 [pid 5030] <... openat resumed>) = 3 [pid 5034] mkdir("./25", 0777 [pid 5032] <... openat resumed>) = 4 [pid 5030] newfstatat(3, "", [pid 5032] newfstatat(4, "", [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] <... mkdir resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] getdents64(3, [pid 5034] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5032] getdents64(4, [pid 5030] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5034] <... openat resumed>) = 3 [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5030] umount2("./23/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] ioctl(3, LOOP_CLR_FD [pid 5032] getdents64(4, [pid 5030] newfstatat(AT_FDCWD, "./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] unlink("./23/cgroup.cpu" [pid 5034] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5030] <... unlink resumed>) = 0 [pid 5030] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5034] close(3 [pid 5032] close(4 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] <... close resumed>) = 0 [pid 5032] <... close resumed>) = 0 [pid 5031] <... umount2 resumed>) = 0 [pid 5034] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5032] rmdir("./24/file0" [pid 5031] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] unlink("./23/binderfs" [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... unlink resumed>) = 0 [pid 5031] newfstatat(AT_FDCWD, "./23/file0", [pid 5030] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5691 attached [pid 5031] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] newfstatat(AT_FDCWD, "./23/file0", [pid 5032] <... rmdir resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] <... clone resumed>, child_tidptr=0x55555654e690) = 77 [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5691] set_robust_list(0x55555654e6a0, 24 [pid 5032] umount2("./24/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5030] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5691] <... set_robust_list resumed>) = 0 [pid 5032] newfstatat(AT_FDCWD, "./24/cgroup", [pid 5031] <... openat resumed>) = 4 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] newfstatat(4, "", [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5691] chdir("./25" [pid 5032] unlink("./24/cgroup" [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] <... unlink resumed>) = 0 [pid 5691] <... chdir resumed>) = 0 [pid 5031] getdents64(4, [pid 5030] <... openat resumed>) = 4 [pid 5691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5032] umount2("./24/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5030] newfstatat(4, "", [pid 5691] <... prctl resumed>) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] getdents64(4, [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5691] setpgid(0, 0 [pid 5032] newfstatat(AT_FDCWD, "./24/cgroup.net", [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5030] getdents64(4, [pid 5691] <... setpgid resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] close(4 [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5031] <... close resumed>) = 0 [pid 5030] getdents64(4, [pid 5691] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5032] unlink("./24/cgroup.net" [pid 5031] rmdir("./23/file0" [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5691] <... symlink resumed>) = 0 [pid 5032] <... unlink resumed>) = 0 [pid 5031] <... rmdir resumed>) = 0 [pid 5030] close(4 [pid 5691] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5032] getdents64(3, [pid 5031] umount2("./23/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... close resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] rmdir("./23/file0" [pid 5691] <... symlink resumed>) = 0 [pid 5032] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5031] newfstatat(AT_FDCWD, "./23/cgroup", [pid 5030] <... rmdir resumed>) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] umount2("./23/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5691] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5032] close(3 [pid 5031] unlink("./23/cgroup" [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5691] <... symlink resumed>) = 0 [pid 5032] <... close resumed>) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5030] newfstatat(AT_FDCWD, "./23/cgroup", [pid 5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5032] rmdir("./24" [pid 5031] umount2("./23/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5691] <... openat resumed>) = 3 [pid 5032] <... rmdir resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] unlink("./23/cgroup" [pid 5691] write(3, "1000", 4 [pid 5032] mkdir("./25", 0777 [pid 5031] newfstatat(AT_FDCWD, "./23/cgroup.net", [pid 5030] <... unlink resumed>) = 0 [pid 5691] <... write resumed>) = 4 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] umount2("./23/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... mkdir resumed>) = 0 [pid 5691] close(3 [pid 5031] unlink("./23/cgroup.net" [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5691] <... close resumed>) = 0 [pid 5032] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5031] <... unlink resumed>) = 0 [pid 5030] newfstatat(AT_FDCWD, "./23/cgroup.net", [pid 5691] symlink("/dev/binderfs", "./binderfs" [pid 5032] <... openat resumed>) = 3 [pid 5031] getdents64(3, [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5030] unlink("./23/cgroup.net" [pid 5691] <... symlink resumed>) = 0 [pid 5032] ioctl(3, LOOP_CLR_FD [pid 5031] close(3 [pid 5030] <... unlink resumed>) = 0 [pid 5691] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5031] <... close resumed>) = 0 [pid 5030] getdents64(3, [pid 5691] <... futex resumed>) = 0 [pid 5032] close(3 [pid 5031] rmdir("./23" [pid 5030] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5032] <... close resumed>) = 0 [pid 5031] <... rmdir resumed>) = 0 [pid 5030] close(3 [pid 5031] mkdir("./24", 0777 [pid 5030] <... close resumed>) = 0 [pid 5031] <... mkdir resumed>) = 0 [pid 5030] rmdir("./23" [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5030] <... rmdir resumed>) = 0 [pid 5031] <... openat resumed>) = 3 [pid 5030] mkdir("./24", 0777 [pid 5031] ioctl(3, LOOP_CLR_FD [pid 5030] <... mkdir resumed>) = 0 [pid 5031] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5691] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5031] close(3 [pid 5030] <... openat resumed>) = 3 [pid 5691] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5031] <... close resumed>) = 0 [pid 5030] ioctl(3, LOOP_CLR_FD [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5030] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5693 attached ./strace-static-x86_64: Process 5692 attached [pid 5691] <... mprotect resumed>) = 0 [pid 5030] close(3 [pid 5693] set_robust_list(0x55555654e6a0, 24 [pid 5692] set_robust_list(0x55555654e6a0, 24 [pid 5691] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5032] <... clone resumed>, child_tidptr=0x55555654e690) = 73 [pid 5031] <... clone resumed>, child_tidptr=0x55555654e690) = 72 [pid 5030] <... close resumed>) = 0 [pid 5693] <... set_robust_list resumed>) = 0 [pid 5692] <... set_robust_list resumed>) = 0 [pid 5691] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5693] chdir("./24" [pid 5692] chdir("./25" [pid 5691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5693] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5694 attached [pid 5693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5692] <... chdir resumed>) = 0 [pid 5694] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5693] <... prctl resumed>) = 0 [pid 5692] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5691] <... clone3 resumed> => {parent_tid=[78]}, 88) = 78 [pid 5694] <... rseq resumed>) = 0 [pid 5693] setpgid(0, 0 [pid 5692] <... prctl resumed>) = 0 [pid 5691] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5695 attached [pid 5694] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5693] <... setpgid resumed>) = 0 [pid 5692] setpgid(0, 0 [pid 5691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5695] set_robust_list(0x55555654e6a0, 24 [pid 5694] <... set_robust_list resumed>) = 0 [pid 5692] <... setpgid resumed>) = 0 [pid 5030] <... clone resumed>, child_tidptr=0x55555654e690) = 70 [pid 5693] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5695] <... set_robust_list resumed>) = 0 [pid 5694] rt_sigprocmask(SIG_SETMASK, [], [pid 5692] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5691] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5695] chdir("./24" [pid 5694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5693] <... symlink resumed>) = 0 [pid 5692] <... symlink resumed>) = 0 [pid 5695] <... chdir resumed>) = 0 [pid 5694] memfd_create("syzkaller", 0 [pid 5692] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5695] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5694] <... memfd_create resumed>) = 3 [pid 5692] <... symlink resumed>) = 0 [pid 5691] <... futex resumed>) = 0 [pid 5695] <... prctl resumed>) = 0 [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5692] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5691] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5695] setpgid(0, 0 [pid 5694] <... mmap resumed>) = 0x7f4f650a0000 [pid 5693] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5692] <... symlink resumed>) = 0 [pid 5695] <... setpgid resumed>) = 0 [pid 5692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5695] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5693] <... symlink resumed>) = 0 [pid 5692] <... openat resumed>) = 3 [pid 5695] <... symlink resumed>) = 0 [pid 5693] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5692] write(3, "1000", 4 [pid 5695] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5692] <... write resumed>) = 4 [pid 5695] <... symlink resumed>) = 0 [pid 5693] <... symlink resumed>) = 0 [pid 5692] close(3 [pid 5695] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5692] <... close resumed>) = 0 [pid 5695] <... symlink resumed>) = 0 [pid 5692] symlink("/dev/binderfs", "./binderfs" [pid 5695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5693] <... openat resumed>) = 3 [pid 5692] <... symlink resumed>) = 0 [pid 5695] <... openat resumed>) = 3 [pid 5693] write(3, "1000", 4 [pid 5692] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5695] write(3, "1000", 4 [pid 5693] <... write resumed>) = 4 [pid 5692] <... futex resumed>) = 0 [pid 5695] <... write resumed>) = 4 [pid 5693] close(3 [pid 5692] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5695] close(3 [pid 5693] <... close resumed>) = 0 [pid 5692] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5695] <... close resumed>) = 0 [pid 5693] symlink("/dev/binderfs", "./binderfs" [pid 5692] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5695] symlink("/dev/binderfs", "./binderfs" [pid 5693] <... symlink resumed>) = 0 [pid 5692] <... mprotect resumed>) = 0 [pid 5695] <... symlink resumed>) = 0 [pid 5693] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5695] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] <... futex resumed>) = 0 [pid 5692] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5695] <... futex resumed>) = 0 [pid 5693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5692] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5696 attached [pid 5695] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5693] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5696] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5695] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5693] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5692] <... clone3 resumed> => {parent_tid=[74]}, 88) = 74 [pid 5696] <... rseq resumed>) = 0 [pid 5695] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5692] rt_sigprocmask(SIG_SETMASK, [], [pid 5696] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5695] <... mprotect resumed>) = 0 [pid 5693] <... mprotect resumed>) = 0 [pid 5692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5696] <... set_robust_list resumed>) = 0 [pid 5695] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5693] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5692] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] rt_sigprocmask(SIG_SETMASK, [], [pid 5695] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5693] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5692] <... futex resumed>) = 0 [pid 5696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5695] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5692] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5698 attached ./strace-static-x86_64: Process 5697 attached [pid 5696] memfd_create("syzkaller", 0 [pid 5698] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5697] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5696] <... memfd_create resumed>) = 3 [pid 5695] <... clone3 resumed> => {parent_tid=[71]}, 88) = 71 [pid 5693] <... clone3 resumed> => {parent_tid=[73]}, 88) = 73 [pid 5698] <... rseq resumed>) = 0 [pid 5697] <... rseq resumed>) = 0 [pid 5696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5695] rt_sigprocmask(SIG_SETMASK, [], [pid 5693] rt_sigprocmask(SIG_SETMASK, [], [pid 5698] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5697] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5696] <... mmap resumed>) = 0x7f4f650a0000 [pid 5695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5698] <... set_robust_list resumed>) = 0 [pid 5697] <... set_robust_list resumed>) = 0 [pid 5695] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] rt_sigprocmask(SIG_SETMASK, [], [pid 5697] rt_sigprocmask(SIG_SETMASK, [], [pid 5695] <... futex resumed>) = 0 [pid 5698] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5695] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5693] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] memfd_create("syzkaller", 0) = 3 [pid 5698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5697] memfd_create("syzkaller", 0 [pid 5693] <... futex resumed>) = 0 [pid 5697] <... memfd_create resumed>) = 3 [pid 5697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5693] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5682] <... write resumed>) = 16777216 [pid 5682] munmap(0x7f4f650a0000, 16777216 [pid 5690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5682] <... munmap resumed>) = 0 [pid 5682] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5682] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5682] close(3) = 0 [pid 5682] mkdir("./file0", 0777) = 0 [ 224.264647][ T5682] loop0: detected capacity change from 0 to 32768 [ 224.329619][ T5682] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 224.366040][ T5682] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 224.431290][ T5682] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 224.465132][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 224.476179][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [pid 5682] mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 224.697495][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 221ms [pid 5696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 224.738039][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 224.743364][ T5682] gfs2: fsid=syz:syz.0: first mount done, others may mount [pid 5697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5682] <... mount resumed>) = 0 [pid 5682] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5682] chdir("./file0") = 0 [pid 5682] ioctl(4, LOOP_CLR_FD) = 0 [pid 5682] close(4) = 0 [pid 5682] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5681] <... futex resumed>) = 0 [pid 5682] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5681] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5682] <... futex resumed>) = 0 [pid 5682] openat(AT_FDCWD, "./file0", O_RDONLY [ 224.867258][ T5682] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [pid 5681] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5681] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5681] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} => {parent_tid=[78]}, 88) = 78 [pid 5681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5681] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 224.911460][ T5682] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 224.911460][ T5682] inode = 12 2341 [ 224.911460][ T5682] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [pid 5681] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5681] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5681] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6605e000 [pid 5681] mprotect(0x7f4f6605f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5681] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5681] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6607e990, parent_tid=0x7f4f6607e990, exit_signal=0, stack=0x7f4f6605e000, stack_size=0x20300, tls=0x7f4f6607e6c0}./strace-static-x86_64: Process 5701 attached => {parent_tid=[79]}, 88) = 79 [pid 5701] rseq(0x7f4f6607efe0, 0x20, 0, 0x53053053 [pid 5681] rt_sigprocmask(SIG_SETMASK, [], [pid 5701] <... rseq resumed>) = 0 [pid 5701] set_robust_list(0x7f4f6607e9a0, 24 [pid 5681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5681] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5701] <... set_robust_list resumed>) = 0 [pid 5701] rt_sigprocmask(SIG_SETMASK, [], [pid 5681] <... futex resumed>) = 0 [pid 5701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5681] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 225.019133][ T5701] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [ 225.026000][ T5682] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [pid 5701] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH./strace-static-x86_64: Process 5700 attached [pid 5690] <... write resumed>) = 16777216 [pid 5681] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 225.080959][ T5682] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5682 [syz-executor676] __gfs2_lookup+0x83/0x280 [pid 5690] munmap(0x7f4f650a0000, 16777216 [pid 5700] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053) = 0 [pid 5700] set_robust_list(0x7f4f6609f9a0, 24) = 0 [pid 5700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5700] ioctl(0, VFAT_IOCTL_READDIR_SHORT, 0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5700] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 225.124033][ T5701] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 225.124033][ T5701] inode = 12 2341 [ 225.124033][ T5701] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 225.175540][ T5682] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5701 [syz-executor676] __gfs2_lookup+0x83/0x280 [pid 5700] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5690] <... munmap resumed>) = 0 [pid 5690] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 225.274604][ T5682] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 225.299218][ T5690] loop2: detected capacity change from 0 to 32768 [ 225.315975][ T5682] gfs2: fsid=syz:syz.0: about to withdraw this file system [pid 5690] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5690] close(3) = 0 [pid 5690] mkdir("./file0", 0777) = 0 [ 225.323238][ T5682] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 225.368892][ T5690] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 225.391808][ T5690] CPU: 1 PID: 5690 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 225.402397][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 225.405967][ T5701] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 225.412496][ T5690] Call Trace: [ 225.412510][ T5690] [ 225.427786][ T5690] dump_stack_lvl+0x136/0x150 [ 225.432533][ T5690] sysfs_warn_dup+0x80/0xa0 [ 225.437090][ T5690] sysfs_create_dir_ns+0x237/0x290 [ 225.442256][ T5690] ? sysfs_create_mount_point+0xb0/0xb0 [ 225.447853][ T5690] ? spin_bug+0x1c0/0x1c0 [ 225.452261][ T5690] ? do_raw_spin_unlock+0x175/0x230 [ 225.457512][ T5690] kobject_add_internal+0x2c9/0x9c0 [ 225.462747][ T5690] ? kfree+0x11/0x150 [ 225.466787][ T5690] kobject_init_and_add+0x101/0x170 [ 225.472033][ T5690] ? kobject_create_and_add+0xf0/0xf0 [ 225.477456][ T5690] ? lockdep_init_map_type+0x21e/0x810 [ 225.477526][ T5682] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 225.482942][ T5690] ? lockdep_hardirqs_on+0x7d/0x100 [ 225.494596][ T5690] ? lockdep_init_map_type+0x21e/0x810 [ 225.500120][ T5690] gfs2_sys_fs_add+0x1d5/0x450 [ 225.504931][ T5690] ? recover_store+0x170/0x170 [ 225.509744][ T5690] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 225.515531][ T5690] gfs2_fill_super+0x1312/0x2aa0 [ 225.520522][ T5690] ? gfs2_reconfigure+0xf90/0xf90 [ 225.525599][ T5690] ? snprintf+0xbf/0x100 [ 225.529895][ T5690] ? vsprintf+0x30/0x30 [ 225.534126][ T5690] ? wait_for_completion_io_timeout+0x20/0x20 [ 225.535939][ T5701] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5682 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 225.540232][ T5690] ? set_blocksize+0x2d8/0x370 [ 225.555016][ T5690] get_tree_bdev+0x43e/0x7d0 [ 225.559680][ T5690] ? gfs2_reconfigure+0xf90/0xf90 [ 225.564769][ T5690] gfs2_get_tree+0x4e/0x270 [ 225.569352][ T5690] vfs_get_tree+0x8d/0x350 [ 225.573823][ T5690] path_mount+0x136e/0x1e70 [ 225.578398][ T5690] ? putname+0x102/0x140 [ 225.582691][ T5690] ? lockdep_hardirqs_on+0x7d/0x100 [ 225.587953][ T5690] ? finish_automount+0xa30/0xa30 [ 225.593041][ T5690] ? putname+0x102/0x140 [ 225.595255][ T5682] gfs2: fsid=syz:syz.0: File system withdrawn [ 225.597333][ T5690] __x64_sys_mount+0x283/0x300 [ 225.597380][ T5690] ? copy_mnt_ns+0xb30/0xb30 [ 225.597416][ T5690] ? lockdep_hardirqs_on+0x7d/0x100 [ 225.597455][ T5690] ? _raw_spin_unlock_irq+0x2e/0x50 [ 225.597498][ T5690] ? ptrace_notify+0xfe/0x140 [ 225.597547][ T5690] do_syscall_64+0x39/0xb0 [ 225.625906][ T5701] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5701 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 225.628074][ T5690] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 225.632498][ T5701] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 225.642469][ T5690] RIP: 0033:0x7f4f6dd11c5a [ 225.642497][ T5690] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 225.642527][ T5690] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 225.642558][ T5690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 225.642592][ T5690] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 225.642612][ T5690] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 225.642632][ T5690] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 225.642653][ T5690] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 225.642678][ T5690] [ 225.706136][ T5682] CPU: 1 PID: 5682 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 225.734684][ T5690] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 225.744198][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 225.744219][ T5682] Call Trace: [ 225.744229][ T5682] [ 225.744240][ T5682] dump_stack_lvl+0x136/0x150 [ 225.744295][ T5682] gfs2_withdraw+0xb33/0x1060 [ 225.744331][ T5682] ? gfs2_consist_inode_i+0x104/0x150 [ 225.744367][ T5682] gfs2_dirent_scan+0x32a/0x3d0 [ 225.744416][ T5682] ? gfs2_dirent_prev+0x210/0x210 [ 225.799450][ T5682] ? gfs2_dirent_prev+0x210/0x210 [ 225.804546][ T5682] gfs2_dirent_search+0x47d/0x580 [ 225.809613][ T5682] ? get_first_leaf+0x190/0x190 [ 225.814506][ T5682] ? gfs2_permission+0x256/0x3e0 [ 225.819494][ T5682] gfs2_dir_search+0x8d/0x2d0 [ 225.824228][ T5682] ? gfs2_dir_read+0x14e0/0x14e0 [ 225.829216][ T5682] gfs2_lookupi+0x481/0x640 [ 225.833786][ T5682] ? gfs2_lookup_by_inum+0x100/0x100 [ 225.839153][ T5682] ? __gfs2_lookup+0x83/0x280 [ 225.843866][ T5682] ? d_alloc_parallel+0x693/0x1530 [ 225.849023][ T5682] __gfs2_lookup+0x83/0x280 [ 225.853587][ T5682] ? gfs2_lookupi+0x640/0x640 [ 225.858302][ T5682] ? __d_lookup_rcu+0x4e0/0x4e0 [ 225.863198][ T5682] ? __d_lookup+0x289/0x4c0 [ 225.867741][ T5682] gfs2_atomic_open+0xde/0x250 [ 225.872551][ T5682] ? __gfs2_lookup+0x280/0x280 [ 225.877360][ T5682] lookup_open.isra.0+0xce2/0x1400 [ 225.882682][ T5682] ? link_path_walk.part.0+0xd60/0xd60 [ 225.888178][ T5682] ? lookup_fast+0x14e/0x520 [ 225.892795][ T5682] path_openat+0x969/0x2710 [ 225.897332][ T5682] ? path_lookupat+0x840/0x840 [ 225.902138][ T5682] ? find_held_lock+0x2d/0x110 [ 225.907016][ T5682] do_filp_open+0x1ba/0x410 [ 225.911545][ T5682] ? may_open_dev+0xf0/0xf0 [ 225.916078][ T5682] ? find_held_lock+0x2d/0x110 [ 225.920876][ T5682] ? do_raw_spin_lock+0x124/0x2b0 [ 225.925935][ T5682] ? spin_bug+0x1c0/0x1c0 [ 225.930296][ T5682] ? _raw_spin_unlock+0x28/0x40 [ 225.935189][ T5682] ? alloc_fd+0x2e4/0x750 [ 225.939559][ T5682] do_sys_openat2+0x160/0x1c0 [ 225.944273][ T5682] ? build_open_flags+0x720/0x720 [ 225.949367][ T5682] ? ptrace_notify+0xfe/0x140 [ 225.954100][ T5682] ? lock_downgrade+0x690/0x690 [ 225.958986][ T5682] __x64_sys_openat+0x143/0x1f0 [ 225.963881][ T5682] ? __ia32_sys_open+0x1c0/0x1c0 [ 225.968856][ T5682] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.974116][ T5682] ? lockdep_hardirqs_on+0x7d/0x100 [ 225.979349][ T5682] ? _raw_spin_unlock_irq+0x2e/0x50 [ 225.984581][ T5682] ? ptrace_notify+0xfe/0x140 [ 225.989296][ T5682] do_syscall_64+0x39/0xb0 [ 225.993747][ T5682] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 225.999682][ T5682] RIP: 0033:0x7f4f6dd107f9 [ 226.004115][ T5682] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 226.023747][ T5682] RSP: 002b:00007f4f6d4c0228 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 226.032281][ T5682] RAX: ffffffffffffffda RBX: 00007f4f6dda46e8 RCX: 00007f4f6dd107f9 [ 226.040282][ T5682] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000ffffff9c [ 226.048279][ T5682] RBP: 00007f4f6dda46e0 R08: 00007f4f6d4c06c0 R09: 00007f4f6d4c06c0 [ 226.056363][ T5682] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f6dda46ec [pid 5690] mount("/dev/loop2", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5698] <... write resumed>) = 16777216 [pid 5697] <... write resumed>) = 16777216 [pid 5696] <... write resumed>) = 16777216 [pid 5697] munmap(0x7f4f650a0000, 16777216 [pid 5698] munmap(0x7f4f650a0000, 16777216 [ 226.064416][ T5682] R13: 0030656c69662f2e R14: 00007f4f6dd5d740 R15: 00007fffaa0db528 [ 226.072423][ T5682] [pid 5696] munmap(0x7f4f650a0000, 16777216 [pid 5701] <... openat resumed>) = -1 EIO (Input/output error) [pid 5682] <... openat resumed>) = -1 EIO (Input/output error) [pid 5701] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5682] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5701] <... futex resumed>) = 0 [pid 5682] <... futex resumed>) = 0 [pid 5701] futex(0x7f4f6dda4708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5682] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5681] close(3) = 0 [pid 5681] close(4) = -1 EBADF (Bad file descriptor) [pid 5681] close(5) = -1 EBADF (Bad file descriptor) [pid 5681] close(6) = -1 EBADF (Bad file descriptor) [pid 5681] close(7) = -1 EBADF (Bad file descriptor) [pid 5681] close(8) = -1 EBADF (Bad file descriptor) [pid 5681] close(9) = -1 EBADF (Bad file descriptor) [pid 5681] close(10) = -1 EBADF (Bad file descriptor) [pid 5681] close(11) = -1 EBADF (Bad file descriptor) [pid 5681] close(12) = -1 EBADF (Bad file descriptor) [pid 5681] close(13) = -1 EBADF (Bad file descriptor) [pid 5681] close(14) = -1 EBADF (Bad file descriptor) [pid 5681] close(15) = -1 EBADF (Bad file descriptor) [pid 5681] close(16) = -1 EBADF (Bad file descriptor) [pid 5681] close(17) = -1 EBADF (Bad file descriptor) [pid 5681] close(18) = -1 EBADF (Bad file descriptor) [pid 5681] close(19) = -1 EBADF (Bad file descriptor) [pid 5681] close(20) = -1 EBADF (Bad file descriptor) [pid 5681] close(21) = -1 EBADF (Bad file descriptor) [pid 5681] close(22) = -1 EBADF (Bad file descriptor) [pid 5681] close(23) = -1 EBADF (Bad file descriptor) [pid 5681] close(24) = -1 EBADF (Bad file descriptor) [pid 5681] close(25) = -1 EBADF (Bad file descriptor) [pid 5681] close(26) = -1 EBADF (Bad file descriptor) [pid 5681] close(27) = -1 EBADF (Bad file descriptor) [pid 5681] close(28) = -1 EBADF (Bad file descriptor) [pid 5681] close(29) = -1 EBADF (Bad file descriptor) [pid 5681] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory ) = 156 [pid 5681] exit_group(0 [pid 5701] <... futex resumed>) = ? [pid 5700] <... futex resumed>) = ? [pid 5682] <... futex resumed>) = ? [pid 5681] <... exit_group resumed>) = ? [pid 5701] +++ exited with 0 +++ [pid 5700] +++ exited with 0 +++ [pid 5682] +++ exited with 0 +++ [pid 5681] +++ exited with 0 +++ [pid 5029] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=74 /* 0.74 s */} --- [pid 5029] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5029] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5029] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5029] umount2("./24/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./24/cgroup.cpu") = 0 [pid 5029] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./24/binderfs") = 0 [pid 5029] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5697] <... munmap resumed>) = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5697] ioctl(4, LOOP_SET_FD, 3 [pid 5698] <... munmap resumed>) = 0 [pid 5697] <... ioctl resumed>) = 0 [pid 5696] <... munmap resumed>) = 0 [pid 5694] <... write resumed>) = 16777216 [pid 5698] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5698] ioctl(4, LOOP_SET_FD, 3 [pid 5697] close(3 [pid 5696] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5694] munmap(0x7f4f650a0000, 16777216 [pid 5690] <... mount resumed>) = -1 EEXIST (File exists) [pid 5698] <... ioctl resumed>) = 0 [pid 5698] close(3) = 0 [pid 5698] mkdir("./file0", 0777) = 0 [pid 5698] mount("/dev/loop4", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5697] <... close resumed>) = 0 [pid 5697] mkdir("./file0", 0777 [pid 5696] <... openat resumed>) = 4 [ 226.213856][ T5697] loop3: detected capacity change from 0 to 32768 [ 226.220667][ T5690] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 226.248523][ T5698] loop4: detected capacity change from 0 to 32768 [pid 5690] ioctl(4, LOOP_CLR_FD [pid 5697] <... mkdir resumed>) = 0 [pid 5696] ioctl(4, LOOP_SET_FD, 3 [ 226.263301][ T5698] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 226.271672][ T5696] loop1: detected capacity change from 0 to 32768 [ 226.272355][ T5698] CPU: 0 PID: 5698 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 226.288582][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 226.298681][ T5698] Call Trace: [ 226.301988][ T5698] [ 226.304953][ T5698] dump_stack_lvl+0x136/0x150 [ 226.309697][ T5698] sysfs_warn_dup+0x80/0xa0 [ 226.314251][ T5698] sysfs_create_dir_ns+0x237/0x290 [ 226.319415][ T5698] ? sysfs_create_mount_point+0xb0/0xb0 [ 226.325009][ T5698] ? spin_bug+0x1c0/0x1c0 [ 226.329396][ T5698] ? do_raw_spin_unlock+0x175/0x230 [ 226.334656][ T5698] kobject_add_internal+0x2c9/0x9c0 [ 226.339910][ T5698] ? kfree+0x11/0x150 [ 226.343946][ T5698] kobject_init_and_add+0x101/0x170 [ 226.349206][ T5698] ? kobject_create_and_add+0xf0/0xf0 [ 226.350427][ T5696] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 226.354697][ T5698] ? lockdep_init_map_type+0x21e/0x810 [ 226.354744][ T5698] ? lockdep_hardirqs_on+0x7d/0x100 [ 226.372832][ T5698] ? lockdep_init_map_type+0x21e/0x810 [ 226.378347][ T5698] gfs2_sys_fs_add+0x1d5/0x450 [ 226.383153][ T5698] ? recover_store+0x170/0x170 [ 226.387954][ T5698] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 226.393726][ T5698] gfs2_fill_super+0x1312/0x2aa0 [ 226.398806][ T5698] ? gfs2_reconfigure+0xf90/0xf90 [ 226.403869][ T5698] ? snprintf+0xbf/0x100 [ 226.408150][ T5698] ? vsprintf+0x30/0x30 [ 226.412339][ T5698] ? wait_for_completion_io_timeout+0x20/0x20 [ 226.418443][ T5698] ? set_blocksize+0x2d8/0x370 [ 226.423238][ T5698] get_tree_bdev+0x43e/0x7d0 [ 226.427865][ T5698] ? gfs2_reconfigure+0xf90/0xf90 [ 226.432920][ T5698] gfs2_get_tree+0x4e/0x270 [ 226.437458][ T5698] vfs_get_tree+0x8d/0x350 [ 226.441906][ T5698] path_mount+0x136e/0x1e70 [ 226.446447][ T5698] ? putname+0x102/0x140 [ 226.450717][ T5698] ? lockdep_hardirqs_on+0x7d/0x100 [ 226.455958][ T5698] ? finish_automount+0xa30/0xa30 [ 226.461025][ T5698] ? putname+0x102/0x140 [ 226.465303][ T5698] __x64_sys_mount+0x283/0x300 [ 226.470122][ T5698] ? copy_mnt_ns+0xb30/0xb30 [ 226.474755][ T5698] ? lockdep_hardirqs_on+0x7d/0x100 [ 226.480006][ T5698] ? _raw_spin_unlock_irq+0x2e/0x50 [ 226.485252][ T5698] ? ptrace_notify+0xfe/0x140 [ 226.489976][ T5698] do_syscall_64+0x39/0xb0 [ 226.494425][ T5698] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 226.500370][ T5698] RIP: 0033:0x7f4f6dd11c5a [ 226.504811][ T5698] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 226.524474][ T5698] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 226.532931][ T5698] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 226.540947][ T5698] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 226.548950][ T5698] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 226.556950][ T5698] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [pid 5697] mount("/dev/loop3", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5696] <... ioctl resumed>) = 0 [pid 5696] close(3) = 0 [pid 5696] mkdir("./file0", 0777) = 0 [ 226.564944][ T5698] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 226.573032][ T5698] [ 226.589071][ T5697] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 226.592261][ T5696] CPU: 0 PID: 5696 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 226.606928][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 226.617030][ T5696] Call Trace: [ 226.620334][ T5696] [ 226.623281][ T5696] dump_stack_lvl+0x136/0x150 [ 226.628011][ T5696] sysfs_warn_dup+0x80/0xa0 [ 226.632570][ T5696] sysfs_create_dir_ns+0x237/0x290 [ 226.637739][ T5696] ? sysfs_create_mount_point+0xb0/0xb0 [ 226.643354][ T5696] ? spin_bug+0x1c0/0x1c0 [ 226.647747][ T5696] ? do_raw_spin_unlock+0x175/0x230 [ 226.653010][ T5696] kobject_add_internal+0x2c9/0x9c0 [ 226.658261][ T5696] ? kfree+0x11/0x150 [ 226.662292][ T5696] kobject_init_and_add+0x101/0x170 [ 226.667707][ T5696] ? kobject_create_and_add+0xf0/0xf0 [ 226.673126][ T5696] ? lockdep_init_map_type+0x21e/0x810 [ 226.678631][ T5696] ? lockdep_hardirqs_on+0x7d/0x100 [ 226.683883][ T5696] ? lockdep_init_map_type+0x21e/0x810 [ 226.689410][ T5696] gfs2_sys_fs_add+0x1d5/0x450 [ 226.694307][ T5696] ? recover_store+0x170/0x170 [ 226.699120][ T5696] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 226.704908][ T5696] gfs2_fill_super+0x1312/0x2aa0 [ 226.709909][ T5696] ? gfs2_reconfigure+0xf90/0xf90 [ 226.714990][ T5696] ? snprintf+0xbf/0x100 [ 226.719288][ T5696] ? vsprintf+0x30/0x30 [ 226.723490][ T5696] ? wait_for_completion_io_timeout+0x20/0x20 [ 226.729603][ T5696] ? set_blocksize+0x2d8/0x370 [ 226.734425][ T5696] get_tree_bdev+0x43e/0x7d0 [ 226.739070][ T5696] ? gfs2_reconfigure+0xf90/0xf90 [ 226.744131][ T5696] gfs2_get_tree+0x4e/0x270 [ 226.748678][ T5696] vfs_get_tree+0x8d/0x350 [ 226.753145][ T5696] path_mount+0x136e/0x1e70 [ 226.757703][ T5696] ? putname+0x102/0x140 [ 226.761999][ T5696] ? lockdep_hardirqs_on+0x7d/0x100 [ 226.767265][ T5696] ? finish_automount+0xa30/0xa30 [ 226.772368][ T5696] ? putname+0x102/0x140 [ 226.776668][ T5696] __x64_sys_mount+0x283/0x300 [ 226.781492][ T5696] ? copy_mnt_ns+0xb30/0xb30 [ 226.786148][ T5696] ? lockdep_hardirqs_on+0x7d/0x100 [ 226.791410][ T5696] ? _raw_spin_unlock_irq+0x2e/0x50 [ 226.796677][ T5696] ? ptrace_notify+0xfe/0x140 [ 226.801422][ T5696] do_syscall_64+0x39/0xb0 [ 226.805880][ T5696] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 226.811839][ T5696] RIP: 0033:0x7f4f6dd11c5a [ 226.816296][ T5696] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 226.835954][ T5696] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 226.844416][ T5696] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 226.852428][ T5696] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 226.860446][ T5696] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 226.868468][ T5696] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 226.876486][ T5696] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 226.884502][ T5696] [ 226.887543][ T5697] CPU: 1 PID: 5697 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 226.898008][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 226.908084][ T5697] Call Trace: [ 226.911379][ T5697] [ 226.914343][ T5697] dump_stack_lvl+0x136/0x150 [ 226.919065][ T5697] sysfs_warn_dup+0x80/0xa0 [ 226.923595][ T5697] sysfs_create_dir_ns+0x237/0x290 [ 226.928737][ T5697] ? sysfs_create_mount_point+0xb0/0xb0 [ 226.934313][ T5697] ? spin_bug+0x1c0/0x1c0 [ 226.938674][ T5697] ? do_raw_spin_unlock+0x175/0x230 [ 226.943906][ T5697] kobject_add_internal+0x2c9/0x9c0 [ 226.949130][ T5697] ? kfree+0x11/0x150 [ 226.953342][ T5697] kobject_init_and_add+0x101/0x170 [ 226.958571][ T5697] ? kobject_create_and_add+0xf0/0xf0 [ 226.963969][ T5697] ? lockdep_init_map_type+0x21e/0x810 [ 226.969457][ T5697] ? lockdep_hardirqs_on+0x7d/0x100 [ 226.974721][ T5697] ? lockdep_init_map_type+0x21e/0x810 [ 226.980217][ T5697] gfs2_sys_fs_add+0x1d5/0x450 [ 226.985011][ T5697] ? recover_store+0x170/0x170 [ 226.989796][ T5697] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 226.995550][ T5697] gfs2_fill_super+0x1312/0x2aa0 [ 227.000780][ T5697] ? gfs2_reconfigure+0xf90/0xf90 [ 227.005923][ T5697] ? snprintf+0xbf/0x100 [ 227.010196][ T5697] ? vsprintf+0x30/0x30 [ 227.014374][ T5697] ? wait_for_completion_io_timeout+0x20/0x20 [ 227.020479][ T5697] ? set_blocksize+0x2d8/0x370 [ 227.025274][ T5697] get_tree_bdev+0x43e/0x7d0 [ 227.029895][ T5697] ? gfs2_reconfigure+0xf90/0xf90 [ 227.034950][ T5697] gfs2_get_tree+0x4e/0x270 [ 227.039477][ T5697] vfs_get_tree+0x8d/0x350 [ 227.043921][ T5697] path_mount+0x136e/0x1e70 [ 227.048456][ T5697] ? putname+0x102/0x140 [ 227.052726][ T5697] ? lockdep_hardirqs_on+0x7d/0x100 [ 227.057958][ T5697] ? finish_automount+0xa30/0xa30 [ 227.063014][ T5697] ? putname+0x102/0x140 [ 227.067285][ T5697] __x64_sys_mount+0x283/0x300 [ 227.072078][ T5697] ? copy_mnt_ns+0xb30/0xb30 [ 227.076700][ T5697] ? lockdep_hardirqs_on+0x7d/0x100 [ 227.081925][ T5697] ? _raw_spin_unlock_irq+0x2e/0x50 [ 227.087188][ T5697] ? ptrace_notify+0xfe/0x140 [ 227.091915][ T5697] do_syscall_64+0x39/0xb0 [ 227.096357][ T5697] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 227.102296][ T5697] RIP: 0033:0x7f4f6dd11c5a [ 227.106731][ T5697] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 227.126363][ T5697] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 227.134797][ T5697] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 227.142796][ T5697] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 227.150796][ T5697] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 227.158831][ T5697] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 227.167017][ T5697] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 227.175012][ T5697] [ 227.189292][ T5698] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [pid 5696] mount("/dev/loop1", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5694] <... munmap resumed>) = 0 [pid 5694] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 227.215888][ T5696] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [pid 5694] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5694] close(3) = 0 [pid 5694] mkdir("./file0", 0777) = 0 [ 227.264013][ T5694] loop5: detected capacity change from 0 to 32768 [ 227.275271][ T5698] gfs2: fsid=syz:syz: error -17 adding sysfs files [pid 5694] mount("/dev/loop5", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5698] <... mount resumed>) = -1 EEXIST (File exists) [pid 5698] ioctl(4, LOOP_CLR_FD [pid 5696] <... mount resumed>) = -1 EEXIST (File exists) [ 227.311898][ T5696] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 227.327248][ T5694] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 227.335502][ T5694] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 227.338174][ T5697] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [pid 5696] ioctl(4, LOOP_CLR_FD [pid 5689] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5689] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5697] <... mount resumed>) = -1 EEXIST (File exists) [pid 5697] ioctl(4, LOOP_CLR_FD [ 227.367009][ T5697] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 227.383908][ T5694] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [pid 5689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [ 227.437565][ T5039] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 227.444406][ T5039] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [pid 5689] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5689] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5707 attached [pid 5707] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5689] <... clone3 resumed> => {parent_tid=[76]}, 88) = 76 [pid 5707] <... rseq resumed>) = 0 [pid 5707] set_robust_list(0x7f4f6609f9a0, 24 [pid 5689] rt_sigprocmask(SIG_SETMASK, [], [pid 5707] <... set_robust_list resumed>) = 0 [pid 5689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5707] rt_sigprocmask(SIG_SETMASK, [], [pid 5689] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5689] <... futex resumed>) = 0 [pid 5707] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5689] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5707] <... futex resumed>) = 0 [pid 5689] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5689] <... futex resumed>) = 0 [pid 5707] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5689] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5689] <... futex resumed>) = 0 [pid 5707] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5689] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5689] <... futex resumed>) = 0 [pid 5707] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5689] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... futex resumed>) = 0 [pid 5689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5707] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5690] <... ioctl resumed>) = 0 [pid 5690] close(4) = 0 [pid 5690] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5689] close(3 [pid 5690] <... futex resumed>) = 0 [pid 5689] <... close resumed>) = 0 [pid 5690] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5689] close(4) = -1 EBADF (Bad file descriptor) [pid 5029] <... umount2 resumed>) = 0 [pid 5689] close(5) = -1 EBADF (Bad file descriptor) [pid 5029] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5689] close(6) = -1 EBADF (Bad file descriptor) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5689] close(7 [pid 5029] newfstatat(AT_FDCWD, "./24/file0", [pid 5689] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5689] close(8) = -1 EBADF (Bad file descriptor) [pid 5689] close(9) = -1 EBADF (Bad file descriptor) [pid 5689] close(10) = -1 EBADF (Bad file descriptor) [pid 5689] close(11) = -1 EBADF (Bad file descriptor) [pid 5689] close(12) = -1 EBADF (Bad file descriptor) [pid 5689] close(13) = -1 EBADF (Bad file descriptor) [pid 5689] close(14) = -1 EBADF (Bad file descriptor) [pid 5689] close(15) = -1 EBADF (Bad file descriptor) [pid 5689] close(16) = -1 EBADF (Bad file descriptor) [pid 5689] close(17) = -1 EBADF (Bad file descriptor) [pid 5689] close(18) = -1 EBADF (Bad file descriptor) [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5689] close(19 [pid 5029] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5689] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5689] close(20 [pid 5029] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5689] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5689] close(21 [pid 5029] <... openat resumed>) = 4 [pid 5689] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] newfstatat(4, "", [pid 5689] close(22) = -1 EBADF (Bad file descriptor) [pid 5689] close(23 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5689] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] getdents64(4, [pid 5689] close(24) = -1 EBADF (Bad file descriptor) [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5689] close(25) = -1 EBADF (Bad file descriptor) [pid 5029] getdents64(4, [pid 5689] close(26 [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5689] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5689] close(27 [pid 5029] close(4 [pid 5689] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5689] close(28 [pid 5029] <... close resumed>) = 0 [pid 5689] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5689] close(29 [pid 5029] rmdir("./24/file0" [pid 5689] <... close resumed>) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5689] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5029] <... rmdir resumed>) = 0 [pid 5689] exit_group(0 [pid 5707] <... futex resumed>) = ? [pid 5690] <... futex resumed>) = ? [pid 5689] <... exit_group resumed>) = ? [pid 5029] umount2("./24/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5707] +++ exited with 0 +++ [pid 5690] +++ exited with 0 +++ [pid 5689] +++ exited with 0 +++ [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./24/cgroup", [pid 5033] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=59 /* 0.59 s */} --- [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] restart_syscall(<... resuming interrupted clone ...> [pid 5029] unlink("./24/cgroup" [pid 5033] <... restart_syscall resumed>) = 0 [pid 5029] <... unlink resumed>) = 0 [pid 5029] umount2("./24/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./24/cgroup.net", [pid 5033] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... openat resumed>) = 3 [pid 5029] unlink("./24/cgroup.net" [pid 5033] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] <... unlink resumed>) = 0 [pid 5033] getdents64(3, [pid 5029] getdents64(3, [pid 5033] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5029] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5033] umount2("./26/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] close(3 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./26/cgroup.cpu", [pid 5029] <... close resumed>) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./26/cgroup.cpu" [pid 5029] rmdir("./24" [pid 5033] <... unlink resumed>) = 0 [pid 5029] <... rmdir resumed>) = 0 [pid 5033] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] mkdir("./25", 0777 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5696] <... ioctl resumed>) = 0 [pid 5691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5033] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5029] <... mkdir resumed>) = 0 [pid 5691] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5691] <... futex resumed>) = 0 [pid 5033] unlink("./26/binderfs" [pid 5697] <... ioctl resumed>) = 0 [pid 5696] close(4 [pid 5694] <... mount resumed>) = 0 [pid 5691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5029] <... openat resumed>) = 3 [pid 5694] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5694] chdir("./file0") = 0 [pid 5694] ioctl(4, LOOP_CLR_FD) = 0 [ 227.818019][ T5039] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 373ms [ 227.833205][ T5039] gfs2: fsid=syz:syz.0: jid=0: Done [ 227.850861][ T5694] gfs2: fsid=syz:syz.0: first mount done, others may mount [pid 5694] close(4 [pid 5697] close(4 [pid 5696] <... close resumed>) = 0 [pid 5694] <... close resumed>) = 0 [pid 5691] <... mmap resumed>) = 0x7f4f6607f000 [pid 5033] <... unlink resumed>) = 0 [pid 5029] ioctl(3, LOOP_CLR_FD [pid 5697] <... close resumed>) = 0 [pid 5696] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5033] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5697] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = 1 [pid 5692] <... futex resumed>) = 0 [pid 5029] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5691] <... mprotect resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5692] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... futex resumed>) = 1 [pid 5696] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5695] <... futex resumed>) = 0 [pid 5691] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5029] close(3 [pid 5697] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] <... openat resumed>) = 3 [pid 5692] <... futex resumed>) = 0 [pid 5033] newfstatat(AT_FDCWD, "./26/file0", [pid 5029] <... close resumed>) = 0 [pid 5695] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5696] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5695] <... futex resumed>) = 0 [pid 5698] <... ioctl resumed>) = 0 [pid 5697] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5696] <... futex resumed>) = 0 [pid 5695] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5694] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5033] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5709 attached [pid 5698] close(4 [pid 5697] <... openat resumed>) = 3 [pid 5696] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5694] <... futex resumed>) = 0 [pid 5692] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... clone resumed>, child_tidptr=0x55555654e690) = 80 [pid 5709] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5698] <... close resumed>) = 0 [pid 5697] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5694] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5692] <... futex resumed>) = 0 [pid 5691] <... clone3 resumed> => {parent_tid=[79]}, 88) = 79 [pid 5033] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5709] <... rseq resumed>) = 0 [pid 5698] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... futex resumed>) = 1 [pid 5696] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5695] <... futex resumed>) = 0 [pid 5692] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5691] rt_sigprocmask(SIG_SETMASK, [], [pid 5033] <... openat resumed>) = 4 [pid 5698] <... futex resumed>) = 1 [pid 5697] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5695] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] <... futex resumed>) = 0 [pid 5691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5033] newfstatat(4, "", [pid 5698] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5696] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5695] <... futex resumed>) = 0 [pid 5693] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5696] <... futex resumed>) = 1 [pid 5695] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5693] <... futex resumed>) = 0 [pid 5692] <... futex resumed>) = 0 [pid 5691] <... futex resumed>) = 0 [pid 5033] getdents64(4, [pid 5709] set_robust_list(0x7f4f6609f9a0, 24 [pid 5698] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5697] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5696] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5692] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5709] <... set_robust_list resumed>) = 0 [pid 5698] <... openat resumed>) = 3 [pid 5697] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5696] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5692] <... futex resumed>) = 0 [pid 5033] getdents64(4, [pid 5709] rt_sigprocmask(SIG_SETMASK, [], [pid 5698] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... futex resumed>) = 1 [pid 5696] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5695] <... futex resumed>) = 0 [pid 5692] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5709] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5698] <... futex resumed>) = 1 [pid 5697] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5696] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5695] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] <... futex resumed>) = 0 [pid 5033] close(4 [pid 5709] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5698] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5696] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5695] <... futex resumed>) = 0 [pid 5693] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... close resumed>) = 0 [pid 5698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5697] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5696] <... futex resumed>) = 1 [pid 5695] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5693] <... futex resumed>) = 0 [pid 5692] <... futex resumed>) = 0 [pid 5033] rmdir("./26/file0" [pid 5698] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5697] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5696] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5693] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5692] close(3 [pid 5033] <... rmdir resumed>) = 0 [pid 5698] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5697] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] <... close resumed>) = 0 [pid 5033] umount2("./26/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5698] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5697] <... futex resumed>) = 1 [pid 5695] <... futex resumed>) = 0 [pid 5692] close(4 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5698] <... futex resumed>) = 1 [pid 5697] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5695] close(3 [pid 5693] <... futex resumed>) = 0 [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] newfstatat(AT_FDCWD, "./26/cgroup", [pid 5698] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5695] <... close resumed>) = 0 [pid 5693] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5692] close(5 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5698] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5695] close(4 [pid 5693] <... futex resumed>) = 0 [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] unlink("./26/cgroup" [pid 5698] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5692] close(6 [pid 5033] <... unlink resumed>) = 0 [pid 5698] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5695] close(5 [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./26/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5698] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] close(7 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5698] <... futex resumed>) = 1 [pid 5695] close(6 [pid 5693] <... futex resumed>) = 0 [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] newfstatat(AT_FDCWD, "./26/cgroup.net", [pid 5698] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(3 [pid 5692] close(8 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5695] close(7 [pid 5693] <... close resumed>) = 0 [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] unlink("./26/cgroup.net" [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(4 [pid 5692] close(9 [pid 5033] <... unlink resumed>) = 0 [pid 5695] close(8 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] getdents64(3, [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(5 [pid 5692] close(10 [pid 5033] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5695] close(9 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] close(3 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(6 [pid 5692] close(11 [pid 5033] <... close resumed>) = 0 [pid 5695] close(10 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] rmdir("./26" [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(7 [pid 5692] close(12 [pid 5033] <... rmdir resumed>) = 0 [pid 5695] close(11 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] mkdir("./27", 0777 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(8 [pid 5692] close(13 [pid 5033] <... mkdir resumed>) = 0 [pid 5695] close(12 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(9 [ 227.932200][ T5709] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [ 227.969587][ T5709] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 227.969587][ T5709] inode = 12 2341 [pid 5692] close(14 [pid 5033] <... openat resumed>) = 3 [pid 5695] close(13 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] ioctl(3, LOOP_CLR_FD [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(10 [pid 5692] close(15 [pid 5033] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5695] close(14 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5033] close(3 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(11 [pid 5692] close(16 [pid 5691] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... close resumed>) = 0 [pid 5695] close(15 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5691] <... futex resumed>) = 1 [pid 5033] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5710 attached [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(12 [pid 5692] close(17 [pid 5691] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5710] set_robust_list(0x55555654e6a0, 24 [pid 5695] close(16 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... clone resumed>, child_tidptr=0x55555654e690) = 77 [pid 5710] <... set_robust_list resumed>) = 0 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(13 [pid 5692] close(18 [pid 5710] chdir("./27" [pid 5695] close(17 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... chdir resumed>) = 0 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(14 [pid 5692] close(19 [pid 5710] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5695] close(18 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... prctl resumed>) = 0 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(15 [pid 5692] close(20 [pid 5710] setpgid(0, 0 [pid 5695] close(19 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... setpgid resumed>) = 0 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(16 [pid 5692] close(21 [pid 5710] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5695] close(20 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... symlink resumed>) = 0 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(17 [pid 5692] close(22 [pid 5710] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5695] close(21 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... symlink resumed>) = 0 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5694] <... futex resumed>) = 0 [pid 5693] close(18 [pid 5692] close(23 [pid 5710] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5695] close(22 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... symlink resumed>) = 0 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(19 [pid 5692] close(24 [pid 5710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5695] close(23 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... openat resumed>) = 3 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(20 [pid 5692] close(25 [pid 5710] write(3, "1000", 4 [pid 5695] close(24 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... write resumed>) = 4 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(21 [pid 5692] close(26 [pid 5710] close(3 [pid 5695] close(25 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... close resumed>) = 0 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(22 [pid 5692] close(27 [pid 5710] symlink("/dev/binderfs", "./binderfs" [pid 5695] close(26 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... symlink resumed>) = 0 [ 227.969587][ T5709] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 228.000029][ T5709] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(23 [pid 5692] close(28 [pid 5710] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5695] close(27 [pid 5694] ioctl(0, VFAT_IOCTL_READDIR_SHORT [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... futex resumed>) = 0 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(24 [pid 5692] close(29 [pid 5710] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5695] close(28 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5710] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(25 [pid 5692] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5710] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5695] close(29 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... write resumed>) = 156 [pid 5710] <... mprotect resumed>) = 0 [pid 5695] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5693] close(26 [pid 5692] exit_group(0 [pid 5710] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5696] <... futex resumed>) = ? [pid 5695] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5692] <... exit_group resumed>) = ? [pid 5710] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5696] +++ exited with 0 +++ [pid 5695] <... write resumed>) = 156 [pid 5693] close(27 [pid 5692] +++ exited with 0 +++ [pid 5710] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5695] exit_group(0 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5711 attached [pid 5697] <... futex resumed>) = ? [pid 5695] <... exit_group resumed>) = ? [ 228.026235][ T5709] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5709 [syz-executor676] __gfs2_lookup+0x83/0x280 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5693] close(28 [pid 5032] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=73, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=55 /* 0.55 s */} --- [pid 5711] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5710] <... clone3 resumed> => {parent_tid=[78]}, 88) = 78 [pid 5697] +++ exited with 0 +++ [pid 5695] +++ exited with 0 +++ [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5711] <... rseq resumed>) = 0 [pid 5710] rt_sigprocmask(SIG_SETMASK, [], [pid 5693] close(29 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=69 /* 0.69 s */} --- [pid 5711] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5693] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5711] <... set_robust_list resumed>) = 0 [pid 5710] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5693] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5032] <... openat resumed>) = 3 [pid 5711] rt_sigprocmask(SIG_SETMASK, [], [pid 5710] <... futex resumed>) = 0 [pid 5693] <... write resumed>) = 156 [pid 5032] newfstatat(3, "", [pid 5030] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5711] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5710] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5693] exit_group(0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5711] memfd_create("syzkaller", 0 [pid 5698] <... futex resumed>) = ? [pid 5693] <... exit_group resumed>) = ? [pid 5032] getdents64(3, [pid 5030] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5711] <... memfd_create resumed>) = 3 [pid 5698] +++ exited with 0 +++ [pid 5693] +++ exited with 0 +++ [pid 5032] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5030] <... openat resumed>) = 3 [pid 5711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5032] umount2("./25/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] newfstatat(3, "", [pid 5711] <... mmap resumed>) = 0x7f4f650a0000 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=51 /* 0.51 s */} --- [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] newfstatat(AT_FDCWD, "./25/cgroup.cpu", [pid 5031] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] getdents64(3, [pid 5694] <... ioctl resumed>, 0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5032] unlink("./25/cgroup.cpu" [pid 5031] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5030] umount2("./24/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... unlink resumed>) = 0 [pid 5031] <... openat resumed>) = 3 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] newfstatat(3, "", [pid 5030] newfstatat(AT_FDCWD, "./24/cgroup.cpu", [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5031] getdents64(3, [pid 5030] unlink("./24/cgroup.cpu" [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5030] <... unlink resumed>) = 0 [pid 5032] unlink("./25/binderfs" [pid 5031] umount2("./24/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... unlink resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] newfstatat(AT_FDCWD, "./24/cgroup.cpu", [pid 5030] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] newfstatat(AT_FDCWD, "./25/file0", [pid 5031] unlink("./24/cgroup.cpu" [pid 5030] unlink("./24/binderfs" [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5030] <... unlink resumed>) = 0 [pid 5032] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5031] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5030] newfstatat(AT_FDCWD, "./24/file0", [pid 5032] <... openat resumed>) = 4 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] newfstatat(4, "", [pid 5031] unlink("./24/binderfs" [pid 5030] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] getdents64(4, [pid 5031] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... openat resumed>) = 4 [pid 5032] getdents64(4, [pid 5031] newfstatat(AT_FDCWD, "./24/file0", [pid 5030] newfstatat(4, "", [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 228.111603][ T5709] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [pid 5032] close(4 [pid 5031] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] getdents64(4, [pid 5694] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... close resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5032] rmdir("./25/file0" [pid 5031] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5030] getdents64(4, [pid 5032] <... rmdir resumed>) = 0 [pid 5031] <... openat resumed>) = 4 [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5032] umount2("./25/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] newfstatat(4, "", [pid 5030] close(4 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] <... close resumed>) = 0 [pid 5032] newfstatat(AT_FDCWD, "./25/cgroup", [pid 5031] getdents64(4, [pid 5030] rmdir("./24/file0" [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5030] <... rmdir resumed>) = 0 [pid 5032] unlink("./25/cgroup" [pid 5031] getdents64(4, [pid 5030] umount2("./24/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... unlink resumed>) = 0 [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] umount2("./25/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] close(4 [pid 5030] newfstatat(AT_FDCWD, "./24/cgroup", [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... close resumed>) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] newfstatat(AT_FDCWD, "./25/cgroup.net", [pid 5031] rmdir("./24/file0" [pid 5030] unlink("./24/cgroup" [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] <... rmdir resumed>) = 0 [pid 5030] <... unlink resumed>) = 0 [pid 5032] unlink("./25/cgroup.net" [pid 5031] umount2("./24/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] umount2("./24/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... unlink resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] getdents64(3, [pid 5031] newfstatat(AT_FDCWD, "./24/cgroup", [pid 5030] newfstatat(AT_FDCWD, "./24/cgroup.net", [pid 5032] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] close(3 [pid 5031] unlink("./24/cgroup" [pid 5030] unlink("./24/cgroup.net" [pid 5032] <... close resumed>) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5030] <... unlink resumed>) = 0 [ 228.154731][ T5709] gfs2: fsid=syz:syz.0: about to withdraw this file system [pid 5032] rmdir("./25" [pid 5031] umount2("./24/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] getdents64(3, ./strace-static-x86_64: Process 5708 attached [pid 5032] <... rmdir resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5032] mkdir("./26", 0777 [pid 5031] newfstatat(AT_FDCWD, "./24/cgroup.net", [pid 5030] close(3 [pid 5694] <... futex resumed>) = 0 [pid 5691] <... futex resumed>) = 0 [pid 5032] <... mkdir resumed>) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... close resumed>) = 0 [pid 5694] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5691] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5031] unlink("./24/cgroup.net" [pid 5030] rmdir("./24" [pid 5694] <... openat resumed>) = -1 EIO (Input/output error) [pid 5032] <... openat resumed>) = 3 [pid 5031] <... unlink resumed>) = 0 [pid 5030] <... rmdir resumed>) = 0 [pid 5694] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] ioctl(3, LOOP_CLR_FD [pid 5031] getdents64(3, [pid 5030] mkdir("./25", 0777 [pid 5708] set_robust_list(0x55555654e6a0, 24 [pid 5694] <... futex resumed>) = 1 [pid 5691] <... futex resumed>) = 0 [pid 5032] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5031] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5030] <... mkdir resumed>) = 0 [pid 5708] <... set_robust_list resumed>) = 0 [pid 5708] chdir("./25" [pid 5032] close(3 [pid 5031] close(3 [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5708] <... chdir resumed>) = 0 [pid 5708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5708] setpgid(0, 0 [pid 5032] <... close resumed>) = 0 [pid 5031] <... close resumed>) = 0 [pid 5030] <... openat resumed>) = 3 [pid 5694] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5708] <... setpgid resumed>) = 0 [pid 5708] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5031] rmdir("./24" [pid 5030] ioctl(3, LOOP_CLR_FD [pid 5708] <... symlink resumed>) = 0 [pid 5708] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5031] <... rmdir resumed>) = 0 [pid 5708] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5708] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5712 attached [pid 5032] <... clone resumed>, child_tidptr=0x55555654e690) = 75 [pid 5708] close(3 [pid 5030] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5031] mkdir("./25", 0777 [pid 5708] <... close resumed>) = 0 [pid 5708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5708] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [ 228.196609][ T5709] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 228.207634][ T5709] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 228.214333][ T5709] gfs2: fsid=syz:syz.0: File system withdrawn [ 228.253986][ T5709] CPU: 1 PID: 5709 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 228.264516][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 228.274650][ T5709] Call Trace: [ 228.277967][ T5709] [ 228.280930][ T5709] dump_stack_lvl+0x136/0x150 [ 228.285672][ T5709] gfs2_withdraw+0xb33/0x1060 [ 228.290423][ T5709] ? gfs2_consist_inode_i+0x104/0x150 [ 228.295854][ T5709] gfs2_dirent_scan+0x32a/0x3d0 [ 228.300778][ T5709] ? gfs2_dirent_prev+0x210/0x210 [ 228.305851][ T5709] ? gfs2_dirent_prev+0x210/0x210 [ 228.310924][ T5709] gfs2_dirent_search+0x47d/0x580 [ 228.315987][ T5709] ? get_first_leaf+0x190/0x190 [ 228.320879][ T5709] ? gfs2_permission+0x256/0x3e0 [ 228.325850][ T5709] gfs2_dir_search+0x8d/0x2d0 [ 228.330571][ T5709] ? gfs2_dir_read+0x14e0/0x14e0 [ 228.335542][ T5709] gfs2_lookupi+0x481/0x640 [ 228.340071][ T5709] ? gfs2_lookup_by_inum+0x100/0x100 [ 228.345387][ T5709] ? __gfs2_lookup+0x83/0x280 [ 228.350269][ T5709] ? d_alloc_parallel+0x693/0x1530 [ 228.355417][ T5709] __gfs2_lookup+0x83/0x280 [ 228.359948][ T5709] ? gfs2_lookupi+0x640/0x640 [ 228.364654][ T5709] ? __d_lookup_rcu+0x4e0/0x4e0 [ 228.369551][ T5709] ? __d_lookup+0x289/0x4c0 [ 228.374081][ T5709] gfs2_atomic_open+0xde/0x250 [ 228.378870][ T5709] ? __gfs2_lookup+0x280/0x280 [ 228.383664][ T5709] lookup_open.isra.0+0xce2/0x1400 [ 228.388801][ T5709] ? link_path_walk.part.0+0xd60/0xd60 [ 228.394294][ T5709] ? lookup_fast+0x14e/0x520 [ 228.398910][ T5709] path_openat+0x969/0x2710 [ 228.403446][ T5709] ? path_lookupat+0x840/0x840 [ 228.408241][ T5709] ? find_held_lock+0x2d/0x110 [ 228.413047][ T5709] do_filp_open+0x1ba/0x410 [ 228.417586][ T5709] ? may_open_dev+0xf0/0xf0 [ 228.422122][ T5709] ? find_held_lock+0x2d/0x110 [ 228.426920][ T5709] ? do_raw_spin_lock+0x124/0x2b0 [ 228.431974][ T5709] ? spin_bug+0x1c0/0x1c0 [ 228.436684][ T5709] ? _raw_spin_unlock+0x28/0x40 [ 228.441574][ T5709] ? alloc_fd+0x2e4/0x750 [ 228.445945][ T5709] do_sys_openat2+0x160/0x1c0 [ 228.450655][ T5709] ? build_open_flags+0x720/0x720 [ 228.455712][ T5709] ? ptrace_notify+0xfe/0x140 [ 228.460430][ T5709] ? lock_downgrade+0x690/0x690 [ 228.465308][ T5709] __x64_sys_openat+0x143/0x1f0 [ 228.470212][ T5709] ? __ia32_sys_open+0x1c0/0x1c0 [ 228.475275][ T5709] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.480508][ T5709] ? lockdep_hardirqs_on+0x7d/0x100 [ 228.485733][ T5709] ? _raw_spin_unlock_irq+0x2e/0x50 [ 228.490970][ T5709] ? ptrace_notify+0xfe/0x140 [ 228.495685][ T5709] do_syscall_64+0x39/0xb0 [ 228.500121][ T5709] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 228.506057][ T5709] RIP: 0033:0x7f4f6dd107f9 [ 228.510493][ T5709] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 228.530125][ T5709] RSP: 002b:00007f4f6609f228 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 228.538571][ T5709] RAX: ffffffffffffffda RBX: 00007f4f6dda46f8 RCX: 00007f4f6dd107f9 [ 228.546564][ T5709] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000ffffff9c [pid 5712] set_robust_list(0x55555654e6a0, 24 [pid 5031] <... mkdir resumed>) = 0 [pid 5030] close(3 [pid 5708] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5708] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5713 attached [pid 5713] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5708] <... clone3 resumed> => {parent_tid=[81]}, 88) = 81 [pid 5713] <... rseq resumed>) = 0 [pid 5708] rt_sigprocmask(SIG_SETMASK, [], [pid 5713] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5713] <... set_robust_list resumed>) = 0 [pid 5708] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] rt_sigprocmask(SIG_SETMASK, [], [pid 5708] <... futex resumed>) = 0 [pid 5713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5708] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5713] memfd_create("syzkaller", 0) = 3 [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5712] <... set_robust_list resumed>) = 0 [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5030] <... close resumed>) = 0 [pid 5712] chdir("./26" [pid 5031] <... openat resumed>) = 3 [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5712] <... chdir resumed>) = 0 [pid 5709] <... openat resumed>) = -1 EIO (Input/output error) [pid 5712] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5709] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5714 attached [pid 5712] <... prctl resumed>) = 0 [pid 5709] <... futex resumed>) = 0 [pid 5031] ioctl(3, LOOP_CLR_FD [pid 5712] setpgid(0, 0 [pid 5709] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] <... setpgid resumed>) = 0 [pid 5712] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 5691] close(3 [pid 5031] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5714] set_robust_list(0x55555654e6a0, 24 [pid 5712] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5691] <... close resumed>) = 0 [pid 5031] close(3 [pid 5030] <... clone resumed>, child_tidptr=0x55555654e690) = 72 [pid 5712] <... symlink resumed>) = 0 [pid 5691] close(4 [pid 5031] <... close resumed>) = 0 [pid 5712] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5712] <... symlink resumed>) = 0 [pid 5691] close(5 [pid 5712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5712] <... openat resumed>) = 3 [pid 5691] close(6 [pid 5712] write(3, "1000", 4 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5712] <... write resumed>) = 4 [pid 5691] close(7./strace-static-x86_64: Process 5715 attached [pid 5712] close(3 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5714] <... set_robust_list resumed>) = 0 [pid 5715] set_robust_list(0x55555654e6a0, 24 [pid 5712] <... close resumed>) = 0 [pid 5691] close(8 [pid 5715] <... set_robust_list resumed>) = 0 [pid 5712] symlink("/dev/binderfs", "./binderfs" [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] chdir("./25" [pid 5714] chdir("./25" [pid 5712] <... symlink resumed>) = 0 [pid 5691] close(9 [pid 5031] <... clone resumed>, child_tidptr=0x55555654e690) = 74 [pid 5715] <... chdir resumed>) = 0 [pid 5714] <... chdir resumed>) = 0 [ 228.554556][ T5709] RBP: 00007f4f6dda46f0 R08: 00007fffaa0db527 R09: 00007f4f6609f6c0 [ 228.562567][ T5709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f6dda46fc [ 228.570572][ T5709] R13: 0030656c69662f2e R14: 00007f4f6dd5d740 R15: 00007fffaa0db528 [ 228.578656][ T5709] [pid 5712] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5714] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5712] <... futex resumed>) = 0 [pid 5691] close(10 [pid 5715] <... prctl resumed>) = 0 [pid 5714] <... prctl resumed>) = 0 [pid 5712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] setpgid(0, 0 [pid 5714] setpgid(0, 0 [pid 5712] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5691] close(11 [pid 5715] <... setpgid resumed>) = 0 [pid 5714] <... setpgid resumed>) = 0 [pid 5712] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5714] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5712] <... mprotect resumed>) = 0 [pid 5691] close(12 [pid 5715] <... symlink resumed>) = 0 [pid 5714] <... symlink resumed>) = 0 [pid 5712] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5714] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5712] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5691] close(13 [pid 5715] <... symlink resumed>) = 0 [pid 5712] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5716 attached [pid 5715] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5691] close(14 [pid 5716] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5715] <... symlink resumed>) = 0 [pid 5712] <... clone3 resumed> => {parent_tid=[76]}, 88) = 76 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5716] <... rseq resumed>) = 0 [pid 5715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5714] <... symlink resumed>) = 0 [pid 5712] rt_sigprocmask(SIG_SETMASK, [], [pid 5691] close(15 [pid 5716] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5715] <... openat resumed>) = 3 [pid 5714] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5712] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5716] <... set_robust_list resumed>) = 0 [pid 5715] write(3, "1000", 4 [pid 5712] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] close(16 [pid 5714] <... symlink resumed>) = 0 [pid 5716] rt_sigprocmask(SIG_SETMASK, [], [pid 5715] <... write resumed>) = 4 [pid 5714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5712] <... futex resumed>) = 0 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5716] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5715] close(3 [pid 5712] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5691] close(17 [pid 5714] <... openat resumed>) = 3 [pid 5716] memfd_create("syzkaller", 0 [pid 5715] <... close resumed>) = 0 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5716] <... memfd_create resumed>) = 3 [pid 5715] symlink("/dev/binderfs", "./binderfs" [pid 5714] write(3, "1000", 4 [pid 5691] close(18 [pid 5716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5715] <... symlink resumed>) = 0 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5716] <... mmap resumed>) = 0x7f4f650a0000 [pid 5715] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5691] close(19 [pid 5715] <... futex resumed>) = 0 [pid 5714] <... write resumed>) = 4 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5691] close(20 [pid 5715] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5691] close(21 [pid 5715] <... mprotect resumed>) = 0 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5691] close(22 [pid 5715] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5691] close(23 [pid 5714] close(3 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] <... clone3 resumed> => {parent_tid=[75]}, 88) = 75 [pid 5691] close(24./strace-static-x86_64: Process 5717 attached [pid 5715] rt_sigprocmask(SIG_SETMASK, [], [pid 5714] <... close resumed>) = 0 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5691] close(25 [pid 5717] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5715] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5714] symlink("/dev/binderfs", "./binderfs" [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] <... futex resumed>) = 0 [pid 5691] close(26 [pid 5717] <... rseq resumed>) = 0 [pid 5715] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5691] close(27) = -1 EBADF (Bad file descriptor) [pid 5691] close(28) = -1 EBADF (Bad file descriptor) [pid 5691] close(29 [pid 5717] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5714] <... symlink resumed>) = 0 [pid 5691] <... close resumed>) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5691] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5691] exit_group(0 [pid 5717] <... set_robust_list resumed>) = 0 [pid 5714] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5709] <... futex resumed>) = ? [pid 5691] <... exit_group resumed>) = ? [pid 5709] +++ exited with 0 +++ [pid 5717] rt_sigprocmask(SIG_SETMASK, [], [pid 5714] <... futex resumed>) = 0 [pid 5714] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5717] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5714] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5717] memfd_create("syzkaller", 0 [pid 5714] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5717] <... memfd_create resumed>) = 3 [pid 5714] <... mprotect resumed>) = 0 [pid 5717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5714] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5717] <... mmap resumed>) = 0x7f4f650a0000 [pid 5714] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5714] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5718 attached => {parent_tid=[73]}, 88) = 73 [pid 5714] rt_sigprocmask(SIG_SETMASK, [], [pid 5718] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5718] <... rseq resumed>) = 0 [pid 5714] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] set_robust_list(0x7f4f6d4c09a0, 24) = 0 [pid 5714] <... futex resumed>) = 0 [pid 5714] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5718] memfd_create("syzkaller", 0) = 3 [pid 5718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5694] <... futex resumed>) = ? [pid 5694] +++ exited with 0 +++ [pid 5691] +++ exited with 0 +++ [pid 5034] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=62 /* 0.62 s */} --- [pid 5034] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5034] kill(-77, SIGKILL) = 0 [pid 5034] kill(77, SIGKILL) = 0 [pid 5034] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5034] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5034] umount2("./25/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./25/cgroup.cpu") = 0 [pid 5034] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./25/binderfs") = 0 [pid 5034] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5717] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5034] <... umount2 resumed>) = 0 [pid 5034] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5034] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(4, [pid 5716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5034] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5034] close(4) = 0 [pid 5034] rmdir("./25/file0") = 0 [pid 5034] umount2("./25/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./25/cgroup") = 0 [pid 5034] umount2("./25/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./25/cgroup.net") = 0 [pid 5034] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5034] close(3) = 0 [pid 5034] rmdir("./25") = 0 [pid 5034] mkdir("./26", 0777) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5034] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5034] close(3) = 0 [pid 5034] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5719 attached , child_tidptr=0x55555654e690) = 80 [pid 5719] set_robust_list(0x55555654e6a0, 24) = 0 [pid 5719] chdir("./26") = 0 [pid 5719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5719] setpgid(0, 0) = 0 [pid 5719] symlink("/syzcgroup/unified/syz5", "./cgroup") = 0 [pid 5719] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu") = 0 [pid 5719] symlink("/syzcgroup/net/syz5", "./cgroup.net") = 0 [pid 5719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5718] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5719] <... openat resumed>) = 3 [pid 5719] write(3, "1000", 4) = 4 [pid 5719] close(3) = 0 [pid 5719] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5719] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5719] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5719] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5720 attached [pid 5720] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5719] <... clone3 resumed> => {parent_tid=[81]}, 88) = 81 [pid 5720] <... rseq resumed>) = 0 [pid 5719] rt_sigprocmask(SIG_SETMASK, [], [pid 5720] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5720] <... set_robust_list resumed>) = 0 [pid 5719] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5720] rt_sigprocmask(SIG_SETMASK, [], [pid 5719] <... futex resumed>) = 0 [pid 5720] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5719] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5720] memfd_create("syzkaller", 0) = 3 [pid 5720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5717] <... write resumed>) = 16777216 [pid 5717] munmap(0x7f4f650a0000, 16777216) = 0 [pid 5717] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5717] ioctl(4, LOOP_SET_FD, 3 [pid 5711] <... write resumed>) = 16777216 [pid 5716] <... write resumed>) = 16777216 [pid 5716] munmap(0x7f4f650a0000, 16777216 [pid 5711] munmap(0x7f4f650a0000, 16777216 [pid 5717] <... ioctl resumed>) = 0 [pid 5717] close(3) = 0 [pid 5717] mkdir("./file0", 0777) = 0 [ 230.359327][ T5717] loop4: detected capacity change from 0 to 32768 [pid 5717] mount("/dev/loop4", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5713] <... write resumed>) = 16777216 [ 230.427741][ T5717] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 230.470485][ T5717] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [pid 5713] munmap(0x7f4f650a0000, 16777216 [pid 5716] <... munmap resumed>) = 0 [ 230.521677][ T5717] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [pid 5716] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5716] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5716] close(3) = 0 [pid 5716] mkdir("./file0", 0777) = 0 [pid 5716] mount("/dev/loop1", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5711] <... munmap resumed>) = 0 [pid 5711] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 230.566625][ T5083] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 230.573567][ T5083] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 230.587731][ T5716] loop1: detected capacity change from 0 to 32768 [pid 5711] ioctl(4, LOOP_SET_FD, 3 [pid 5718] <... write resumed>) = 16777216 [pid 5718] munmap(0x7f4f650a0000, 16777216 [pid 5713] <... munmap resumed>) = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5713] ioctl(4, LOOP_SET_FD, 3 [pid 5711] <... ioctl resumed>) = 0 [ 230.619481][ T5711] loop2: detected capacity change from 0 to 32768 [ 230.626490][ T5716] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 230.640321][ T5716] CPU: 0 PID: 5716 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 230.650817][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 230.651698][ T5713] loop0: detected capacity change from 0 to 32768 [pid 5711] close(3) = 0 [pid 5711] mkdir("./file0", 0777) = 0 [ 230.660893][ T5716] Call Trace: [ 230.660905][ T5716] [ 230.660916][ T5716] dump_stack_lvl+0x136/0x150 [ 230.660968][ T5716] sysfs_warn_dup+0x80/0xa0 [ 230.682985][ T5716] sysfs_create_dir_ns+0x237/0x290 [ 230.688163][ T5716] ? sysfs_create_mount_point+0xb0/0xb0 [ 230.693784][ T5716] ? spin_bug+0x1c0/0x1c0 [ 230.698180][ T5716] ? do_raw_spin_unlock+0x175/0x230 [ 230.703438][ T5716] kobject_add_internal+0x2c9/0x9c0 [ 230.704647][ T5711] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 230.708661][ T5716] ? kfree+0x11/0x150 [pid 5711] mount("/dev/loop2", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5713] <... ioctl resumed>) = 0 [pid 5713] close(3) = 0 [pid 5713] mkdir("./file0", 0777) = 0 [ 230.708696][ T5716] kobject_init_and_add+0x101/0x170 [ 230.708731][ T5716] ? kobject_create_and_add+0xf0/0xf0 [ 230.730714][ T5716] ? lockdep_init_map_type+0x21e/0x810 [ 230.736235][ T5716] ? lockdep_hardirqs_on+0x7d/0x100 [ 230.741502][ T5716] ? lockdep_init_map_type+0x21e/0x810 [ 230.747029][ T5716] gfs2_sys_fs_add+0x1d5/0x450 [ 230.751847][ T5716] ? recover_store+0x170/0x170 [ 230.756750][ T5716] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 230.762529][ T5716] gfs2_fill_super+0x1312/0x2aa0 [ 230.767540][ T5716] ? gfs2_reconfigure+0xf90/0xf90 [ 230.772625][ T5716] ? snprintf+0xbf/0x100 [ 230.776921][ T5716] ? vsprintf+0x30/0x30 [ 230.781140][ T5716] ? wait_for_completion_io_timeout+0x20/0x20 [ 230.787273][ T5716] ? set_blocksize+0x2d8/0x370 [ 230.792101][ T5716] get_tree_bdev+0x43e/0x7d0 [ 230.796754][ T5716] ? gfs2_reconfigure+0xf90/0xf90 [ 230.801827][ T5716] gfs2_get_tree+0x4e/0x270 [ 230.806382][ T5716] vfs_get_tree+0x8d/0x350 [ 230.810848][ T5716] path_mount+0x136e/0x1e70 [ 230.815406][ T5716] ? putname+0x102/0x140 [pid 5713] mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5718] <... munmap resumed>) = 0 [pid 5718] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 230.819704][ T5716] ? lockdep_hardirqs_on+0x7d/0x100 [ 230.824964][ T5716] ? finish_automount+0xa30/0xa30 [ 230.830064][ T5716] ? putname+0x102/0x140 [ 230.834358][ T5716] __x64_sys_mount+0x283/0x300 [ 230.839173][ T5716] ? copy_mnt_ns+0xb30/0xb30 [ 230.843815][ T5716] ? lockdep_hardirqs_on+0x7d/0x100 [ 230.849082][ T5716] ? _raw_spin_unlock_irq+0x2e/0x50 [ 230.854349][ T5716] ? ptrace_notify+0xfe/0x140 [ 230.859125][ T5716] do_syscall_64+0x39/0xb0 [ 230.859671][ T5718] loop3: detected capacity change from 0 to 32768 [pid 5718] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5718] close(3) = 0 [pid 5718] mkdir("./file0", 0777) = 0 [ 230.863581][ T5716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 230.876090][ T5716] RIP: 0033:0x7f4f6dd11c5a [ 230.880543][ T5716] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 230.900715][ T5716] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 230.909187][ T5716] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 230.917222][ T5716] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 230.925243][ T5716] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 230.933261][ T5716] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 230.941281][ T5716] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 230.949300][ T5716] [ 230.956995][ T5711] CPU: 1 PID: 5711 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 230.967486][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 230.977581][ T5711] Call Trace: [ 230.980887][ T5711] [ 230.983850][ T5711] dump_stack_lvl+0x136/0x150 [ 230.988600][ T5711] sysfs_warn_dup+0x80/0xa0 [ 230.993149][ T5711] sysfs_create_dir_ns+0x237/0x290 [ 230.998311][ T5711] ? sysfs_create_mount_point+0xb0/0xb0 [ 231.003916][ T5711] ? spin_bug+0x1c0/0x1c0 [ 231.008324][ T5711] ? do_raw_spin_unlock+0x175/0x230 [ 231.013584][ T5711] kobject_add_internal+0x2c9/0x9c0 [ 231.018847][ T5711] ? kfree+0x11/0x150 [ 231.022884][ T5711] kobject_init_and_add+0x101/0x170 [ 231.028155][ T5711] ? kobject_create_and_add+0xf0/0xf0 [ 231.033585][ T5711] ? lockdep_init_map_type+0x21e/0x810 [ 231.036388][ T5083] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 462ms [ 231.039075][ T5711] ? lockdep_hardirqs_on+0x7d/0x100 [ 231.051778][ T5711] ? lockdep_init_map_type+0x21e/0x810 [ 231.057295][ T5711] gfs2_sys_fs_add+0x1d5/0x450 [ 231.061006][ T5083] gfs2: fsid=syz:syz.0: jid=0: Done [ 231.062084][ T5711] ? recover_store+0x170/0x170 [ 231.072088][ T5711] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 231.076422][ T5718] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 231.077851][ T5711] gfs2_fill_super+0x1312/0x2aa0 [ 231.086153][ T5713] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 231.090143][ T5711] ? gfs2_reconfigure+0xf90/0xf90 [ 231.102598][ T5711] ? snprintf+0xbf/0x100 [ 231.105668][ T5717] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 231.106868][ T5711] ? vsprintf+0x30/0x30 [ 231.106905][ T5711] ? wait_for_completion_io_timeout+0x20/0x20 [ 231.106949][ T5711] ? set_blocksize+0x2d8/0x370 [ 231.106989][ T5711] get_tree_bdev+0x43e/0x7d0 [ 231.133826][ T5711] ? gfs2_reconfigure+0xf90/0xf90 [ 231.138897][ T5711] gfs2_get_tree+0x4e/0x270 [ 231.143449][ T5711] vfs_get_tree+0x8d/0x350 [ 231.147906][ T5711] path_mount+0x136e/0x1e70 [ 231.152470][ T5711] ? putname+0x102/0x140 [ 231.156873][ T5711] ? lockdep_hardirqs_on+0x7d/0x100 [ 231.162162][ T5711] ? finish_automount+0xa30/0xa30 [ 231.167230][ T5711] ? putname+0x102/0x140 [ 231.171503][ T5711] __x64_sys_mount+0x283/0x300 [ 231.176310][ T5711] ? copy_mnt_ns+0xb30/0xb30 [ 231.180951][ T5711] ? lockdep_hardirqs_on+0x7d/0x100 [ 231.186200][ T5711] ? _raw_spin_unlock_irq+0x2e/0x50 [ 231.191443][ T5711] ? ptrace_notify+0xfe/0x140 [ 231.196175][ T5711] do_syscall_64+0x39/0xb0 [ 231.200632][ T5711] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 231.206599][ T5711] RIP: 0033:0x7f4f6dd11c5a [ 231.211082][ T5711] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 231.230730][ T5711] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 231.239177][ T5711] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 231.247194][ T5711] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 231.255209][ T5711] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 231.263207][ T5711] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [pid 5718] mount("/dev/loop3", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5717] <... mount resumed>) = 0 [ 231.271217][ T5711] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 231.279232][ T5711] [ 231.282357][ T5718] CPU: 0 PID: 5718 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 231.292825][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 231.302935][ T5718] Call Trace: [ 231.306256][ T5718] [ 231.309223][ T5718] dump_stack_lvl+0x136/0x150 [ 231.313968][ T5718] sysfs_warn_dup+0x80/0xa0 [ 231.318530][ T5718] sysfs_create_dir_ns+0x237/0x290 [ 231.323704][ T5718] ? sysfs_create_mount_point+0xb0/0xb0 [ 231.329310][ T5718] ? spin_bug+0x1c0/0x1c0 [ 231.333724][ T5718] ? do_raw_spin_unlock+0x175/0x230 [ 231.338987][ T5718] kobject_add_internal+0x2c9/0x9c0 [ 231.344244][ T5718] ? kfree+0x11/0x150 [ 231.348282][ T5718] kobject_init_and_add+0x101/0x170 [ 231.353539][ T5718] ? kobject_create_and_add+0xf0/0xf0 [ 231.358971][ T5718] ? lockdep_init_map_type+0x21e/0x810 [ 231.364494][ T5718] ? lockdep_hardirqs_on+0x7d/0x100 [ 231.369754][ T5718] ? lockdep_init_map_type+0x21e/0x810 [ 231.375290][ T5718] gfs2_sys_fs_add+0x1d5/0x450 [ 231.380194][ T5718] ? recover_store+0x170/0x170 [ 231.384993][ T5718] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 231.390759][ T5718] gfs2_fill_super+0x1312/0x2aa0 [ 231.395732][ T5718] ? gfs2_reconfigure+0xf90/0xf90 [ 231.400789][ T5718] ? snprintf+0xbf/0x100 [ 231.405062][ T5718] ? vsprintf+0x30/0x30 [ 231.409247][ T5718] ? wait_for_completion_io_timeout+0x20/0x20 [ 231.415366][ T5718] ? set_blocksize+0x2d8/0x370 [ 231.420161][ T5718] get_tree_bdev+0x43e/0x7d0 [ 231.424784][ T5718] ? gfs2_reconfigure+0xf90/0xf90 [ 231.429838][ T5718] gfs2_get_tree+0x4e/0x270 [ 231.434811][ T5718] vfs_get_tree+0x8d/0x350 [ 231.439269][ T5718] path_mount+0x136e/0x1e70 [ 231.443807][ T5718] ? putname+0x102/0x140 [ 231.448076][ T5718] ? lockdep_hardirqs_on+0x7d/0x100 [ 231.453306][ T5718] ? finish_automount+0xa30/0xa30 [ 231.458447][ T5718] ? putname+0x102/0x140 [ 231.462718][ T5718] __x64_sys_mount+0x283/0x300 [ 231.467511][ T5718] ? copy_mnt_ns+0xb30/0xb30 [ 231.472134][ T5718] ? lockdep_hardirqs_on+0x7d/0x100 [ 231.477373][ T5718] ? _raw_spin_unlock_irq+0x2e/0x50 [ 231.482629][ T5718] ? ptrace_notify+0xfe/0x140 [ 231.487366][ T5718] do_syscall_64+0x39/0xb0 [ 231.491803][ T5718] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 231.497745][ T5718] RIP: 0033:0x7f4f6dd11c5a [ 231.502182][ T5718] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [pid 5720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 231.521924][ T5718] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 231.530391][ T5718] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 231.538404][ T5718] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 231.546398][ T5718] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 231.554398][ T5718] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 231.562415][ T5718] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 231.570421][ T5718] [pid 5717] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5717] chdir("./file0") = 0 [pid 5717] ioctl(4, LOOP_CLR_FD) = 0 [pid 5717] close(4) = 0 [pid 5717] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5715] <... futex resumed>) = 0 [pid 5717] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5715] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5715] <... futex resumed>) = 0 [pid 5717] openat(AT_FDCWD, "./file0", O_RDONLY [ 231.583496][ T5711] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 231.608655][ T5717] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [ 231.619025][ T5717] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 231.619025][ T5717] inode = 12 2341 [ 231.619025][ T5717] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 231.632218][ T5713] CPU: 0 PID: 5713 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 231.648112][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 231.658222][ T5713] Call Trace: [ 231.661544][ T5713] [ 231.664518][ T5713] dump_stack_lvl+0x136/0x150 [ 231.669270][ T5713] sysfs_warn_dup+0x80/0xa0 [ 231.674115][ T5713] sysfs_create_dir_ns+0x237/0x290 [pid 5715] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5715] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [ 231.679289][ T5713] ? sysfs_create_mount_point+0xb0/0xb0 [ 231.682016][ T5717] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 231.684873][ T5713] ? spin_bug+0x1c0/0x1c0 [ 231.684922][ T5713] ? do_raw_spin_unlock+0x175/0x230 [ 231.703523][ T5713] kobject_add_internal+0x2c9/0x9c0 [ 231.708789][ T5713] ? kfree+0x11/0x150 [ 231.712821][ T5713] kobject_init_and_add+0x101/0x170 [ 231.718084][ T5713] ? kobject_create_and_add+0xf0/0xf0 [ 231.723515][ T5713] ? lockdep_init_map_type+0x21e/0x810 [ 231.729035][ T5713] ? lockdep_hardirqs_on+0x7d/0x100 [ 231.734300][ T5713] ? lockdep_init_map_type+0x21e/0x810 [ 231.739733][ T5717] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5717 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 231.739807][ T5717] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 231.749869][ T5713] gfs2_sys_fs_add+0x1d5/0x450 [ 231.749920][ T5713] ? recover_store+0x170/0x170 [ 231.749952][ T5713] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 231.749997][ T5713] gfs2_fill_super+0x1312/0x2aa0 [ 231.778710][ T5713] ? gfs2_reconfigure+0xf90/0xf90 [pid 5715] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [ 231.783804][ T5713] ? snprintf+0xbf/0x100 [ 231.788123][ T5713] ? vsprintf+0x30/0x30 [ 231.792340][ T5713] ? wait_for_completion_io_timeout+0x20/0x20 [ 231.798495][ T5713] ? set_blocksize+0x2d8/0x370 [ 231.803324][ T5713] get_tree_bdev+0x43e/0x7d0 [ 231.807980][ T5713] ? gfs2_reconfigure+0xf90/0xf90 [ 231.813072][ T5713] gfs2_get_tree+0x4e/0x270 [ 231.815393][ T5717] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 231.817610][ T5713] vfs_get_tree+0x8d/0x350 [ 231.817659][ T5713] path_mount+0x136e/0x1e70 [pid 5715] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 231.817702][ T5713] ? putname+0x102/0x140 [ 231.835596][ T5717] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 231.838077][ T5713] ? lockdep_hardirqs_on+0x7d/0x100 [ 231.838125][ T5713] ? finish_automount+0xa30/0xa30 [ 231.838169][ T5713] ? putname+0x102/0x140 [ 231.838203][ T5713] __x64_sys_mount+0x283/0x300 [ 231.838243][ T5713] ? copy_mnt_ns+0xb30/0xb30 [ 231.838283][ T5713] ? lockdep_hardirqs_on+0x7d/0x100 [ 231.838323][ T5713] ? _raw_spin_unlock_irq+0x2e/0x50 [ 231.838371][ T5713] ? ptrace_notify+0xfe/0x140 [ 231.838425][ T5713] do_syscall_64+0x39/0xb0 [ 231.838461][ T5713] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 231.895882][ T5717] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 231.896542][ T5713] RIP: 0033:0x7f4f6dd11c5a [ 231.907499][ T5713] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 231.923641][ T5717] gfs2: fsid=syz:syz.0: File system withdrawn [pid 5715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5726 attached => {parent_tid=[76]}, 88) = 76 [pid 5726] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5715] rt_sigprocmask(SIG_SETMASK, [], [pid 5726] <... rseq resumed>) = 0 [pid 5715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5726] set_robust_list(0x7f4f6609f9a0, 24 [pid 5715] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5726] <... set_robust_list resumed>) = 0 [pid 5715] <... futex resumed>) = 0 [pid 5726] rt_sigprocmask(SIG_SETMASK, [], [ 231.927229][ T5713] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 231.927268][ T5713] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 231.927291][ T5713] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 231.927313][ T5713] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 231.927336][ T5713] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 231.973836][ T5713] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 231.981869][ T5713] [ 231.984932][ T5717] CPU: 1 PID: 5717 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 231.995435][ T5717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 231.997222][ T5716] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 232.005507][ T5717] Call Trace: [ 232.005519][ T5717] [ 232.025674][ T5717] dump_stack_lvl+0x136/0x150 [ 232.025844][ T5716] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 232.030398][ T5717] gfs2_withdraw+0xb33/0x1060 [ 232.041618][ T5717] ? gfs2_consist_inode_i+0x104/0x150 [ 232.045052][ T5711] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 232.047025][ T5717] gfs2_dirent_scan+0x32a/0x3d0 [ 232.047078][ T5717] ? gfs2_dirent_prev+0x210/0x210 [ 232.047126][ T5717] ? gfs2_dirent_prev+0x210/0x210 [ 232.047179][ T5717] gfs2_dirent_search+0x47d/0x580 [ 232.047229][ T5717] ? get_first_leaf+0x190/0x190 [ 232.047276][ T5717] ? gfs2_permission+0x256/0x3e0 [ 232.047318][ T5717] gfs2_dir_search+0x8d/0x2d0 [ 232.047365][ T5717] ? gfs2_dir_read+0x14e0/0x14e0 [ 232.047414][ T5717] gfs2_lookupi+0x481/0x640 [ 232.084856][ T5718] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 232.088298][ T5717] ? gfs2_lookup_by_inum+0x100/0x100 [ 232.088345][ T5717] ? __gfs2_lookup+0x83/0x280 [ 232.088394][ T5717] ? d_alloc_parallel+0x693/0x1530 [ 232.093330][ T5718] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 232.097819][ T5717] __gfs2_lookup+0x83/0x280 [ 232.097858][ T5717] ? gfs2_lookupi+0x640/0x640 [ 232.097894][ T5717] ? __d_lookup_rcu+0x4e0/0x4e0 [ 232.097932][ T5717] ? __d_lookup+0x289/0x4c0 [ 232.097969][ T5717] gfs2_atomic_open+0xde/0x250 [ 232.098006][ T5717] ? __gfs2_lookup+0x280/0x280 [ 232.098042][ T5717] lookup_open.isra.0+0xce2/0x1400 [ 232.166844][ T5717] ? link_path_walk.part.0+0xd60/0xd60 [ 232.172459][ T5717] ? lookup_fast+0x14e/0x520 [ 232.177111][ T5717] path_openat+0x969/0x2710 [ 232.181707][ T5717] ? path_lookupat+0x840/0x840 [ 232.186536][ T5717] do_filp_open+0x1ba/0x410 [ 232.191112][ T5717] ? may_open_dev+0xf0/0xf0 [ 232.195706][ T5717] ? find_held_lock+0x2d/0x110 [ 232.200525][ T5717] ? do_raw_spin_lock+0x124/0x2b0 [ 232.205614][ T5717] ? spin_bug+0x1c0/0x1c0 [ 232.210039][ T5717] ? _raw_spin_unlock+0x28/0x40 [ 232.214977][ T5717] ? alloc_fd+0x2e4/0x750 [ 232.219376][ T5717] do_sys_openat2+0x160/0x1c0 [ 232.221840][ T5713] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 232.224127][ T5717] ? build_open_flags+0x720/0x720 [ 232.243103][ T5717] ? ptrace_notify+0xfe/0x140 [ 232.247849][ T5717] ? lock_downgrade+0x690/0x690 [ 232.252746][ T5717] __x64_sys_openat+0x143/0x1f0 [ 232.257675][ T5717] ? __ia32_sys_open+0x1c0/0x1c0 [ 232.262765][ T5717] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.268034][ T5717] ? lockdep_hardirqs_on+0x7d/0x100 [ 232.273318][ T5717] ? _raw_spin_unlock_irq+0x2e/0x50 [ 232.278589][ T5717] ? ptrace_notify+0xfe/0x140 [pid 5715] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5726] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 232.283338][ T5717] do_syscall_64+0x39/0xb0 [ 232.287806][ T5717] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 232.293776][ T5717] RIP: 0033:0x7f4f6dd107f9 [ 232.298230][ T5717] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 232.308133][ T5713] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 232.317862][ T5717] RSP: 002b:00007f4f6d4c0228 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [pid 5726] ioctl(0, VFAT_IOCTL_READDIR_SHORT [pid 5718] <... mount resumed>) = -1 EEXIST (File exists) [pid 5717] <... openat resumed>) = -1 EIO (Input/output error) [pid 5716] <... mount resumed>) = -1 EEXIST (File exists) [pid 5715] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5711] <... mount resumed>) = -1 EEXIST (File exists) [pid 5710] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5708] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5718] ioctl(4, LOOP_CLR_FD [pid 5716] ioctl(4, LOOP_CLR_FD [pid 5711] ioctl(4, LOOP_CLR_FD [pid 5726] <... ioctl resumed>, 0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5717] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5715] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5710] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5708] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5713] <... mount resumed>) = -1 EEXIST (File exists) [pid 5713] ioctl(4, LOOP_CLR_FD [pid 5726] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5717] <... futex resumed>) = 0 [pid 5715] <... futex resumed>) = 0 [pid 5710] <... futex resumed>) = 0 [pid 5708] <... futex resumed>) = 0 [pid 5726] <... futex resumed>) = 0 [pid 5717] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5710] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5726] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5720] <... write resumed>) = 16777216 [pid 5715] <... mmap resumed>) = 0x7f4f6605e000 [pid 5710] <... mmap resumed>) = 0x7f4f6607f000 [pid 5708] <... mmap resumed>) = 0x7f4f6607f000 [pid 5710] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5715] mprotect(0x7f4f6605f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5710] <... mprotect resumed>) = 0 [pid 5708] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5720] munmap(0x7f4f650a0000, 16777216 [pid 5715] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5710] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5708] <... mprotect resumed>) = 0 [pid 5710] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5708] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5727 attached [pid 5715] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5708] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5727] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6607e990, parent_tid=0x7f4f6607e990, exit_signal=0, stack=0x7f4f6605e000, stack_size=0x20300, tls=0x7f4f6607e6c0} [pid 5710] <... clone3 resumed> => {parent_tid=[79]}, 88) = 79 [pid 5708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5728 attached [pid 5727] <... rseq resumed>) = 0 [pid 5710] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5729 attached [pid 5728] rseq(0x7f4f6607efe0, 0x20, 0, 0x53053053 [ 232.317898][ T5717] RAX: ffffffffffffffda RBX: 00007f4f6dda46e8 RCX: 00007f4f6dd107f9 [ 232.317921][ T5717] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000ffffff9c [ 232.317942][ T5717] RBP: 00007f4f6dda46e0 R08: 00007f4f6d4c06c0 R09: 00007f4f6d4c06c0 [ 232.317963][ T5717] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f6dda46ec [ 232.317985][ T5717] R13: 0030656c69662f2e R14: 00007f4f6dd5d740 R15: 00007fffaa0db528 [ 232.318012][ T5717] [pid 5727] set_robust_list(0x7f4f6609f9a0, 24 [pid 5715] <... clone3 resumed> => {parent_tid=[77]}, 88) = 77 [pid 5710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5708] <... clone3 resumed> => {parent_tid=[82]}, 88) = 82 [pid 5729] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5728] <... rseq resumed>) = 0 [pid 5727] <... set_robust_list resumed>) = 0 [pid 5715] rt_sigprocmask(SIG_SETMASK, [], [pid 5710] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5708] rt_sigprocmask(SIG_SETMASK, [], [pid 5729] <... rseq resumed>) = 0 [pid 5728] set_robust_list(0x7f4f6607e9a0, 24 [pid 5727] rt_sigprocmask(SIG_SETMASK, [], [pid 5715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5710] <... futex resumed>) = 0 [pid 5708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5729] set_robust_list(0x7f4f6609f9a0, 24 [pid 5728] <... set_robust_list resumed>) = 0 [pid 5727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5715] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5710] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5708] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5729] <... set_robust_list resumed>) = 0 [pid 5727] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5708] <... futex resumed>) = 0 [pid 5727] <... openat resumed>) = 3 [pid 5708] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5727] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] <... futex resumed>) = 0 [pid 5727] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5710] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5710] <... futex resumed>) = 0 [pid 5727] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5710] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5727] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5727] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] <... futex resumed>) = 0 [pid 5728] rt_sigprocmask(SIG_SETMASK, [], [pid 5727] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5715] <... futex resumed>) = 0 [pid 5710] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5727] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5710] <... futex resumed>) = 0 [pid 5727] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5710] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5727] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5727] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5710] <... futex resumed>) = 0 [pid 5727] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5728] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5715] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5728] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5729] rt_sigprocmask(SIG_SETMASK, [], [pid 5728] <... openat resumed>) = -1 EIO (Input/output error) [pid 5728] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5728] <... futex resumed>) = 1 [pid 5715] <... futex resumed>) = 0 [pid 5708] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5729] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5728] futex(0x7f4f6dda4708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5715] close(3 [pid 5708] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5715] <... close resumed>) = 0 [pid 5708] <... futex resumed>) = 0 [pid 5729] <... openat resumed>) = 3 [pid 5715] close(4 [pid 5729] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5715] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] close(5) = -1 EBADF (Bad file descriptor) [pid 5729] <... futex resumed>) = 0 [pid 5715] close(6 [pid 5729] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5715] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5715] close(7) = -1 EBADF (Bad file descriptor) [pid 5715] close(8) = -1 EBADF (Bad file descriptor) [pid 5715] close(9) = -1 EBADF (Bad file descriptor) [pid 5715] close(10) = -1 EBADF (Bad file descriptor) [pid 5715] close(11) = -1 EBADF (Bad file descriptor) [pid 5715] close(12) = -1 EBADF (Bad file descriptor) [pid 5715] close(13) = -1 EBADF (Bad file descriptor) [pid 5715] close(14) = -1 EBADF (Bad file descriptor) [pid 5715] close(15) = -1 EBADF (Bad file descriptor) [pid 5715] close(16) = -1 EBADF (Bad file descriptor) [pid 5715] close(17) = -1 EBADF (Bad file descriptor) [pid 5715] close(18) = -1 EBADF (Bad file descriptor) [pid 5715] close(19) = -1 EBADF (Bad file descriptor) [pid 5715] close(20) = -1 EBADF (Bad file descriptor) [pid 5715] close(21) = -1 EBADF (Bad file descriptor) [pid 5708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5715] close(22) = -1 EBADF (Bad file descriptor) [pid 5715] close(23) = -1 EBADF (Bad file descriptor) [pid 5708] <... mmap resumed>) = 0x7f4f6605e000 [pid 5715] close(24) = -1 EBADF (Bad file descriptor) [pid 5715] close(25) = -1 EBADF (Bad file descriptor) [pid 5715] close(26) = -1 EBADF (Bad file descriptor) [pid 5715] close(27) = -1 EBADF (Bad file descriptor) [pid 5715] close(28) = -1 EBADF (Bad file descriptor) [pid 5708] mprotect(0x7f4f6605f000, 131072, PROT_READ|PROT_WRITE [pid 5715] close(29) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5715] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5715] exit_group(0 [pid 5728] <... futex resumed>) = ? [pid 5726] <... futex resumed>) = ? [pid 5717] <... futex resumed>) = ? [pid 5715] <... exit_group resumed>) = ? [pid 5728] +++ exited with 0 +++ [pid 5726] +++ exited with 0 +++ [pid 5717] +++ exited with 0 +++ [pid 5715] +++ exited with 0 +++ [pid 5031] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=57 /* 0.57 s */} --- [pid 5031] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5031] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5031] umount2("./25/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./25/cgroup.cpu") = 0 [pid 5031] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./25/binderfs") = 0 [pid 5031] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5720] <... munmap resumed>) = 0 [pid 5720] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5720] ioctl(4, LOOP_SET_FD, 3 [pid 5708] <... mprotect resumed>) = 0 [pid 5708] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6607e990, parent_tid=0x7f4f6607e990, exit_signal=0, stack=0x7f4f6605e000, stack_size=0x20300, tls=0x7f4f6607e6c0}./strace-static-x86_64: Process 5730 attached => {parent_tid=[83]}, 88) = 83 [pid 5708] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5708] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5708] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5730] rseq(0x7f4f6607efe0, 0x20, 0, 0x53053053) = 0 [pid 5730] set_robust_list(0x7f4f6607e9a0, 24) = 0 [pid 5730] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5730] ioctl(-1, VFAT_IOCTL_READDIR_SHORT, 0) = -1 EBADF (Bad file descriptor) [pid 5730] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5708] <... futex resumed>) = 0 [pid 5730] futex(0x7f4f6dda4708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5708] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5729] <... futex resumed>) = 0 [pid 5708] <... futex resumed>) = 1 [pid 5729] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5708] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5729] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5729] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5708] <... futex resumed>) = 0 [pid 5729] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5720] <... ioctl resumed>) = 0 [pid 5720] close(3) = 0 [ 232.615407][ T5720] loop5: detected capacity change from 0 to 32768 [pid 5720] mkdir("./file0", 0777) = 0 [ 232.684925][ T5720] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [pid 5720] mount("/dev/loop5", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5712] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5712] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5712] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5712] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5712] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5712] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5732 attached [pid 5716] <... ioctl resumed>) = 0 [pid 5712] <... clone3 resumed> => {parent_tid=[77]}, 88) = 77 [pid 5732] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5716] close(4 [pid 5732] <... rseq resumed>) = 0 [pid 5712] rt_sigprocmask(SIG_SETMASK, [], [ 232.795913][ T5720] CPU: 1 PID: 5720 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 232.806440][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 232.816538][ T5720] Call Trace: [ 232.819848][ T5720] [ 232.822812][ T5720] dump_stack_lvl+0x136/0x150 [ 232.827560][ T5720] sysfs_warn_dup+0x80/0xa0 [ 232.832114][ T5720] sysfs_create_dir_ns+0x237/0x290 [ 232.837289][ T5720] ? sysfs_create_mount_point+0xb0/0xb0 [pid 5732] set_robust_list(0x7f4f6609f9a0, 24 [pid 5716] <... close resumed>) = 0 [pid 5732] <... set_robust_list resumed>) = 0 [pid 5712] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5732] rt_sigprocmask(SIG_SETMASK, [], [pid 5716] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5712] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5732] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5716] <... futex resumed>) = 0 [pid 5732] <... openat resumed>) = 3 [pid 5712] <... futex resumed>) = 0 [pid 5732] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5716] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [ 232.842909][ T5720] ? spin_bug+0x1c0/0x1c0 [ 232.847366][ T5720] ? do_raw_spin_unlock+0x175/0x230 [ 232.852634][ T5720] kobject_add_internal+0x2c9/0x9c0 [ 232.857894][ T5720] ? kfree+0x11/0x150 [ 232.861953][ T5720] kobject_init_and_add+0x101/0x170 [ 232.867210][ T5720] ? kobject_create_and_add+0xf0/0xf0 [ 232.872643][ T5720] ? lockdep_init_map_type+0x21e/0x810 [ 232.878185][ T5720] ? lockdep_hardirqs_on+0x7d/0x100 [ 232.883440][ T5720] ? lockdep_init_map_type+0x21e/0x810 [ 232.888974][ T5720] gfs2_sys_fs_add+0x1d5/0x450 [ 232.893805][ T5720] ? recover_store+0x170/0x170 [ 232.898626][ T5720] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 232.904406][ T5720] gfs2_fill_super+0x1312/0x2aa0 [ 232.909410][ T5720] ? gfs2_reconfigure+0xf90/0xf90 [ 232.914504][ T5720] ? snprintf+0xbf/0x100 [ 232.918893][ T5720] ? vsprintf+0x30/0x30 [ 232.923107][ T5720] ? wait_for_completion_io_timeout+0x20/0x20 [ 232.929242][ T5720] ? set_blocksize+0x2d8/0x370 [ 232.934245][ T5720] get_tree_bdev+0x43e/0x7d0 [ 232.938901][ T5720] ? gfs2_reconfigure+0xf90/0xf90 [ 232.943987][ T5720] gfs2_get_tree+0x4e/0x270 [ 232.948548][ T5720] vfs_get_tree+0x8d/0x350 [ 232.953046][ T5720] path_mount+0x136e/0x1e70 [ 232.957609][ T5720] ? putname+0x102/0x140 [ 232.961898][ T5720] ? lockdep_hardirqs_on+0x7d/0x100 [ 232.967154][ T5720] ? finish_automount+0xa30/0xa30 [ 232.972242][ T5720] ? putname+0x102/0x140 [ 232.976541][ T5720] __x64_sys_mount+0x283/0x300 [ 232.981375][ T5720] ? copy_mnt_ns+0xb30/0xb30 [ 232.986022][ T5720] ? lockdep_hardirqs_on+0x7d/0x100 [ 232.991283][ T5720] ? _raw_spin_unlock_irq+0x2e/0x50 [ 232.996553][ T5720] ? ptrace_notify+0xfe/0x140 [ 233.001311][ T5720] do_syscall_64+0x39/0xb0 [ 233.005780][ T5720] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 233.011748][ T5720] RIP: 0033:0x7f4f6dd11c5a [ 233.016210][ T5720] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 233.035870][ T5720] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [pid 5732] <... futex resumed>) = 0 [pid 5718] <... ioctl resumed>) = 0 [pid 5712] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5732] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5712] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5716] <... futex resumed>) = 0 [pid 5712] <... futex resumed>) = 1 [pid 5716] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5712] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5716] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5716] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory ) = 1 [pid 5712] <... futex resumed>) = 0 [pid 5716] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5716] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5712] <... futex resumed>) = 0 [pid 5716] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5712] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5716] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5716] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5712] <... futex resumed>) = 0 [pid 5716] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] close(3) = 0 [pid 5712] close(4) = -1 EBADF (Bad file descriptor) [pid 5712] close(5) = -1 EBADF (Bad file descriptor) [pid 5712] close(6) = -1 EBADF (Bad file descriptor) [pid 5712] close(7) = -1 EBADF (Bad file descriptor) [pid 5712] close(8) = -1 EBADF (Bad file descriptor) [pid 5712] close(9) = -1 EBADF (Bad file descriptor) [pid 5712] close(10) = -1 EBADF (Bad file descriptor) [pid 5712] close(11) = -1 EBADF (Bad file descriptor) [pid 5712] close(12) = -1 EBADF (Bad file descriptor) [pid 5712] close(13) = -1 EBADF (Bad file descriptor) [pid 5712] close(14) = -1 EBADF (Bad file descriptor) [pid 5712] close(15) = -1 EBADF (Bad file descriptor) [pid 5712] close(16) = -1 EBADF (Bad file descriptor) [pid 5712] close(17) = -1 EBADF (Bad file descriptor) [pid 5712] close(18) = -1 EBADF (Bad file descriptor) [pid 5712] close(19) = -1 EBADF (Bad file descriptor) [pid 5712] close(20 [pid 5718] close(4 [pid 5712] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5718] <... close resumed>) = 0 [pid 5712] close(21 [pid 5718] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5712] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5718] <... futex resumed>) = 1 [pid 5712] close(22 [pid 5718] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5712] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5712] close(23) = -1 EBADF (Bad file descriptor) [pid 5712] close(24) = -1 EBADF (Bad file descriptor) [pid 5712] close(25) = -1 EBADF (Bad file descriptor) [pid 5712] close(26) = -1 EBADF (Bad file descriptor) [pid 5712] close(27) = -1 EBADF (Bad file descriptor) [pid 5712] close(28) = -1 EBADF (Bad file descriptor) [pid 5712] close(29) = -1 EBADF (Bad file descriptor) [pid 5712] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5712] exit_group(0 [pid 5732] <... futex resumed>) = ? [pid 5716] <... futex resumed>) = ? [pid 5712] <... exit_group resumed>) = ? [pid 5732] +++ exited with 0 +++ [pid 5716] +++ exited with 0 +++ [pid 5712] +++ exited with 0 +++ [pid 5029] kill(-80, SIGKILL [pid 5032] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=75, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=62 /* 0.62 s */} --- [pid 5730] <... futex resumed>) = ? [pid 5729] <... futex resumed>) = ? [pid 5032] restart_syscall(<... resuming interrupted clone ...> [pid 5029] <... kill resumed>) = 0 [pid 5032] <... restart_syscall resumed>) = 0 [pid 5032] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5032] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5032] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] getdents64(3, [pid 5033] kill(-77, SIGKILL) = 0 [pid 5033] kill(77, SIGKILL) = 0 [pid 5730] +++ killed by SIGKILL +++ [pid 5729] +++ killed by SIGKILL +++ [pid 5029] kill(80, SIGKILL) = 0 [pid 5727] <... futex resumed>) = ? [pid 5714] <... futex resumed>) = 0 [pid 5727] +++ killed by SIGKILL +++ [pid 5714] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] <... futex resumed>) = 0 [pid 5714] <... futex resumed>) = 1 [pid 5718] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5714] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... openat resumed>) = 3 [pid 5718] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5714] <... futex resumed>) = 0 [pid 5718] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5714] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5714] <... futex resumed>) = 0 [pid 5713] <... ioctl resumed>) = ? [pid 5718] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5714] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5718] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5714] <... futex resumed>) = 0 [pid 5718] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5714] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5714] <... futex resumed>) = 0 [pid 5718] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5714] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5718] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5032] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5718] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] umount2("./26/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5718] <... futex resumed>) = 1 [pid 5714] <... futex resumed>) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5718] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5714] close(3 [pid 5032] newfstatat(AT_FDCWD, "./26/cgroup.cpu", [pid 5714] <... close resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5714] close(4 [pid 5032] unlink("./26/cgroup.cpu" [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5713] +++ killed by SIGKILL +++ [pid 5708] +++ killed by SIGKILL +++ [pid 5032] <... unlink resumed>) = 0 [pid 5714] close(5 [pid 5032] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=80, si_uid=0, si_status=SIGKILL, si_utime=2 /* 0.02 s */, si_stime=75 /* 0.75 s */} --- [pid 5714] close(6 [pid 5032] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5714] close(7 [pid 5032] unlink("./26/binderfs" [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... unlink resumed>) = 0 [pid 5714] close(8 [pid 5032] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 233.044341][ T5720] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 233.052375][ T5720] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 233.060399][ T5720] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 233.068425][ T5720] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 233.076443][ T5720] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 233.084461][ T5720] [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5714] close(9 [pid 5032] newfstatat(AT_FDCWD, "./26/file0", [pid 5029] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5714] close(10 [pid 5032] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... openat resumed>) = 3 [pid 5714] close(11 [pid 5032] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] newfstatat(3, "", [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5711] <... ioctl resumed>) = ? [pid 5032] <... openat resumed>) = 4 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5714] close(12 [pid 5032] newfstatat(4, "", [pid 5029] getdents64(3, [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5714] close(13 [pid 5711] +++ killed by SIGKILL +++ [pid 5710] +++ killed by SIGKILL +++ [pid 5032] getdents64(4, [pid 5029] umount2("./25/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=77, si_uid=0, si_status=SIGKILL, si_utime=8 /* 0.08 s */, si_stime=65 /* 0.65 s */} --- [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5714] close(14 [pid 5032] getdents64(4, [pid 5029] newfstatat(AT_FDCWD, "./25/cgroup.cpu", [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5714] close(15 [pid 5032] close(4 [pid 5029] unlink("./25/cgroup.cpu" [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... close resumed>) = 0 [pid 5029] <... unlink resumed>) = 0 [pid 5714] close(16 [pid 5032] rmdir("./26/file0" [pid 5029] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... rmdir resumed>) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5714] close(17 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] umount2("./26/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5714] close(18 [pid 5033] <... openat resumed>) = 3 [pid 5032] newfstatat(AT_FDCWD, "./26/cgroup", [pid 5029] unlink("./25/binderfs" [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] newfstatat(3, "", [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... unlink resumed>) = 0 [ 233.146029][ T5720] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [pid 5714] close(19 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] unlink("./26/cgroup" [pid 5029] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] getdents64(3, [pid 5032] <... unlink resumed>) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5714] close(20 [pid 5033] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5032] umount2("./26/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] newfstatat(AT_FDCWD, "./25/file0", [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./27/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5714] close(21 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] newfstatat(AT_FDCWD, "./26/cgroup.net", [pid 5029] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] newfstatat(AT_FDCWD, "./27/cgroup.cpu", [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5714] close(22 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] unlink("./26/cgroup.net" [pid 5029] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] unlink("./27/cgroup.cpu" [pid 5032] <... unlink resumed>) = 0 [pid 5029] <... openat resumed>) = 4 [pid 5714] close(23 [pid 5033] <... unlink resumed>) = 0 [pid 5032] getdents64(3, [pid 5029] newfstatat(4, "", [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5714] close(24 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] close(3 [pid 5029] getdents64(4, [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5032] <... close resumed>) = 0 [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5714] close(25 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] rmdir("./26" [pid 5029] getdents64(4, [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] unlink("./27/binderfs" [pid 5032] <... rmdir resumed>) = 0 [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5714] close(26 [pid 5033] <... unlink resumed>) = 0 [pid 5032] mkdir("./27", 0777 [pid 5029] close(4 [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... mkdir resumed>) = 0 [pid 5029] <... close resumed>) = 0 [pid 5714] close(27 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5029] rmdir("./25/file0" [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] newfstatat(AT_FDCWD, "./27/file0", [pid 5032] <... openat resumed>) = 3 [pid 5029] <... rmdir resumed>) = 0 [pid 5714] close(28 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] ioctl(3, LOOP_CLR_FD [pid 5029] umount2("./25/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5714] close(29 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] close(3 [pid 5029] newfstatat(AT_FDCWD, "./25/cgroup", [pid 5714] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] <... close resumed>) = 0 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5714] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5033] <... openat resumed>) = 4 [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5029] unlink("./25/cgroup"./strace-static-x86_64: Process 5733 attached [pid 5714] <... write resumed>) = 156 [pid 5033] newfstatat(4, "", [pid 5029] <... unlink resumed>) = 0 [pid 5733] set_robust_list(0x55555654e6a0, 24 [pid 5714] exit_group(0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] <... clone resumed>, child_tidptr=0x55555654e690) = 78 [pid 5029] umount2("./25/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5733] <... set_robust_list resumed>) = 0 [pid 5718] <... futex resumed>) = ? [pid 5714] <... exit_group resumed>) = ? [pid 5033] getdents64(4, [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5733] chdir("./27" [pid 5718] +++ exited with 0 +++ [pid 5714] +++ exited with 0 +++ [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5031] <... umount2 resumed>) = 0 [pid 5029] newfstatat(AT_FDCWD, "./25/cgroup.net", [pid 5033] getdents64(4, [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5030] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=63 /* 0.63 s */} --- [pid 5029] unlink("./25/cgroup.net" [pid 5733] <... chdir resumed>) = 0 [pid 5033] close(4 [pid 5031] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] restart_syscall(<... resuming interrupted clone ...> [pid 5029] <... unlink resumed>) = 0 [pid 5733] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5033] <... close resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... restart_syscall resumed>) = 0 [pid 5029] getdents64(3, [pid 5033] rmdir("./27/file0" [pid 5029] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5033] <... rmdir resumed>) = 0 [pid 5029] close(3 [pid 5033] umount2("./27/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... close resumed>) = 0 [pid 5733] <... prctl resumed>) = 0 [pid 5720] <... mount resumed>) = -1 EEXIST (File exists) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./25/file0", [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] rmdir("./25" [pid 5733] setpgid(0, 0 [pid 5033] newfstatat(AT_FDCWD, "./27/cgroup", [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] <... rmdir resumed>) = 0 [pid 5733] <... setpgid resumed>) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... openat resumed>) = 3 [pid 5029] mkdir("./26", 0777 [pid 5733] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5720] ioctl(4, LOOP_CLR_FD [pid 5033] unlink("./27/cgroup" [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(3, "", [pid 5029] <... mkdir resumed>) = 0 [pid 5733] <... symlink resumed>) = 0 [pid 5033] <... unlink resumed>) = 0 [pid 5031] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5733] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5033] umount2("./27/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] <... openat resumed>) = 4 [pid 5030] getdents64(3, [pid 5029] <... openat resumed>) = 3 [pid 5733] <... symlink resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(4, "", [pid 5030] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5029] ioctl(3, LOOP_CLR_FD [pid 5733] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5033] newfstatat(AT_FDCWD, "./27/cgroup.net", [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] umount2("./25/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5733] <... symlink resumed>) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] getdents64(4, [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] close(3 [pid 5733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] unlink("./27/cgroup.net" [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5030] newfstatat(AT_FDCWD, "./25/cgroup.cpu", [pid 5029] <... close resumed>) = 0 [pid 5733] <... openat resumed>) = 3 [pid 5033] <... unlink resumed>) = 0 [pid 5031] getdents64(4, [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5734 attached [pid 5733] write(3, "1000", 4 [pid 5033] getdents64(3, [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5030] unlink("./25/cgroup.cpu" [pid 5734] set_robust_list(0x55555654e6a0, 24 [pid 5733] <... write resumed>) = 4 [pid 5033] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5031] close(4 [pid 5030] <... unlink resumed>) = 0 [pid 5029] <... clone resumed>, child_tidptr=0x55555654e690) = 84 [pid 5734] <... set_robust_list resumed>) = 0 [pid 5733] close(3 [pid 5033] close(3 [pid 5031] <... close resumed>) = 0 [pid 5030] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5734] chdir("./26" [pid 5733] <... close resumed>) = 0 [pid 5033] <... close resumed>) = 0 [pid 5031] rmdir("./25/file0" [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5734] <... chdir resumed>) = 0 [pid 5733] symlink("/dev/binderfs", "./binderfs" [pid 5033] rmdir("./27" [ 233.276312][ T5720] gfs2: fsid=syz:syz: error -17 adding sysfs files [pid 5030] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5733] <... symlink resumed>) = 0 [pid 5033] <... rmdir resumed>) = 0 [pid 5031] <... rmdir resumed>) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5734] <... prctl resumed>) = 0 [pid 5733] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] mkdir("./28", 0777 [pid 5031] umount2("./25/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] unlink("./25/binderfs" [pid 5734] setpgid(0, 0 [pid 5733] <... futex resumed>) = 0 [pid 5033] <... mkdir resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... unlink resumed>) = 0 [pid 5734] <... setpgid resumed>) = 0 [pid 5733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5031] newfstatat(AT_FDCWD, "./25/cgroup", [pid 5030] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5734] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5733] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5033] <... openat resumed>) = 3 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5734] <... symlink resumed>) = 0 [pid 5033] ioctl(3, LOOP_CLR_FD [pid 5030] newfstatat(AT_FDCWD, "./25/file0", [pid 5734] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5033] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5734] <... symlink resumed>) = 0 [pid 5033] close(3 [pid 5030] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5734] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5033] <... close resumed>) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5734] <... symlink resumed>) = 0 [pid 5033] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5030] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5735 attached [pid 5734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5733] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5031] unlink("./25/cgroup" [pid 5030] <... openat resumed>) = 4 [pid 5735] set_robust_list(0x55555654e6a0, 24 [pid 5734] <... openat resumed>) = 3 [pid 5033] <... clone resumed>, child_tidptr=0x55555654e690) = 80 [pid 5030] newfstatat(4, "", [pid 5735] <... set_robust_list resumed>) = 0 [pid 5734] write(3, "1000", 4 [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5735] chdir("./28" [pid 5734] <... write resumed>) = 4 [pid 5030] getdents64(4, [pid 5735] <... chdir resumed>) = 0 [pid 5734] close(3 [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5735] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5734] <... close resumed>) = 0 [pid 5030] getdents64(4, [pid 5735] <... prctl resumed>) = 0 [pid 5734] symlink("/dev/binderfs", "./binderfs" [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5735] setpgid(0, 0 [pid 5734] <... symlink resumed>) = 0 [pid 5030] close(4 [pid 5735] <... setpgid resumed>) = 0 [pid 5734] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... close resumed>) = 0 [pid 5735] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5734] <... futex resumed>) = 0 [pid 5030] rmdir("./25/file0" [pid 5735] <... symlink resumed>) = 0 [pid 5734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5733] <... mprotect resumed>) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5030] <... rmdir resumed>) = 0 [pid 5735] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5734] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5733] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5031] umount2("./25/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] umount2("./25/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5735] <... symlink resumed>) = 0 [pid 5734] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5733] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5735] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5734] <... mprotect resumed>) = 0 [pid 5733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5031] newfstatat(AT_FDCWD, "./25/cgroup.net", [pid 5030] newfstatat(AT_FDCWD, "./25/cgroup", ./strace-static-x86_64: Process 5736 attached [pid 5735] <... symlink resumed>) = 0 [pid 5734] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5736] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5734] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5733] <... clone3 resumed> => {parent_tid=[79]}, 88) = 79 [pid 5031] unlink("./25/cgroup.net" [pid 5030] unlink("./25/cgroup" [pid 5736] <... rseq resumed>) = 0 [pid 5735] <... openat resumed>) = 3 [pid 5734] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5733] rt_sigprocmask(SIG_SETMASK, [], [pid 5031] <... unlink resumed>) = 0 [pid 5030] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5737 attached [pid 5736] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5735] write(3, "1000", 4 [pid 5733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5031] getdents64(3, [pid 5030] umount2("./25/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5737] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5736] <... set_robust_list resumed>) = 0 [pid 5735] <... write resumed>) = 4 [pid 5734] <... clone3 resumed> => {parent_tid=[85]}, 88) = 85 [pid 5733] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5737] <... rseq resumed>) = 0 [pid 5735] close(3 [pid 5734] rt_sigprocmask(SIG_SETMASK, [], [pid 5030] newfstatat(AT_FDCWD, "./25/cgroup.net", [pid 5737] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5735] <... close resumed>) = 0 [pid 5734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5031] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5736] rt_sigprocmask(SIG_SETMASK, [], [pid 5733] <... futex resumed>) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5737] <... set_robust_list resumed>) = 0 [pid 5736] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5735] symlink("/dev/binderfs", "./binderfs" [pid 5734] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5031] close(3 [pid 5030] unlink("./25/cgroup.net" [pid 5737] rt_sigprocmask(SIG_SETMASK, [], [pid 5735] <... symlink resumed>) = 0 [pid 5734] <... futex resumed>) = 0 [pid 5031] <... close resumed>) = 0 [pid 5030] <... unlink resumed>) = 0 [pid 5737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5736] memfd_create("syzkaller", 0 [pid 5735] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5031] rmdir("./25" [pid 5030] getdents64(3, [pid 5737] memfd_create("syzkaller", 0 [pid 5736] <... memfd_create resumed>) = 3 [pid 5735] <... futex resumed>) = 0 [pid 5030] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5737] <... memfd_create resumed>) = 3 [pid 5736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5031] <... rmdir resumed>) = 0 [pid 5030] close(3 [pid 5737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5736] <... mmap resumed>) = 0x7f4f650a0000 [pid 5735] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5031] mkdir("./26", 0777 [pid 5030] <... close resumed>) = 0 [pid 5737] <... mmap resumed>) = 0x7f4f650a0000 [pid 5735] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5030] rmdir("./25" [pid 5735] <... mprotect resumed>) = 0 [pid 5031] <... mkdir resumed>) = 0 [pid 5030] <... rmdir resumed>) = 0 [pid 5735] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5030] mkdir("./26", 0777 [pid 5735] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5031] <... openat resumed>) = 3 [pid 5030] <... mkdir resumed>) = 0 [pid 5735] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5031] ioctl(3, LOOP_CLR_FD [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5738 attached [pid 5031] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5030] <... openat resumed>) = 3 [pid 5738] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5735] <... clone3 resumed> => {parent_tid=[81]}, 88) = 81 [pid 5031] close(3 [pid 5030] ioctl(3, LOOP_CLR_FD [pid 5738] <... rseq resumed>) = 0 [pid 5735] rt_sigprocmask(SIG_SETMASK, [], [pid 5031] <... close resumed>) = 0 [pid 5030] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5030] close(3 [pid 5738] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5735] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] <... set_robust_list resumed>) = 0 [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5030] <... close resumed>) = 0 [pid 5738] rt_sigprocmask(SIG_SETMASK, [], [pid 5735] <... futex resumed>) = 0 [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5740 attached ./strace-static-x86_64: Process 5739 attached [pid 5738] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5735] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5740] set_robust_list(0x55555654e6a0, 24 [pid 5739] set_robust_list(0x55555654e6a0, 24 [pid 5030] <... clone resumed>, child_tidptr=0x55555654e690) = 74 [pid 5740] <... set_robust_list resumed>) = 0 [pid 5739] <... set_robust_list resumed>) = 0 [pid 5738] memfd_create("syzkaller", 0 [pid 5031] <... clone resumed>, child_tidptr=0x55555654e690) = 78 [pid 5740] chdir("./26" [pid 5739] chdir("./26" [pid 5738] <... memfd_create resumed>) = 3 [pid 5740] <... chdir resumed>) = 0 [pid 5739] <... chdir resumed>) = 0 [pid 5738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5740] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5739] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5738] <... mmap resumed>) = 0x7f4f650a0000 [pid 5740] <... prctl resumed>) = 0 [pid 5739] <... prctl resumed>) = 0 [pid 5740] setpgid(0, 0) = 0 [pid 5740] symlink("/syzcgroup/unified/syz3", "./cgroup") = 0 [pid 5739] setpgid(0, 0 [pid 5740] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 5739] <... setpgid resumed>) = 0 [pid 5740] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 5740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5739] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5740] <... openat resumed>) = 3 [pid 5739] <... symlink resumed>) = 0 [pid 5740] write(3, "1000", 4 [pid 5739] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5740] <... write resumed>) = 4 [pid 5740] close(3 [pid 5739] <... symlink resumed>) = 0 [pid 5740] <... close resumed>) = 0 [pid 5739] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5740] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5739] <... symlink resumed>) = 0 [pid 5740] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5740] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5739] <... openat resumed>) = 3 [pid 5740] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5739] write(3, "1000", 4 [pid 5740] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5739] <... write resumed>) = 4 [pid 5740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5739] close(3./strace-static-x86_64: Process 5741 attached ) = 0 [pid 5741] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5740] <... clone3 resumed> => {parent_tid=[75]}, 88) = 75 [pid 5739] symlink("/dev/binderfs", "./binderfs" [pid 5741] <... rseq resumed>) = 0 [pid 5740] rt_sigprocmask(SIG_SETMASK, [], [pid 5741] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5739] <... symlink resumed>) = 0 [pid 5741] <... set_robust_list resumed>) = 0 [pid 5740] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5741] rt_sigprocmask(SIG_SETMASK, [], [pid 5740] <... futex resumed>) = 0 [pid 5739] <... futex resumed>) = 0 [pid 5741] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5740] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5739] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5741] memfd_create("syzkaller", 0) = 3 [pid 5741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5739] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5739] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5739] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5739] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5742 attached [pid 5742] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5739] <... clone3 resumed> => {parent_tid=[79]}, 88) = 79 [pid 5742] <... rseq resumed>) = 0 [pid 5739] rt_sigprocmask(SIG_SETMASK, [], [pid 5742] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5739] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5742] <... set_robust_list resumed>) = 0 [pid 5739] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] rt_sigprocmask(SIG_SETMASK, [], [pid 5739] <... futex resumed>) = 0 [pid 5742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5739] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5742] memfd_create("syzkaller", 0) = 3 [pid 5742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5720] <... ioctl resumed>) = 0 [pid 5719] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5720] close(4 [pid 5719] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5720] <... close resumed>) = 0 [pid 5719] <... futex resumed>) = 0 [pid 5720] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5720] <... futex resumed>) = 0 [pid 5719] <... mmap resumed>) = 0x7f4f6607f000 [pid 5720] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5719] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5719] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5719] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5743 attached [pid 5743] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5719] <... clone3 resumed> => {parent_tid=[82]}, 88) = 82 [pid 5743] <... rseq resumed>) = 0 [pid 5719] rt_sigprocmask(SIG_SETMASK, [], [pid 5743] set_robust_list(0x7f4f6609f9a0, 24 [pid 5719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5743] <... set_robust_list resumed>) = 0 [pid 5719] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5743] rt_sigprocmask(SIG_SETMASK, [], [pid 5719] <... futex resumed>) = 0 [pid 5743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5719] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5743] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5743] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5719] <... futex resumed>) = 0 [pid 5743] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5719] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5720] <... futex resumed>) = 0 [pid 5719] <... futex resumed>) = 1 [pid 5720] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5719] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5720] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5720] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5719] <... futex resumed>) = 0 [pid 5720] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5719] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5719] <... futex resumed>) = 0 [pid 5720] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5719] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5720] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5720] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5719] <... futex resumed>) = 0 [pid 5720] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5719] close(3) = 0 [pid 5719] close(4) = -1 EBADF (Bad file descriptor) [pid 5719] close(5) = -1 EBADF (Bad file descriptor) [pid 5719] close(6) = -1 EBADF (Bad file descriptor) [pid 5719] close(7) = -1 EBADF (Bad file descriptor) [pid 5719] close(8) = -1 EBADF (Bad file descriptor) [pid 5719] close(9) = -1 EBADF (Bad file descriptor) [pid 5719] close(10) = -1 EBADF (Bad file descriptor) [pid 5719] close(11) = -1 EBADF (Bad file descriptor) [pid 5719] close(12) = -1 EBADF (Bad file descriptor) [pid 5719] close(13) = -1 EBADF (Bad file descriptor) [pid 5719] close(14) = -1 EBADF (Bad file descriptor) [pid 5719] close(15) = -1 EBADF (Bad file descriptor) [pid 5719] close(16) = -1 EBADF (Bad file descriptor) [pid 5719] close(17) = -1 EBADF (Bad file descriptor) [pid 5719] close(18) = -1 EBADF (Bad file descriptor) [pid 5719] close(19) = -1 EBADF (Bad file descriptor) [pid 5719] close(20) = -1 EBADF (Bad file descriptor) [pid 5719] close(21) = -1 EBADF (Bad file descriptor) [pid 5719] close(22) = -1 EBADF (Bad file descriptor) [pid 5719] close(23) = -1 EBADF (Bad file descriptor) [pid 5719] close(24) = -1 EBADF (Bad file descriptor) [pid 5719] close(25) = -1 EBADF (Bad file descriptor) [pid 5719] close(26) = -1 EBADF (Bad file descriptor) [pid 5719] close(27) = -1 EBADF (Bad file descriptor) [pid 5719] close(28) = -1 EBADF (Bad file descriptor) [pid 5719] close(29) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5719] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5719] exit_group(0 [pid 5743] <... futex resumed>) = ? [pid 5720] <... futex resumed>) = ? [pid 5719] <... exit_group resumed>) = ? [pid 5743] +++ exited with 0 +++ [pid 5720] +++ exited with 0 +++ [pid 5719] +++ exited with 0 +++ [pid 5034] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=61 /* 0.61 s */} --- [pid 5034] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5034] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5034] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5034] umount2("./26/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./26/cgroup.cpu") = 0 [pid 5034] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./26/binderfs") = 0 [pid 5034] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5034] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5034] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5034] close(4) = 0 [pid 5034] rmdir("./26/file0") = 0 [pid 5034] umount2("./26/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./26/cgroup") = 0 [pid 5034] umount2("./26/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./26/cgroup.net") = 0 [pid 5034] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5034] close(3) = 0 [pid 5034] rmdir("./26") = 0 [pid 5034] mkdir("./27", 0777) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5034] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5034] close(3) = 0 [pid 5034] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5744 attached [pid 5744] set_robust_list(0x55555654e6a0, 24 [pid 5034] <... clone resumed>, child_tidptr=0x55555654e690) = 83 [pid 5744] <... set_robust_list resumed>) = 0 [pid 5744] chdir("./27") = 0 [pid 5744] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5744] setpgid(0, 0) = 0 [pid 5744] symlink("/syzcgroup/unified/syz5", "./cgroup") = 0 [pid 5744] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu") = 0 [pid 5744] symlink("/syzcgroup/net/syz5", "./cgroup.net") = 0 [pid 5744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5744] write(3, "1000", 4) = 4 [pid 5744] close(3) = 0 [pid 5744] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5744] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5744] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5744] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5745 attached [pid 5745] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5744] <... clone3 resumed> => {parent_tid=[84]}, 88) = 84 [pid 5745] <... rseq resumed>) = 0 [pid 5744] rt_sigprocmask(SIG_SETMASK, [], [pid 5745] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5745] <... set_robust_list resumed>) = 0 [pid 5744] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] rt_sigprocmask(SIG_SETMASK, [], [pid 5744] <... futex resumed>) = 0 [pid 5745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5744] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5745] memfd_create("syzkaller", 0) = 3 [pid 5745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5736] <... write resumed>) = 16777216 [pid 5736] munmap(0x7f4f650a0000, 16777216 [pid 5738] <... write resumed>) = 16777216 [pid 5738] munmap(0x7f4f650a0000, 16777216 [pid 5742] <... write resumed>) = 16777216 [pid 5736] <... munmap resumed>) = 0 [pid 5742] munmap(0x7f4f650a0000, 16777216 [pid 5736] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5736] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5736] close(3) = 0 [pid 5736] mkdir("./file0", 0777) = 0 [ 235.308592][ T5736] loop1: detected capacity change from 0 to 32768 [pid 5736] mount("/dev/loop1", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5741] <... write resumed>) = 16777216 [pid 5741] munmap(0x7f4f650a0000, 16777216 [pid 5737] <... write resumed>) = 16777216 [pid 5738] <... munmap resumed>) = 0 [pid 5738] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 235.376549][ T5736] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 235.384782][ T5736] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [pid 5738] ioctl(4, LOOP_SET_FD, 3 [pid 5737] munmap(0x7f4f650a0000, 16777216 [pid 5738] <... ioctl resumed>) = 0 [pid 5738] close(3 [pid 5742] <... munmap resumed>) = 0 [pid 5738] <... close resumed>) = 0 [pid 5742] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5738] mkdir("./file0", 0777 [ 235.429847][ T5736] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 235.442374][ T5738] loop2: detected capacity change from 0 to 32768 [ 235.458026][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 235.464855][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [pid 5742] <... openat resumed>) = 4 [pid 5738] <... mkdir resumed>) = 0 [pid 5742] ioctl(4, LOOP_SET_FD, 3 [pid 5738] mount("/dev/loop2", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5742] <... ioctl resumed>) = 0 [pid 5742] close(3) = 0 [pid 5742] mkdir("./file0", 0777) = 0 [ 235.488677][ T5742] loop4: detected capacity change from 0 to 32768 [ 235.510338][ T5738] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 235.520917][ T5742] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 235.530221][ T5738] CPU: 0 PID: 5738 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 235.540709][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 235.550814][ T5738] Call Trace: [ 235.554139][ T5738] [ 235.557110][ T5738] dump_stack_lvl+0x136/0x150 [ 235.560271][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 95ms [ 235.561842][ T5738] sysfs_warn_dup+0x80/0xa0 [ 235.570389][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 235.573732][ T5738] sysfs_create_dir_ns+0x237/0x290 [ 235.579096][ T5736] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 235.584046][ T5738] ? sysfs_create_mount_point+0xb0/0xb0 [ 235.596862][ T5738] ? spin_bug+0x1c0/0x1c0 [ 235.601229][ T5738] ? do_raw_spin_unlock+0x175/0x230 [ 235.606477][ T5738] kobject_add_internal+0x2c9/0x9c0 [ 235.611722][ T5738] ? kfree+0x11/0x150 [ 235.615762][ T5738] kobject_init_and_add+0x101/0x170 [ 235.621020][ T5738] ? kobject_create_and_add+0xf0/0xf0 [ 235.626455][ T5738] ? lockdep_init_map_type+0x21e/0x810 [ 235.631960][ T5738] ? lockdep_hardirqs_on+0x7d/0x100 [ 235.637205][ T5738] ? lockdep_init_map_type+0x21e/0x810 [ 235.642723][ T5738] gfs2_sys_fs_add+0x1d5/0x450 [ 235.647536][ T5738] ? recover_store+0x170/0x170 [ 235.652338][ T5738] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 235.658722][ T5738] gfs2_fill_super+0x1312/0x2aa0 [ 235.663703][ T5738] ? gfs2_reconfigure+0xf90/0xf90 [ 235.668770][ T5738] ? snprintf+0xbf/0x100 [ 235.673064][ T5738] ? vsprintf+0x30/0x30 [ 235.677282][ T5738] ? wait_for_completion_io_timeout+0x20/0x20 [ 235.683400][ T5738] ? set_blocksize+0x2d8/0x370 [ 235.688200][ T5738] get_tree_bdev+0x43e/0x7d0 [ 235.692831][ T5738] ? gfs2_reconfigure+0xf90/0xf90 [ 235.697891][ T5738] gfs2_get_tree+0x4e/0x270 [ 235.702426][ T5738] vfs_get_tree+0x8d/0x350 [ 235.706872][ T5738] path_mount+0x136e/0x1e70 [ 235.711406][ T5738] ? putname+0x102/0x140 [ 235.715679][ T5738] ? lockdep_hardirqs_on+0x7d/0x100 [ 235.720907][ T5738] ? finish_automount+0xa30/0xa30 [ 235.726047][ T5738] ? putname+0x102/0x140 [ 235.730317][ T5738] __x64_sys_mount+0x283/0x300 [ 235.735114][ T5738] ? copy_mnt_ns+0xb30/0xb30 [ 235.739738][ T5738] ? lockdep_hardirqs_on+0x7d/0x100 [ 235.744975][ T5738] ? _raw_spin_unlock_irq+0x2e/0x50 [ 235.750216][ T5738] ? ptrace_notify+0xfe/0x140 [ 235.754940][ T5738] do_syscall_64+0x39/0xb0 [ 235.759392][ T5738] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 235.765328][ T5738] RIP: 0033:0x7f4f6dd11c5a [ 235.769791][ T5738] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 235.789429][ T5738] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 235.797897][ T5738] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 235.805923][ T5738] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 235.814022][ T5738] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 235.822024][ T5738] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 235.830024][ T5738] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 235.838111][ T5738] [ 235.845886][ T5742] CPU: 0 PID: 5742 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 235.856376][ T5742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 235.866480][ T5742] Call Trace: [ 235.869799][ T5742] [ 235.872765][ T5742] dump_stack_lvl+0x136/0x150 [ 235.877523][ T5742] sysfs_warn_dup+0x80/0xa0 [ 235.882076][ T5742] sysfs_create_dir_ns+0x237/0x290 [ 235.887255][ T5742] ? sysfs_create_mount_point+0xb0/0xb0 [ 235.892939][ T5742] ? spin_bug+0x1c0/0x1c0 [ 235.897326][ T5742] ? do_raw_spin_unlock+0x175/0x230 [ 235.902615][ T5742] kobject_add_internal+0x2c9/0x9c0 [ 235.907875][ T5742] ? kfree+0x11/0x150 [ 235.911903][ T5742] kobject_init_and_add+0x101/0x170 [ 235.915902][ T5738] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 235.917131][ T5742] ? kobject_create_and_add+0xf0/0xf0 [pid 5742] mount("/dev/loop4", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5741] <... munmap resumed>) = 0 [pid 5741] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5741] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5741] close(3) = 0 [pid 5741] mkdir("./file0", 0777) = 0 [ 235.936441][ T5742] ? lockdep_init_map_type+0x21e/0x810 [ 235.938672][ T5741] loop3: detected capacity change from 0 to 32768 [ 235.941934][ T5742] ? lockdep_hardirqs_on+0x7d/0x100 [ 235.953588][ T5742] ? lockdep_init_map_type+0x21e/0x810 [ 235.959105][ T5742] gfs2_sys_fs_add+0x1d5/0x450 [ 235.963919][ T5742] ? recover_store+0x170/0x170 [ 235.968729][ T5742] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 235.974517][ T5742] gfs2_fill_super+0x1312/0x2aa0 [ 235.979527][ T5742] ? gfs2_reconfigure+0xf90/0xf90 [ 235.984231][ T5738] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 235.984578][ T5742] ? snprintf+0xbf/0x100 [ 235.984618][ T5742] ? vsprintf+0x30/0x30 [ 235.999453][ T5741] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 235.999528][ T5742] ? wait_for_completion_io_timeout+0x20/0x20 [ 236.013049][ T5742] ? set_blocksize+0x2d8/0x370 [ 236.017872][ T5742] get_tree_bdev+0x43e/0x7d0 [ 236.022522][ T5742] ? gfs2_reconfigure+0xf90/0xf90 [ 236.027605][ T5742] gfs2_get_tree+0x4e/0x270 [ 236.032162][ T5742] vfs_get_tree+0x8d/0x350 [ 236.036660][ T5742] path_mount+0x136e/0x1e70 [pid 5741] mount("/dev/loop3", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5737] <... munmap resumed>) = 0 [ 236.041215][ T5742] ? putname+0x102/0x140 [ 236.045502][ T5742] ? lockdep_hardirqs_on+0x7d/0x100 [ 236.050777][ T5742] ? finish_automount+0xa30/0xa30 [ 236.055855][ T5742] ? putname+0x102/0x140 [ 236.060147][ T5742] __x64_sys_mount+0x283/0x300 [ 236.064971][ T5742] ? copy_mnt_ns+0xb30/0xb30 [ 236.069613][ T5742] ? lockdep_hardirqs_on+0x7d/0x100 [ 236.074901][ T5742] ? _raw_spin_unlock_irq+0x2e/0x50 [ 236.080157][ T5742] ? ptrace_notify+0xfe/0x140 [ 236.084913][ T5742] do_syscall_64+0x39/0xb0 [pid 5737] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 236.089369][ T5742] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 236.095332][ T5742] RIP: 0033:0x7f4f6dd11c5a [ 236.099783][ T5742] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 236.102676][ T5737] loop0: detected capacity change from 0 to 32768 [ 236.119433][ T5742] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 236.119472][ T5742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 236.119493][ T5742] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 236.119514][ T5742] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 236.119536][ T5742] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 236.119556][ T5742] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 236.119582][ T5742] [ 236.125949][ T5741] CPU: 0 PID: 5741 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [pid 5737] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5737] close(3) = 0 [pid 5737] mkdir("./file0", 0777) = 0 [pid 5736] <... mount resumed>) = 0 [pid 5737] mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5736] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5736] chdir("./file0") = 0 [pid 5736] ioctl(4, LOOP_CLR_FD) = 0 [pid 5736] close(4) = 0 [pid 5736] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5733] <... futex resumed>) = 0 [pid 5736] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5733] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5733] <... futex resumed>) = 0 [ 236.136518][ T5742] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 236.142765][ T5741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 236.150816][ T5742] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 236.158725][ T5741] Call Trace: [ 236.158738][ T5741] [ 236.158749][ T5741] dump_stack_lvl+0x136/0x150 [ 236.229718][ T5741] sysfs_warn_dup+0x80/0xa0 [ 236.234290][ T5741] sysfs_create_dir_ns+0x237/0x290 [pid 5736] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5733] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5745] <... write resumed>) = 16777216 [ 236.239466][ T5741] ? sysfs_create_mount_point+0xb0/0xb0 [ 236.245101][ T5741] ? spin_bug+0x1c0/0x1c0 [ 236.247058][ T5736] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [ 236.249473][ T5741] ? do_raw_spin_unlock+0x175/0x230 [ 236.263076][ T5741] kobject_add_internal+0x2c9/0x9c0 [ 236.268331][ T5741] ? kfree+0x11/0x150 [ 236.272378][ T5741] kobject_init_and_add+0x101/0x170 [ 236.277635][ T5741] ? kobject_create_and_add+0xf0/0xf0 [ 236.283077][ T5741] ? lockdep_init_map_type+0x21e/0x810 [ 236.288597][ T5741] ? lockdep_hardirqs_on+0x7d/0x100 [ 236.293961][ T5741] ? lockdep_init_map_type+0x21e/0x810 [ 236.299489][ T5741] gfs2_sys_fs_add+0x1d5/0x450 [ 236.299727][ T5736] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 236.299727][ T5736] inode = 12 2341 [ 236.299727][ T5736] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 236.304286][ T5741] ? recover_store+0x170/0x170 [ 236.304323][ T5741] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 236.335262][ T5741] gfs2_fill_super+0x1312/0x2aa0 [pid 5745] munmap(0x7f4f650a0000, 16777216 [pid 5733] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5733] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [ 236.340263][ T5741] ? gfs2_reconfigure+0xf90/0xf90 [ 236.345357][ T5741] ? snprintf+0xbf/0x100 [ 236.349678][ T5741] ? vsprintf+0x30/0x30 [ 236.353887][ T5741] ? wait_for_completion_io_timeout+0x20/0x20 [ 236.360022][ T5741] ? set_blocksize+0x2d8/0x370 [ 236.364847][ T5741] get_tree_bdev+0x43e/0x7d0 [ 236.369496][ T5741] ? gfs2_reconfigure+0xf90/0xf90 [ 236.374589][ T5741] gfs2_get_tree+0x4e/0x270 [ 236.379153][ T5741] vfs_get_tree+0x8d/0x350 [ 236.383664][ T5741] path_mount+0x136e/0x1e70 [ 236.388426][ T5741] ? putname+0x102/0x140 [pid 5733] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [ 236.391808][ T5736] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 236.392699][ T5741] ? lockdep_hardirqs_on+0x7d/0x100 [ 236.392745][ T5741] ? finish_automount+0xa30/0xa30 [ 236.412096][ T5741] ? putname+0x102/0x140 [ 236.416395][ T5741] __x64_sys_mount+0x283/0x300 [ 236.421223][ T5741] ? copy_mnt_ns+0xb30/0xb30 [ 236.425876][ T5741] ? lockdep_hardirqs_on+0x7d/0x100 [ 236.431144][ T5741] ? _raw_spin_unlock_irq+0x2e/0x50 [pid 5733] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5733] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} => {parent_tid=[80]}, 88) = 80 [pid 5733] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 236.432495][ T5736] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5736 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 236.436388][ T5741] ? ptrace_notify+0xfe/0x140 [ 236.436445][ T5741] do_syscall_64+0x39/0xb0 [ 236.436475][ T5741] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 236.436529][ T5741] RIP: 0033:0x7f4f6dd11c5a [ 236.436553][ T5741] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 236.436585][ T5741] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 236.436618][ T5741] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 236.436648][ T5741] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 236.436672][ T5741] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 236.486963][ T5736] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 236.494187][ T5741] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 236.494214][ T5741] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 ./strace-static-x86_64: Process 5751 attached [pid 5745] <... munmap resumed>) = 0 [pid 5742] <... mount resumed>) = -1 EEXIST (File exists) [pid 5738] <... mount resumed>) = -1 EEXIST (File exists) [pid 5733] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5751] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5745] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5738] ioctl(4, LOOP_CLR_FD [pid 5751] <... rseq resumed>) = 0 [pid 5745] <... openat resumed>) = 4 [pid 5751] set_robust_list(0x7f4f6609f9a0, 24 [pid 5745] ioctl(4, LOOP_SET_FD, 3 [pid 5742] ioctl(4, LOOP_CLR_FD [pid 5751] <... set_robust_list resumed>) = 0 [pid 5751] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5751] ioctl(0, VFAT_IOCTL_READDIR_SHORT, 0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5751] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5745] <... ioctl resumed>) = 0 [pid 5751] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5745] close(3) = 0 [pid 5745] mkdir("./file0", 0777) = 0 [ 236.494242][ T5741] [ 236.535165][ T5741] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 236.546403][ T5737] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 236.555385][ T5741] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 236.583139][ T5745] loop5: detected capacity change from 0 to 32768 [pid 5745] mount("/dev/loop5", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5741] <... mount resumed>) = -1 EEXIST (File exists) [ 236.595939][ T5736] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 236.604815][ T5736] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 236.614199][ T5745] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 236.614845][ T5736] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 236.627249][ T5737] CPU: 1 PID: 5737 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 236.638568][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 236.648671][ T5737] Call Trace: [ 236.651994][ T5737] [ 236.652738][ T5736] gfs2: fsid=syz:syz.0: File system withdrawn [ 236.654962][ T5737] dump_stack_lvl+0x136/0x150 [ 236.665816][ T5737] sysfs_warn_dup+0x80/0xa0 [ 236.670370][ T5737] sysfs_create_dir_ns+0x237/0x290 [ 236.675532][ T5737] ? sysfs_create_mount_point+0xb0/0xb0 [ 236.681132][ T5737] ? spin_bug+0x1c0/0x1c0 [ 236.685568][ T5737] ? do_raw_spin_unlock+0x175/0x230 [ 236.690836][ T5737] kobject_add_internal+0x2c9/0x9c0 [ 236.696086][ T5737] ? kfree+0x11/0x150 [ 236.700135][ T5737] kobject_init_and_add+0x101/0x170 [ 236.705397][ T5737] ? kobject_create_and_add+0xf0/0xf0 [ 236.710824][ T5737] ? lockdep_init_map_type+0x21e/0x810 [ 236.716349][ T5737] ? lockdep_hardirqs_on+0x7d/0x100 [ 236.721613][ T5737] ? lockdep_init_map_type+0x21e/0x810 [ 236.727141][ T5737] gfs2_sys_fs_add+0x1d5/0x450 [ 236.731953][ T5737] ? recover_store+0x170/0x170 [ 236.736769][ T5737] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 236.742552][ T5737] gfs2_fill_super+0x1312/0x2aa0 [ 236.747545][ T5737] ? gfs2_reconfigure+0xf90/0xf90 [ 236.752625][ T5737] ? snprintf+0xbf/0x100 [ 236.756929][ T5737] ? vsprintf+0x30/0x30 [ 236.761240][ T5737] ? wait_for_completion_io_timeout+0x20/0x20 [ 236.767408][ T5737] ? set_blocksize+0x2d8/0x370 [ 236.772234][ T5737] get_tree_bdev+0x43e/0x7d0 [ 236.776891][ T5737] ? gfs2_reconfigure+0xf90/0xf90 [ 236.781964][ T5737] gfs2_get_tree+0x4e/0x270 [ 236.786521][ T5737] vfs_get_tree+0x8d/0x350 [ 236.791003][ T5737] path_mount+0x136e/0x1e70 [pid 5741] ioctl(4, LOOP_CLR_FD [pid 5751] <... futex resumed>) = 0 [pid 5733] <... futex resumed>) = 1 [pid 5751] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5733] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5733] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5751] <... futex resumed>) = 0 [pid 5733] <... futex resumed>) = 1 [pid 5751] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [ 236.795570][ T5737] ? putname+0x102/0x140 [ 236.799876][ T5737] ? lockdep_hardirqs_on+0x7d/0x100 [ 236.805223][ T5737] ? finish_automount+0xa30/0xa30 [ 236.810308][ T5737] ? putname+0x102/0x140 [ 236.814612][ T5737] __x64_sys_mount+0x283/0x300 [ 236.819446][ T5737] ? copy_mnt_ns+0xb30/0xb30 [ 236.824119][ T5737] ? lockdep_hardirqs_on+0x7d/0x100 [ 236.829375][ T5737] ? _raw_spin_unlock_irq+0x2e/0x50 [ 236.834645][ T5737] ? ptrace_notify+0xfe/0x140 [ 236.839413][ T5737] do_syscall_64+0x39/0xb0 [pid 5733] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5751] <... openat resumed>) = -1 EIO (Input/output error) [pid 5751] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5751] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5733] <... futex resumed>) = 0 [ 236.843878][ T5737] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 236.849923][ T5737] RIP: 0033:0x7f4f6dd11c5a [ 236.854385][ T5737] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 236.874040][ T5737] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 236.882497][ T5737] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 236.890506][ T5737] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 236.898516][ T5737] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 236.906535][ T5737] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 236.914557][ T5737] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 236.922587][ T5737] [ 236.934486][ T5745] CPU: 1 PID: 5745 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 236.945007][ T5745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 236.955109][ T5745] Call Trace: [ 236.958432][ T5745] [ 236.961406][ T5745] dump_stack_lvl+0x136/0x150 [ 236.966156][ T5745] sysfs_warn_dup+0x80/0xa0 [ 236.970712][ T5745] sysfs_create_dir_ns+0x237/0x290 [ 236.975870][ T5745] ? sysfs_create_mount_point+0xb0/0xb0 [ 236.981468][ T5745] ? spin_bug+0x1c0/0x1c0 [ 236.985862][ T5745] ? do_raw_spin_unlock+0x175/0x230 [ 236.991123][ T5745] kobject_add_internal+0x2c9/0x9c0 [ 236.996376][ T5745] ? kfree+0x11/0x150 [ 237.000407][ T5745] kobject_init_and_add+0x101/0x170 [ 237.005654][ T5745] ? kobject_create_and_add+0xf0/0xf0 [ 237.011090][ T5745] ? lockdep_init_map_type+0x21e/0x810 [ 237.016610][ T5745] ? lockdep_hardirqs_on+0x7d/0x100 [ 237.021868][ T5745] ? lockdep_init_map_type+0x21e/0x810 [ 237.027406][ T5745] gfs2_sys_fs_add+0x1d5/0x450 [ 237.032227][ T5745] ? recover_store+0x170/0x170 [ 237.037049][ T5745] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 237.042835][ T5745] gfs2_fill_super+0x1312/0x2aa0 [ 237.047836][ T5745] ? gfs2_reconfigure+0xf90/0xf90 [ 237.052915][ T5745] ? snprintf+0xbf/0x100 [ 237.057213][ T5745] ? vsprintf+0x30/0x30 [ 237.061441][ T5745] ? wait_for_completion_io_timeout+0x20/0x20 [ 237.067606][ T5745] ? set_blocksize+0x2d8/0x370 [ 237.072426][ T5745] get_tree_bdev+0x43e/0x7d0 [ 237.077072][ T5745] ? gfs2_reconfigure+0xf90/0xf90 [ 237.082141][ T5745] gfs2_get_tree+0x4e/0x270 [ 237.086692][ T5745] vfs_get_tree+0x8d/0x350 [ 237.091160][ T5745] path_mount+0x136e/0x1e70 [ 237.095718][ T5745] ? putname+0x102/0x140 [ 237.100015][ T5745] ? lockdep_hardirqs_on+0x7d/0x100 [ 237.105281][ T5745] ? finish_automount+0xa30/0xa30 [ 237.110371][ T5745] ? putname+0x102/0x140 [ 237.114668][ T5745] __x64_sys_mount+0x283/0x300 [ 237.119487][ T5745] ? copy_mnt_ns+0xb30/0xb30 [ 237.124142][ T5745] ? lockdep_hardirqs_on+0x7d/0x100 [ 237.129415][ T5745] ? _raw_spin_unlock_irq+0x2e/0x50 [ 237.134694][ T5745] ? ptrace_notify+0xfe/0x140 [ 237.139452][ T5745] do_syscall_64+0x39/0xb0 [ 237.143918][ T5745] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 237.149882][ T5745] RIP: 0033:0x7f4f6dd11c5a [ 237.154341][ T5745] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 237.174015][ T5745] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 237.182501][ T5745] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 237.190608][ T5745] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 237.198647][ T5745] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 237.206677][ T5745] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 237.214704][ T5745] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 237.222733][ T5745] [ 237.226334][ T5736] CPU: 1 PID: 5736 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 237.236909][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 237.247110][ T5736] Call Trace: [ 237.250428][ T5736] [ 237.253397][ T5736] dump_stack_lvl+0x136/0x150 [ 237.258153][ T5736] gfs2_withdraw+0xb33/0x1060 [ 237.262887][ T5736] ? gfs2_consist_inode_i+0x104/0x150 [ 237.267121][ T5737] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 237.268289][ T5736] gfs2_dirent_scan+0x32a/0x3d0 [pid 5738] <... ioctl resumed>) = 0 [ 237.282353][ T5745] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 237.287020][ T5736] ? gfs2_dirent_prev+0x210/0x210 [ 237.287078][ T5736] ? gfs2_dirent_prev+0x210/0x210 [ 237.287125][ T5736] gfs2_dirent_search+0x47d/0x580 [ 237.316189][ T5736] ? get_first_leaf+0x190/0x190 [ 237.321129][ T5736] ? gfs2_permission+0x256/0x3e0 [ 237.326123][ T5736] gfs2_dir_search+0x8d/0x2d0 [ 237.330864][ T5736] ? gfs2_dir_read+0x14e0/0x14e0 [ 237.335870][ T5736] gfs2_lookupi+0x481/0x640 [ 237.340451][ T5736] ? gfs2_lookup_by_inum+0x100/0x100 [ 237.345794][ T5736] ? __gfs2_lookup+0x83/0x280 [ 237.350523][ T5736] ? d_alloc_parallel+0x693/0x1530 [ 237.355696][ T5736] __gfs2_lookup+0x83/0x280 [ 237.356230][ T5737] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 237.360330][ T5736] ? gfs2_lookupi+0x640/0x640 [ 237.360372][ T5736] ? __d_lookup_rcu+0x4e0/0x4e0 [ 237.376562][ T5736] ? __d_lookup+0x289/0x4c0 [ 237.381129][ T5736] gfs2_atomic_open+0xde/0x250 [ 237.385954][ T5736] ? __gfs2_lookup+0x280/0x280 [ 237.389757][ T5745] gfs2: fsid=syz:syz: error -17 adding sysfs files [pid 5738] close(4) = 0 [pid 5738] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5735] <... futex resumed>) = 0 [pid 5738] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5735] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] <... openat resumed>) = 3 [ 237.390751][ T5736] lookup_open.isra.0+0xce2/0x1400 [ 237.402458][ T5736] ? link_path_walk.part.0+0xd60/0xd60 [ 237.407989][ T5736] ? lookup_fast+0x14e/0x520 [ 237.412655][ T5736] path_openat+0x969/0x2710 [ 237.417230][ T5736] ? path_lookupat+0x840/0x840 [ 237.422068][ T5736] do_filp_open+0x1ba/0x410 [ 237.426635][ T5736] ? may_open_dev+0xf0/0xf0 [ 237.431198][ T5736] ? find_held_lock+0x2d/0x110 [ 237.436017][ T5736] ? do_raw_spin_lock+0x124/0x2b0 [ 237.441117][ T5736] ? spin_bug+0x1c0/0x1c0 [ 237.445516][ T5736] ? _raw_spin_unlock+0x28/0x40 [ 237.450437][ T5736] ? alloc_fd+0x2e4/0x750 [ 237.454842][ T5736] do_sys_openat2+0x160/0x1c0 [ 237.459595][ T5736] ? build_open_flags+0x720/0x720 [ 237.464696][ T5736] ? ptrace_notify+0xfe/0x140 [ 237.469442][ T5736] ? lock_downgrade+0x690/0x690 [ 237.474353][ T5736] __x64_sys_openat+0x143/0x1f0 [ 237.479292][ T5736] ? __ia32_sys_open+0x1c0/0x1c0 [ 237.484308][ T5736] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.489582][ T5736] ? lockdep_hardirqs_on+0x7d/0x100 [ 237.494847][ T5736] ? _raw_spin_unlock_irq+0x2e/0x50 [ 237.500129][ T5736] ? ptrace_notify+0xfe/0x140 [ 237.504874][ T5736] do_syscall_64+0x39/0xb0 [ 237.509342][ T5736] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 237.515304][ T5736] RIP: 0033:0x7f4f6dd107f9 [ 237.519779][ T5736] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 237.539453][ T5736] RSP: 002b:00007f4f6d4c0228 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [pid 5735] <... futex resumed>) = 0 [pid 5738] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5738] <... futex resumed>) = 0 [pid 5735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5738] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5735] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5735] <... futex resumed>) = 0 [pid 5738] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5735] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5738] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5738] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5735] <... futex resumed>) = 0 [pid 5738] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5735] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5735] <... futex resumed>) = 0 [pid 5738] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5735] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5738] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5738] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5735] <... futex resumed>) = 0 [pid 5738] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5735] close(3) = 0 [pid 5735] close(4) = -1 EBADF (Bad file descriptor) [pid 5735] close(5) = -1 EBADF (Bad file descriptor) [pid 5735] close(6) = -1 EBADF (Bad file descriptor) [pid 5735] close(7) = -1 EBADF (Bad file descriptor) [pid 5735] close(8) = -1 EBADF (Bad file descriptor) [pid 5735] close(9) = -1 EBADF (Bad file descriptor) [pid 5735] close(10) = -1 EBADF (Bad file descriptor) [pid 5735] close(11) = -1 EBADF (Bad file descriptor) [pid 5735] close(12) = -1 EBADF (Bad file descriptor) [pid 5735] close(13) = -1 EBADF (Bad file descriptor) [pid 5735] close(14) = -1 EBADF (Bad file descriptor) [pid 5735] close(15) = -1 EBADF (Bad file descriptor) [pid 5735] close(16) = -1 EBADF (Bad file descriptor) [pid 5735] close(17) = -1 EBADF (Bad file descriptor) [pid 5735] close(18) = -1 EBADF (Bad file descriptor) [pid 5735] close(19) = -1 EBADF (Bad file descriptor) [pid 5735] close(20) = -1 EBADF (Bad file descriptor) [pid 5734] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5735] close(21 [pid 5734] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5734] <... futex resumed>) = 0 [pid 5735] close(22 [pid 5734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5735] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5734] <... mmap resumed>) = 0x7f4f6607f000 [pid 5735] close(23 [pid 5734] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5735] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5734] <... mprotect resumed>) = 0 [pid 5735] close(24 [pid 5734] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5735] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5734] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5735] close(25 [pid 5734] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5753 attached [pid 5735] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5753] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5735] close(26 [pid 5734] <... clone3 resumed> => {parent_tid=[86]}, 88) = 86 [pid 5753] <... rseq resumed>) = 0 [pid 5735] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5734] rt_sigprocmask(SIG_SETMASK, [], [pid 5753] set_robust_list(0x7f4f6609f9a0, 24 [pid 5735] close(27 [pid 5734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5753] <... set_robust_list resumed>) = 0 [pid 5735] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5734] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5753] rt_sigprocmask(SIG_SETMASK, [], [pid 5735] close(28 [pid 5734] <... futex resumed>) = 0 [pid 5753] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5735] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5734] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5753] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5735] close(29 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5753] <... openat resumed>) = 3 [pid 5735] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5753] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5753] <... futex resumed>) = 1 [pid 5745] <... mount resumed>) = -1 EEXIST (File exists) [pid 5735] <... write resumed>) = 156 [pid 5734] <... futex resumed>) = 0 [pid 5753] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5745] ioctl(4, LOOP_CLR_FD [pid 5736] <... openat resumed>) = -1 EIO (Input/output error) [pid 5735] exit_group(0 [pid 5734] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5753] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5738] <... futex resumed>) = ? [pid 5736] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] <... exit_group resumed>) = ? [pid 5734] <... futex resumed>) = 0 [pid 5753] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5738] +++ exited with 0 +++ [pid 5736] <... futex resumed>) = 0 [pid 5735] +++ exited with 0 +++ [pid 5734] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] close(3 [pid 5753] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5736] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5733] <... close resumed>) = 0 [pid 5033] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=65 /* 0.65 s */} --- [pid 5753] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] close(4 [pid 5753] <... futex resumed>) = 1 [pid 5734] <... futex resumed>) = 0 [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5753] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5734] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] close(5 [pid 5753] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5734] <... futex resumed>) = 0 [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 237.547938][ T5736] RAX: ffffffffffffffda RBX: 00007f4f6dda46e8 RCX: 00007f4f6dd107f9 [ 237.556052][ T5736] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000ffffff9c [ 237.564080][ T5736] RBP: 00007f4f6dda46e0 R08: 00007f4f6d4c06c0 R09: 00007f4f6d4c06c0 [ 237.572104][ T5736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f6dda46ec [ 237.580128][ T5736] R13: 0030656c69662f2e R14: 00007f4f6dd5d740 R15: 00007fffaa0db528 [ 237.588162][ T5736] [pid 5753] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5734] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] close(6 [pid 5753] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5742] <... ioctl resumed>) = 0 [pid 5737] <... mount resumed>) = -1 EEXIST (File exists) [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5753] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] close(4 [pid 5737] ioctl(4, LOOP_CLR_FD [pid 5733] close(7 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5753] <... futex resumed>) = 1 [pid 5742] <... close resumed>) = 0 [pid 5734] <... futex resumed>) = 0 [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5753] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5742] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] close(8 [pid 5033] <... openat resumed>) = 3 [pid 5742] <... futex resumed>) = 1 [pid 5739] <... futex resumed>) = 0 [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5033] newfstatat(3, "", [pid 5742] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5740] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5739] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] close(9 [pid 5742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5739] <... futex resumed>) = 0 [pid 5742] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5739] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5742] <... openat resumed>) = 3 [pid 5742] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5739] <... futex resumed>) = 0 [pid 5742] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5739] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5739] <... futex resumed>) = 0 [pid 5742] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5739] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5742] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5742] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] getdents64(3, [pid 5742] <... futex resumed>) = 1 [pid 5739] <... futex resumed>) = 0 [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5742] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5739] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5739] <... futex resumed>) = 0 [pid 5742] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5739] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5742] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5742] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5739] <... futex resumed>) = 0 [pid 5742] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5739] close(3 [pid 5733] close(10 [pid 5033] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5739] <... close resumed>) = 0 [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./28/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] close(4 [pid 5733] close(11 [pid 5739] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5739] close(5 [pid 5733] close(12 [pid 5033] newfstatat(AT_FDCWD, "./28/cgroup.cpu", [pid 5739] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5739] close(6 [pid 5733] close(13 [pid 5033] unlink("./28/cgroup.cpu" [pid 5739] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5739] close(7) = -1 EBADF (Bad file descriptor) [pid 5033] <... unlink resumed>) = 0 [pid 5739] close(8 [pid 5733] close(14 [pid 5033] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5739] close(9 [pid 5733] close(15 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5739] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5739] close(10 [pid 5733] close(16 [pid 5739] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5739] close(11) = -1 EBADF (Bad file descriptor) [pid 5739] close(12) = -1 EBADF (Bad file descriptor) [pid 5739] close(13) = -1 EBADF (Bad file descriptor) [pid 5739] close(14) = -1 EBADF (Bad file descriptor) [pid 5739] close(15) = -1 EBADF (Bad file descriptor) [pid 5739] close(16) = -1 EBADF (Bad file descriptor) [pid 5739] close(17) = -1 EBADF (Bad file descriptor) [pid 5739] close(18) = -1 EBADF (Bad file descriptor) [pid 5739] close(19) = -1 EBADF (Bad file descriptor) [pid 5739] close(20) = -1 EBADF (Bad file descriptor) [pid 5739] close(21) = -1 EBADF (Bad file descriptor) [pid 5739] close(22) = -1 EBADF (Bad file descriptor) [pid 5739] close(23) = -1 EBADF (Bad file descriptor) [pid 5739] close(24) = -1 EBADF (Bad file descriptor) [pid 5739] close(25) = -1 EBADF (Bad file descriptor) [pid 5739] close(26) = -1 EBADF (Bad file descriptor) [pid 5739] close(27) = -1 EBADF (Bad file descriptor) [pid 5739] close(28) = -1 EBADF (Bad file descriptor) [pid 5739] close(29) = -1 EBADF (Bad file descriptor) [pid 5739] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5739] exit_group(0 [pid 5742] <... futex resumed>) = ? [pid 5739] <... exit_group resumed>) = ? [pid 5742] +++ exited with 0 +++ [pid 5739] +++ exited with 0 +++ [pid 5031] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=57 /* 0.57 s */} --- [pid 5031] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5031] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5031] umount2("./26/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./26/cgroup.cpu") = 0 [pid 5031] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./26/binderfs") = 0 [pid 5031] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5031] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5031] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5031] close(4) = 0 [pid 5031] rmdir("./26/file0") = 0 [pid 5031] umount2("./26/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5733] close(17 [pid 5033] unlink("./28/binderfs" [pid 5031] newfstatat(AT_FDCWD, "./26/cgroup", [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5733] close(18 [pid 5033] <... unlink resumed>) = 0 [pid 5031] unlink("./26/cgroup" [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... unlink resumed>) = 0 [pid 5733] close(19 [pid 5033] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] umount2("./26/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5733] close(20 [pid 5033] newfstatat(AT_FDCWD, "./28/file0", [pid 5031] newfstatat(AT_FDCWD, "./26/cgroup.net", [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5733] close(21 [pid 5033] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] unlink("./26/cgroup.net" [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... unlink resumed>) = 0 [pid 5733] close(22 [pid 5033] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5031] getdents64(3, [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5733] close(23 [pid 5033] <... openat resumed>) = 4 [pid 5031] close(3 [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] newfstatat(4, "", [pid 5031] <... close resumed>) = 0 [pid 5733] close(24 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] rmdir("./26" [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] getdents64(4, [pid 5031] <... rmdir resumed>) = 0 [pid 5733] close(25 [pid 5031] mkdir("./27", 0777 [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5031] <... mkdir resumed>) = 0 [pid 5733] close(26 [pid 5033] getdents64(4, [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5031] <... openat resumed>) = 3 [pid 5733] close(27 [pid 5033] close(4 [pid 5031] ioctl(3, LOOP_CLR_FD [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... close resumed>) = 0 [pid 5031] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5733] close(28 [pid 5033] rmdir("./28/file0" [pid 5031] close(3 [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... close resumed>) = 0 [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5754 attached [pid 5733] close(29 [pid 5033] <... rmdir resumed>) = 0 [pid 5733] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./28/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] <... clone resumed>, child_tidptr=0x55555654e690) = 80 [pid 5733] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5754] set_robust_list(0x55555654e6a0, 24 [pid 5733] exit_group(0 [pid 5754] <... set_robust_list resumed>) = 0 [pid 5751] <... futex resumed>) = ? [pid 5733] <... exit_group resumed>) = ? [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5736] <... futex resumed>) = ? [pid 5754] chdir("./27" [pid 5751] +++ exited with 0 +++ [pid 5736] +++ exited with 0 +++ [pid 5733] +++ exited with 0 +++ [pid 5033] newfstatat(AT_FDCWD, "./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./28/cgroup") = 0 [pid 5754] <... chdir resumed>) = 0 [pid 5033] umount2("./28/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5754] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5754] <... prctl resumed>) = 0 [pid 5033] newfstatat(AT_FDCWD, "./28/cgroup.net", [pid 5754] setpgid(0, 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5754] <... setpgid resumed>) = 0 [pid 5032] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=66 /* 0.66 s */} --- [pid 5033] unlink("./28/cgroup.net") = 0 [pid 5754] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5033] getdents64(3, [pid 5754] <... symlink resumed>) = 0 [pid 5033] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5033] close(3 [pid 5754] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5032] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] <... close resumed>) = 0 [pid 5033] rmdir("./28") = 0 [pid 5033] mkdir("./29", 0777 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5741] <... ioctl resumed>) = 0 [pid 5741] close(4) = 0 [pid 5741] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5741] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5740] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5740] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5741] <... futex resumed>) = 0 [pid 5741] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5741] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5740] <... futex resumed>) = 0 [pid 5740] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5740] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5741] <... futex resumed>) = 1 [pid 5741] ioctl(-1, VFAT_IOCTL_READDIR_SHORT, 0) = -1 EBADF (Bad file descriptor) [pid 5741] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5740] <... futex resumed>) = 0 [pid 5740] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5740] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5741] <... futex resumed>) = 1 [pid 5741] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH) = -1 ENOENT (No such file or directory) [pid 5741] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5740] <... futex resumed>) = 0 [pid 5740] close(3) = 0 [pid 5740] close(4) = -1 EBADF (Bad file descriptor) [pid 5740] close(5) = -1 EBADF (Bad file descriptor) [pid 5740] close(6) = -1 EBADF (Bad file descriptor) [pid 5740] close(7) = -1 EBADF (Bad file descriptor) [pid 5033] <... mkdir resumed>) = 0 [pid 5032] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5740] close(8) = -1 EBADF (Bad file descriptor) [pid 5740] close(9) = -1 EBADF (Bad file descriptor) [pid 5740] close(10) = -1 EBADF (Bad file descriptor) [pid 5740] close(11) = -1 EBADF (Bad file descriptor) [pid 5740] close(12) = -1 EBADF (Bad file descriptor) [pid 5032] <... openat resumed>) = 3 [pid 5740] close(13 [pid 5754] <... symlink resumed>) = 0 [pid 5741] <... futex resumed>) = 1 [pid 5740] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] newfstatat(3, "", [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5741] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5740] close(14write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory ) = -1 EBADF (Bad file descriptor) [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5740] close(15) = -1 EBADF (Bad file descriptor) [pid 5033] <... openat resumed>) = 3 [pid 5032] getdents64(3, [pid 5740] close(16) = -1 EBADF (Bad file descriptor) [pid 5740] close(17) = -1 EBADF (Bad file descriptor) [pid 5740] close(18) = -1 EBADF (Bad file descriptor) [pid 5740] close(19) = -1 EBADF (Bad file descriptor) [pid 5032] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5740] close(20 [pid 5754] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5032] umount2("./27/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] ioctl(3, LOOP_CLR_FD [pid 5740] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5740] close(21) = -1 EBADF (Bad file descriptor) [pid 5740] close(22) = -1 EBADF (Bad file descriptor) [pid 5740] close(23) = -1 EBADF (Bad file descriptor) [pid 5740] close(24) = -1 EBADF (Bad file descriptor) [pid 5740] close(25) = -1 EBADF (Bad file descriptor) [pid 5740] close(26) = -1 EBADF (Bad file descriptor) [pid 5740] close(27) = -1 EBADF (Bad file descriptor) [pid 5740] close(28) = -1 EBADF (Bad file descriptor) [pid 5740] close(29) = -1 EBADF (Bad file descriptor) [pid 5740] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5740] exit_group(0 [pid 5741] <... futex resumed>) = ? [pid 5740] <... exit_group resumed>) = ? [pid 5741] +++ exited with 0 +++ [pid 5740] +++ exited with 0 +++ [pid 5754] <... symlink resumed>) = 0 [pid 5033] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] close(3 [pid 5030] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=67 /* 0.67 s */} --- [pid 5032] newfstatat(AT_FDCWD, "./27/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... close resumed>) = 0 [pid 5033] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5032] unlink("./27/cgroup.cpu" [pid 5030] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5755 attached [pid 5755] set_robust_list(0x55555654e6a0, 24 [pid 5032] <... unlink resumed>) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5755] <... set_robust_list resumed>) = 0 [pid 5755] chdir("./29" [pid 5032] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5755] <... chdir resumed>) = 0 [pid 5754] <... openat resumed>) = 3 [pid 5030] <... openat resumed>) = 3 [pid 5754] write(3, "1000", 4 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(3, "", [pid 5755] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5754] <... write resumed>) = 4 [pid 5032] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5755] setpgid(0, 0) = 0 [pid 5755] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 5755] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5754] close(3 [pid 5032] unlink("./27/binderfs" [pid 5030] getdents64(3, [pid 5755] <... symlink resumed>) = 0 [pid 5032] <... unlink resumed>) = 0 [pid 5032] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5754] <... close resumed>) = 0 [pid 5033] <... clone resumed>, child_tidptr=0x55555654e690) = 82 [pid 5030] umount2("./26/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5754] symlink("/dev/binderfs", "./binderfs" [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5755] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 5754] <... symlink resumed>) = 0 [pid 5030] newfstatat(AT_FDCWD, "./26/cgroup.cpu", [pid 5754] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5754] <... futex resumed>) = 0 [pid 5030] unlink("./26/cgroup.cpu" [pid 5755] <... openat resumed>) = 3 [pid 5754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5755] write(3, "1000", 4 [pid 5754] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5030] <... unlink resumed>) = 0 [pid 5755] <... write resumed>) = 4 [pid 5030] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5754] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5755] close(3) = 0 [pid 5755] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5755] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5755] <... futex resumed>) = 0 [pid 5755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5754] <... mprotect resumed>) = 0 [pid 5030] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5755] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5754] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5755] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5030] unlink("./26/binderfs" [pid 5755] <... mprotect resumed>) = 0 [pid 5754] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5755] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5030] <... unlink resumed>) = 0 [pid 5755] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5030] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5755] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5756 attached [pid 5754] <... clone3 resumed> => {parent_tid=[81]}, 88) = 81 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5756] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5754] rt_sigprocmask(SIG_SETMASK, [], [pid 5030] newfstatat(AT_FDCWD, "./26/file0", ./strace-static-x86_64: Process 5757 attached [pid 5756] <... rseq resumed>) = 0 [pid 5754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5757] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5756] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5755] <... clone3 resumed> => {parent_tid=[83]}, 88) = 83 [pid 5754] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5757] <... rseq resumed>) = 0 [pid 5756] <... set_robust_list resumed>) = 0 [pid 5755] rt_sigprocmask(SIG_SETMASK, [], [pid 5754] <... futex resumed>) = 0 [pid 5030] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5757] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5756] rt_sigprocmask(SIG_SETMASK, [], [pid 5755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5754] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5757] <... set_robust_list resumed>) = 0 [pid 5756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5755] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5757] rt_sigprocmask(SIG_SETMASK, [], [pid 5755] <... futex resumed>) = 0 [pid 5757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5755] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5757] memfd_create("syzkaller", 0 [pid 5756] memfd_create("syzkaller", 0 [pid 5030] <... openat resumed>) = 4 [pid 5757] <... memfd_create resumed>) = 3 [pid 5756] <... memfd_create resumed>) = 3 [pid 5030] newfstatat(4, "", [pid 5757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5756] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5757] <... mmap resumed>) = 0x7f4f650a0000 [pid 5756] <... mmap resumed>) = 0x7f4f650a0000 [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5030] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5030] close(4) = 0 [pid 5030] rmdir("./26/file0") = 0 [pid 5030] umount2("./26/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] unlink("./26/cgroup") = 0 [pid 5030] umount2("./26/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] unlink("./26/cgroup.net") = 0 [pid 5030] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5030] close(3) = 0 [pid 5030] rmdir("./26") = 0 [pid 5030] mkdir("./27", 0777) = 0 [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5030] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5030] close(3) = 0 [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5758 attached [pid 5758] set_robust_list(0x55555654e6a0, 24) = 0 [pid 5758] chdir("./27") = 0 [pid 5758] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5758] setpgid(0, 0) = 0 [pid 5758] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5030] <... clone resumed>, child_tidptr=0x55555654e690) = 76 [pid 5758] <... symlink resumed>) = 0 [pid 5758] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu") = 0 [pid 5758] symlink("/syzcgroup/net/syz3", "./cgroup.net") = 0 [pid 5758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5758] write(3, "1000", 4) = 4 [pid 5758] close(3) = 0 [pid 5758] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5758] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5758] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5758] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5758] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5759 attached [pid 5759] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5758] <... clone3 resumed> => {parent_tid=[77]}, 88) = 77 [pid 5759] <... rseq resumed>) = 0 [pid 5758] rt_sigprocmask(SIG_SETMASK, [], [pid 5759] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5758] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5759] <... set_robust_list resumed>) = 0 [pid 5758] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5759] rt_sigprocmask(SIG_SETMASK, [], [pid 5758] <... futex resumed>) = 0 [pid 5759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5758] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5759] memfd_create("syzkaller", 0) = 3 [pid 5759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5745] <... ioctl resumed>) = 0 [pid 5745] close(4) = 0 [pid 5745] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5744] <... futex resumed>) = 0 [pid 5745] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5744] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5744] <... futex resumed>) = 0 [pid 5744] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5745] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5745] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5744] <... futex resumed>) = 0 [pid 5745] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5744] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5744] <... futex resumed>) = 0 [pid 5745] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5744] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5745] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5745] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5744] <... futex resumed>) = 0 [pid 5745] <... futex resumed>) = 1 [pid 5744] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5745] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5744] <... futex resumed>) = 0 [pid 5745] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5744] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5745] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5744] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5745] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5744] close(3) = 0 [pid 5744] close(4) = -1 EBADF (Bad file descriptor) [pid 5744] close(5) = -1 EBADF (Bad file descriptor) [pid 5744] close(6) = -1 EBADF (Bad file descriptor) [pid 5744] close(7) = -1 EBADF (Bad file descriptor) [pid 5744] close(8) = -1 EBADF (Bad file descriptor) [pid 5744] close(9) = -1 EBADF (Bad file descriptor) [pid 5744] close(10) = -1 EBADF (Bad file descriptor) [pid 5744] close(11) = -1 EBADF (Bad file descriptor) [pid 5744] close(12) = -1 EBADF (Bad file descriptor) [pid 5744] close(13) = -1 EBADF (Bad file descriptor) [pid 5744] close(14) = -1 EBADF (Bad file descriptor) [pid 5744] close(15) = -1 EBADF (Bad file descriptor) [pid 5744] close(16) = -1 EBADF (Bad file descriptor) [pid 5744] close(17) = -1 EBADF (Bad file descriptor) [pid 5744] close(18) = -1 EBADF (Bad file descriptor) [pid 5744] close(19) = -1 EBADF (Bad file descriptor) [pid 5744] close(20) = -1 EBADF (Bad file descriptor) [pid 5744] close(21) = -1 EBADF (Bad file descriptor) [pid 5744] close(22) = -1 EBADF (Bad file descriptor) [pid 5744] close(23) = -1 EBADF (Bad file descriptor) [pid 5744] close(24) = -1 EBADF (Bad file descriptor) [pid 5744] close(25) = -1 EBADF (Bad file descriptor) [pid 5744] close(26) = -1 EBADF (Bad file descriptor) [pid 5744] close(27) = -1 EBADF (Bad file descriptor) [pid 5744] close(28) = -1 EBADF (Bad file descriptor) [pid 5744] close(29) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5744] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5744] exit_group(0 [pid 5745] <... futex resumed>) = ? [pid 5744] <... exit_group resumed>) = ? [pid 5745] +++ exited with 0 +++ [pid 5744] +++ exited with 0 +++ [pid 5034] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=73 /* 0.73 s */} --- [pid 5034] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5034] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5034] umount2("./27/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./27/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./27/cgroup.cpu") = 0 [pid 5034] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./27/binderfs") = 0 [pid 5034] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5034] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5034] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5034] close(4) = 0 [pid 5034] rmdir("./27/file0") = 0 [pid 5034] umount2("./27/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./27/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./27/cgroup") = 0 [pid 5034] umount2("./27/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./27/cgroup.net" [pid 5737] <... ioctl resumed>) = 0 [pid 5034] <... unlink resumed>) = 0 [pid 5034] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5737] close(4 [pid 5034] close(3 [pid 5737] <... close resumed>) = 0 [pid 5034] <... close resumed>) = 0 [pid 5034] rmdir("./27" [pid 5737] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... rmdir resumed>) = 0 [pid 5737] <... futex resumed>) = 0 [pid 5034] mkdir("./28", 0777 [pid 5737] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] <... mkdir resumed>) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5034] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5034] close(3) = 0 [pid 5034] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5760 attached , child_tidptr=0x55555654e690) = 85 [pid 5760] set_robust_list(0x55555654e6a0, 24) = 0 [pid 5760] chdir("./28") = 0 [pid 5760] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5760] setpgid(0, 0) = 0 [pid 5760] symlink("/syzcgroup/unified/syz5", "./cgroup") = 0 [pid 5760] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu") = 0 [pid 5760] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5734] close(3 [pid 5760] <... symlink resumed>) = 0 [pid 5734] <... close resumed>) = 0 [pid 5760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5734] close(4 [pid 5760] <... openat resumed>) = 3 [pid 5734] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] kill(-84, SIGKILL [pid 5760] write(3, "1000", 4 [pid 5734] close(5 [pid 5760] <... write resumed>) = 4 [pid 5753] <... futex resumed>) = ? [pid 5737] <... futex resumed>) = ? [pid 5734] <... close resumed>) = ? [pid 5029] <... kill resumed>) = 0 [pid 5760] close(3 [pid 5753] +++ killed by SIGKILL +++ [pid 5737] +++ killed by SIGKILL +++ [pid 5734] +++ killed by SIGKILL +++ [pid 5760] <... close resumed>) = 0 [pid 5760] symlink("/dev/binderfs", "./binderfs" [pid 5029] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=84, si_uid=0, si_status=SIGKILL, si_utime=10 /* 0.10 s */, si_stime=57 /* 0.57 s */} --- [pid 5760] <... symlink resumed>) = 0 [pid 5760] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5029] kill(84, SIGKILL [pid 5760] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5760] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5029] <... kill resumed>) = 0 [pid 5760] <... mprotect resumed>) = 0 [pid 5760] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5760] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5029] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5761 attached ) = -1 EINVAL (Invalid argument) [pid 5761] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5760] <... clone3 resumed> => {parent_tid=[86]}, 88) = 86 [pid 5761] <... rseq resumed>) = 0 [pid 5760] rt_sigprocmask(SIG_SETMASK, [], [pid 5029] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5761] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5029] <... openat resumed>) = 3 [pid 5761] <... set_robust_list resumed>) = 0 [pid 5760] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] newfstatat(3, "", [pid 5761] rt_sigprocmask(SIG_SETMASK, [], [pid 5760] <... futex resumed>) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5761] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5760] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5029] getdents64(3, [pid 5761] memfd_create("syzkaller", 0 [pid 5029] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5761] <... memfd_create resumed>) = 3 [pid 5029] umount2("./26/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5761] <... mmap resumed>) = 0x7f4f650a0000 [pid 5029] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./26/cgroup.cpu") = 0 [pid 5029] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./26/binderfs") = 0 [pid 5029] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5029] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5029] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5029] close(4) = 0 [pid 5029] rmdir("./26/file0") = 0 [pid 5029] umount2("./26/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./26/cgroup") = 0 [pid 5029] umount2("./26/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./26/cgroup.net") = 0 [pid 5029] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5029] close(3) = 0 [pid 5029] rmdir("./26") = 0 [pid 5029] mkdir("./27", 0777) = 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5029] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5029] close(3) = 0 [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5762 attached [pid 5762] set_robust_list(0x55555654e6a0, 24 [pid 5029] <... clone resumed>, child_tidptr=0x55555654e690) = 87 [pid 5762] <... set_robust_list resumed>) = 0 [pid 5762] chdir("./27") = 0 [pid 5762] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5762] setpgid(0, 0) = 0 [pid 5762] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5762] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5762] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5762] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5762] write(3, "1000", 4) = 4 [pid 5762] close(3) = 0 [pid 5762] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5762] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5762] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5762] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5762] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5762] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5032] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5763 attached [pid 5763] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5762] <... clone3 resumed> => {parent_tid=[88]}, 88) = 88 [pid 5763] <... rseq resumed>) = 0 [pid 5762] rt_sigprocmask(SIG_SETMASK, [], [pid 5763] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5762] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5032] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5763] <... set_robust_list resumed>) = 0 [pid 5762] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5763] rt_sigprocmask(SIG_SETMASK, [], [pid 5762] <... futex resumed>) = 0 [pid 5032] newfstatat(AT_FDCWD, "./27/file0", [pid 5763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5762] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5763] memfd_create("syzkaller", 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5763] <... memfd_create resumed>) = 3 [pid 5032] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5763] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5032] <... openat resumed>) = 4 [pid 5763] <... mmap resumed>) = 0x7f4f650a0000 [pid 5032] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5032] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5032] close(4) = 0 [pid 5032] rmdir("./27/file0") = 0 [pid 5032] umount2("./27/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5032] newfstatat(AT_FDCWD, "./27/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] unlink("./27/cgroup") = 0 [pid 5032] umount2("./27/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5032] newfstatat(AT_FDCWD, "./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] unlink("./27/cgroup.net") = 0 [pid 5032] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5032] close(3) = 0 [pid 5032] rmdir("./27") = 0 [pid 5032] mkdir("./28", 0777) = 0 [pid 5032] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5032] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5032] close(3) = 0 [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5764 attached [pid 5764] set_robust_list(0x55555654e6a0, 24 [pid 5032] <... clone resumed>, child_tidptr=0x55555654e690) = 81 [pid 5764] <... set_robust_list resumed>) = 0 [pid 5764] chdir("./28") = 0 [pid 5764] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5764] setpgid(0, 0) = 0 [pid 5764] symlink("/syzcgroup/unified/syz1", "./cgroup") = 0 [pid 5764] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu") = 0 [pid 5764] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5764] write(3, "1000", 4) = 4 [pid 5764] close(3) = 0 [pid 5764] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5764] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5764] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5764] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5764] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5765 attached [pid 5765] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5764] <... clone3 resumed> => {parent_tid=[82]}, 88) = 82 [pid 5765] <... rseq resumed>) = 0 [pid 5764] rt_sigprocmask(SIG_SETMASK, [], [pid 5765] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5765] <... set_robust_list resumed>) = 0 [pid 5764] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] rt_sigprocmask(SIG_SETMASK, [], [pid 5764] <... futex resumed>) = 0 [pid 5765] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5764] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5765] memfd_create("syzkaller", 0) = 3 [pid 5765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5757] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5756] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5761] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5763] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5757] <... write resumed>) = 16777216 [pid 5757] munmap(0x7f4f650a0000, 16777216 [pid 5759] <... write resumed>) = 16777216 [pid 5759] munmap(0x7f4f650a0000, 16777216 [pid 5756] <... write resumed>) = 16777216 [pid 5756] munmap(0x7f4f650a0000, 16777216 [pid 5757] <... munmap resumed>) = 0 [pid 5757] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5757] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5757] close(3) = 0 [pid 5757] mkdir("./file0", 0777) = 0 [ 239.872635][ T5757] loop2: detected capacity change from 0 to 32768 [pid 5757] mount("/dev/loop2", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5759] <... munmap resumed>) = 0 [pid 5759] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 239.961721][ T5757] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [pid 5759] ioctl(4, LOOP_SET_FD, 3 [pid 5756] <... munmap resumed>) = 0 [pid 5756] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5756] ioctl(4, LOOP_SET_FD, 3 [pid 5759] <... ioctl resumed>) = 0 [pid 5759] close(3) = 0 [pid 5765] <... write resumed>) = 16777216 [pid 5759] mkdir("./file0", 0777) = 0 [pid 5759] mount("/dev/loop3", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 240.022558][ T5757] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 240.031410][ T5759] loop3: detected capacity change from 0 to 32768 [ 240.055666][ T5756] loop4: detected capacity change from 0 to 32768 [pid 5765] munmap(0x7f4f650a0000, 16777216 [pid 5756] <... ioctl resumed>) = 0 [pid 5756] close(3) = 0 [pid 5756] mkdir("./file0", 0777) = 0 [ 240.120739][ T5757] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 240.128285][ T5759] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 240.139561][ T5759] CPU: 0 PID: 5759 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 240.150050][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 240.160152][ T5759] Call Trace: [ 240.163473][ T5759] [ 240.166468][ T5759] dump_stack_lvl+0x136/0x150 [ 240.171220][ T5759] sysfs_warn_dup+0x80/0xa0 [ 240.175776][ T5759] sysfs_create_dir_ns+0x237/0x290 [ 240.180944][ T5759] ? sysfs_create_mount_point+0xb0/0xb0 [ 240.186558][ T5759] ? spin_bug+0x1c0/0x1c0 [ 240.190956][ T5759] ? do_raw_spin_unlock+0x175/0x230 [ 240.196228][ T5759] kobject_add_internal+0x2c9/0x9c0 [ 240.201508][ T5759] ? kfree+0x11/0x150 [ 240.205544][ T5759] kobject_init_and_add+0x101/0x170 [ 240.210801][ T5759] ? kobject_create_and_add+0xf0/0xf0 [ 240.216231][ T5759] ? lockdep_init_map_type+0x21e/0x810 [ 240.221762][ T5759] ? lockdep_hardirqs_on+0x7d/0x100 [ 240.227022][ T5759] ? lockdep_init_map_type+0x21e/0x810 [ 240.227659][ T3750] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 240.232519][ T5759] gfs2_sys_fs_add+0x1d5/0x450 [ 240.240999][ T3750] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 240.244059][ T5759] ? recover_store+0x170/0x170 [ 240.255576][ T5759] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 240.261380][ T5759] gfs2_fill_super+0x1312/0x2aa0 [ 240.266432][ T5759] ? gfs2_reconfigure+0xf90/0xf90 [ 240.271518][ T5759] ? snprintf+0xbf/0x100 [ 240.275823][ T5759] ? vsprintf+0x30/0x30 [ 240.280031][ T5759] ? wait_for_completion_io_timeout+0x20/0x20 [ 240.286163][ T5759] ? set_blocksize+0x2d8/0x370 [ 240.291001][ T5759] get_tree_bdev+0x43e/0x7d0 [ 240.295657][ T5759] ? gfs2_reconfigure+0xf90/0xf90 [ 240.300736][ T5759] gfs2_get_tree+0x4e/0x270 [ 240.305292][ T5759] vfs_get_tree+0x8d/0x350 [ 240.309770][ T5759] path_mount+0x136e/0x1e70 [ 240.314339][ T5759] ? putname+0x102/0x140 [pid 5756] mount("/dev/loop4", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 240.315598][ T3750] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 74ms [ 240.318642][ T5759] ? lockdep_hardirqs_on+0x7d/0x100 [ 240.318685][ T5759] ? finish_automount+0xa30/0xa30 [ 240.326348][ T3750] gfs2: fsid=syz:syz.0: jid=0: Done [ 240.331265][ T5759] ? putname+0x102/0x140 [ 240.345812][ T5759] __x64_sys_mount+0x283/0x300 [ 240.352287][ T5759] ? copy_mnt_ns+0xb30/0xb30 [ 240.354183][ T5757] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 240.356962][ T5759] ? lockdep_hardirqs_on+0x7d/0x100 [pid 5765] <... munmap resumed>) = 0 [pid 5763] <... write resumed>) = 16777216 [pid 5761] <... write resumed>) = 16777216 [pid 5757] <... mount resumed>) = 0 [pid 5765] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5763] munmap(0x7f4f650a0000, 16777216 [pid 5761] munmap(0x7f4f650a0000, 16777216 [pid 5765] <... openat resumed>) = 4 [pid 5757] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5765] ioctl(4, LOOP_SET_FD, 3 [pid 5757] <... openat resumed>) = 3 [ 240.357009][ T5759] ? _raw_spin_unlock_irq+0x2e/0x50 [ 240.357054][ T5759] ? ptrace_notify+0xfe/0x140 [ 240.379430][ T5759] do_syscall_64+0x39/0xb0 [ 240.383899][ T5759] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 240.389869][ T5759] RIP: 0033:0x7f4f6dd11c5a [ 240.394329][ T5759] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 240.398091][ T5765] loop1: detected capacity change from 0 to 32768 [pid 5757] chdir("./file0") = 0 [pid 5757] ioctl(4, LOOP_CLR_FD) = 0 [pid 5757] close(4) = 0 [pid 5757] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5755] <... futex resumed>) = 0 [pid 5757] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5755] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5755] <... futex resumed>) = 0 [ 240.413985][ T5759] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 240.414023][ T5759] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 240.414046][ T5759] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 240.414067][ T5759] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 240.414089][ T5759] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 240.414110][ T5759] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [pid 5757] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5755] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5765] <... ioctl resumed>) = 0 [ 240.457776][ T5757] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [ 240.460899][ T5759] [ 240.481964][ T5756] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 240.497123][ T5756] CPU: 1 PID: 5756 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 240.507617][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 240.517840][ T5756] Call Trace: [ 240.519004][ T5759] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 240.521139][ T5756] [ 240.521152][ T5756] dump_stack_lvl+0x136/0x150 [ 240.535131][ T5759] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 240.537965][ T5756] sysfs_warn_dup+0x80/0xa0 [ 240.538003][ T5756] sysfs_create_dir_ns+0x237/0x290 [ 240.538040][ T5756] ? sysfs_create_mount_point+0xb0/0xb0 [ 240.548551][ T5757] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 240.548551][ T5757] inode = 12 2341 [ 240.548551][ T5757] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 240.549227][ T5756] ? spin_bug+0x1c0/0x1c0 [ 240.553732][ T5757] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 240.558829][ T5756] ? do_raw_spin_unlock+0x175/0x230 [ 240.558893][ T5756] kobject_add_internal+0x2c9/0x9c0 [ 240.558931][ T5756] ? kfree+0x11/0x150 [ 240.564475][ T5757] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5757 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 240.583038][ T5756] kobject_init_and_add+0x101/0x170 [ 240.583078][ T5756] ? kobject_create_and_add+0xf0/0xf0 [ 240.583113][ T5756] ? lockdep_init_map_type+0x21e/0x810 [ 240.583152][ T5756] ? lockdep_hardirqs_on+0x7d/0x100 [ 240.583193][ T5756] ? lockdep_init_map_type+0x21e/0x810 [ 240.583237][ T5756] gfs2_sys_fs_add+0x1d5/0x450 [ 240.588558][ T5757] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 240.596603][ T5756] ? recover_store+0x170/0x170 [ 240.596639][ T5756] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 240.596701][ T5756] gfs2_fill_super+0x1312/0x2aa0 [ 240.602003][ T5757] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 240.607202][ T5756] ? gfs2_reconfigure+0xf90/0xf90 [ 240.607244][ T5756] ? snprintf+0xbf/0x100 [ 240.607283][ T5756] ? vsprintf+0x30/0x30 [ 240.611250][ T5757] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 240.621213][ T5756] ? wait_for_completion_io_timeout+0x20/0x20 [ 240.621263][ T5756] ? set_blocksize+0x2d8/0x370 [ 240.621302][ T5756] get_tree_bdev+0x43e/0x7d0 [ 240.626548][ T5757] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 240.631852][ T5756] ? gfs2_reconfigure+0xf90/0xf90 [ 240.640431][ T5757] gfs2: fsid=syz:syz.0: File system withdrawn [ 240.642493][ T5756] gfs2_get_tree+0x4e/0x270 [ 240.743604][ T5756] vfs_get_tree+0x8d/0x350 [ 240.748064][ T5756] path_mount+0x136e/0x1e70 [ 240.752602][ T5756] ? putname+0x102/0x140 [ 240.756878][ T5756] ? lockdep_hardirqs_on+0x7d/0x100 [ 240.762109][ T5756] ? finish_automount+0xa30/0xa30 [ 240.767170][ T5756] ? putname+0x102/0x140 [ 240.771438][ T5756] __x64_sys_mount+0x283/0x300 [ 240.776235][ T5756] ? copy_mnt_ns+0xb30/0xb30 [ 240.780865][ T5756] ? lockdep_hardirqs_on+0x7d/0x100 [ 240.786098][ T5756] ? _raw_spin_unlock_irq+0x2e/0x50 [ 240.791352][ T5756] ? ptrace_notify+0xfe/0x140 [ 240.796098][ T5756] do_syscall_64+0x39/0xb0 [ 240.800550][ T5756] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 240.806497][ T5756] RIP: 0033:0x7f4f6dd11c5a [ 240.810936][ T5756] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 240.830570][ T5756] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 240.839013][ T5756] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 240.847015][ T5756] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 240.855009][ T5756] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 240.863004][ T5756] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [pid 5765] close(3 [pid 5763] <... munmap resumed>) = 0 [pid 5755] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5765] <... close resumed>) = 0 [pid 5763] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5759] <... mount resumed>) = -1 EEXIST (File exists) [ 240.870996][ T5756] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 240.878992][ T5756] [ 240.894014][ T5757] CPU: 0 PID: 5757 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 240.904623][ T5757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 240.914819][ T5757] Call Trace: [ 240.918137][ T5757] [pid 5755] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5765] mkdir("./file0", 0777 [pid 5763] <... openat resumed>) = 4 [pid 5759] ioctl(4, LOOP_CLR_FD [pid 5755] <... futex resumed>) = 0 [pid 5765] <... mkdir resumed>) = 0 [pid 5763] ioctl(4, LOOP_SET_FD, 3 [pid 5755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5765] mount("/dev/loop1", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5755] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5755] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5755] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} => {parent_tid=[84]}, 88) = 84 [pid 5755] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5755] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5755] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5763] <... ioctl resumed>) = 0 [pid 5763] close(3) = 0 [ 240.921115][ T5757] dump_stack_lvl+0x136/0x150 [ 240.925870][ T5757] gfs2_withdraw+0xb33/0x1060 [ 240.930608][ T5757] ? gfs2_consist_inode_i+0x104/0x150 [ 240.936033][ T5757] gfs2_dirent_scan+0x32a/0x3d0 [ 240.940373][ T5763] loop0: detected capacity change from 0 to 32768 [ 240.940919][ T5757] ? gfs2_dirent_prev+0x210/0x210 [ 240.952622][ T5757] ? gfs2_dirent_prev+0x210/0x210 [ 240.957708][ T5757] gfs2_dirent_search+0x47d/0x580 [ 240.962800][ T5757] ? get_first_leaf+0x190/0x190 [ 240.967719][ T5757] ? gfs2_permission+0x256/0x3e0 [pid 5763] mkdir("./file0", 0777 [pid 5761] <... munmap resumed>) = 0 [pid 5763] <... mkdir resumed>) = 0 [pid 5763] mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5761] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5761] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5761] close(3) = 0 [pid 5761] mkdir("./file0", 0777 [pid 5755] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5755] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6605e000 [pid 5755] mprotect(0x7f4f6605f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5755] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 240.972736][ T5757] gfs2_dir_search+0x8d/0x2d0 [ 240.977476][ T5757] ? gfs2_dir_read+0x14e0/0x14e0 [ 240.982487][ T5757] gfs2_lookupi+0x481/0x640 [ 240.987056][ T5757] ? gfs2_lookup_by_inum+0x100/0x100 [ 240.992494][ T5757] ? __gfs2_lookup+0x83/0x280 [ 240.996572][ T5761] loop5: detected capacity change from 0 to 32768 [ 240.997201][ T5757] ? d_alloc_parallel+0x693/0x1530 [ 241.008775][ T5757] __gfs2_lookup+0x83/0x280 [ 241.013347][ T5757] ? gfs2_lookupi+0x640/0x640 [ 241.018107][ T5757] ? __d_lookup_rcu+0x4e0/0x4e0 [pid 5755] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6607e990, parent_tid=0x7f4f6607e990, exit_signal=0, stack=0x7f4f6605e000, stack_size=0x20300, tls=0x7f4f6607e6c0} => {parent_tid=[85]}, 88) = 85 [pid 5755] rt_sigprocmask(SIG_SETMASK, [], [pid 5761] <... mkdir resumed>) = 0 [pid 5755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5761] mount("/dev/loop5", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5755] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 241.023027][ T5757] ? __d_lookup+0x289/0x4c0 [ 241.027600][ T5757] gfs2_atomic_open+0xde/0x250 [ 241.032437][ T5757] ? __gfs2_lookup+0x280/0x280 [ 241.037266][ T5757] lookup_open.isra.0+0xce2/0x1400 [ 241.041321][ T5756] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 241.042420][ T5757] ? link_path_walk.part.0+0xd60/0xd60 [ 241.042476][ T5757] ? lookup_fast+0x14e/0x520 [ 241.058433][ T5756] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 241.061826][ T5757] path_openat+0x969/0x2710 [ 241.061877][ T5757] ? path_lookupat+0x840/0x840 [ 241.061919][ T5757] ? find_held_lock+0x2d/0x110 [ 241.087112][ T5757] do_filp_open+0x1ba/0x410 [ 241.091654][ T5757] ? may_open_dev+0xf0/0xf0 [ 241.096192][ T5757] ? find_held_lock+0x2d/0x110 [ 241.100979][ T5757] ? do_raw_spin_lock+0x124/0x2b0 [ 241.106032][ T5757] ? spin_bug+0x1c0/0x1c0 [ 241.110404][ T5757] ? _raw_spin_unlock+0x28/0x40 [ 241.115300][ T5757] ? alloc_fd+0x2e4/0x750 [ 241.119666][ T5757] do_sys_openat2+0x160/0x1c0 [ 241.124379][ T5757] ? build_open_flags+0x720/0x720 [ 241.129443][ T5757] ? ptrace_notify+0xfe/0x140 [ 241.134159][ T5757] ? lock_downgrade+0x690/0x690 [ 241.139044][ T5757] __x64_sys_openat+0x143/0x1f0 [ 241.143929][ T5757] ? __ia32_sys_open+0x1c0/0x1c0 [ 241.148907][ T5757] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.154150][ T5757] ? lockdep_hardirqs_on+0x7d/0x100 [ 241.159377][ T5757] ? _raw_spin_unlock_irq+0x2e/0x50 [ 241.164630][ T5757] ? ptrace_notify+0xfe/0x140 [ 241.169434][ T5757] do_syscall_64+0x39/0xb0 [ 241.173872][ T5757] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 241.179811][ T5757] RIP: 0033:0x7f4f6dd107f9 [ 241.184254][ T5757] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 241.203891][ T5757] RSP: 002b:00007f4f6d4c0228 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.212328][ T5757] RAX: ffffffffffffffda RBX: 00007f4f6dda46e8 RCX: 00007f4f6dd107f9 [ 241.220336][ T5757] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000ffffff9c [ 241.228337][ T5757] RBP: 00007f4f6dda46e0 R08: 00007f4f6d4c06c0 R09: 00007f4f6d4c06c0 [ 241.236350][ T5757] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f6dda46ec [ 241.244375][ T5757] R13: 0030656c69662f2e R14: 00007f4f6dd5d740 R15: 00007fffaa0db528 [ 241.252381][ T5757] [ 241.270347][ T5761] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 241.278100][ T5763] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 241.285596][ T5763] CPU: 1 PID: 5763 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 241.296065][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 241.306160][ T5763] Call Trace: [ 241.309469][ T5763] [ 241.312416][ T5763] dump_stack_lvl+0x136/0x150 [ 241.317144][ T5763] sysfs_warn_dup+0x80/0xa0 [ 241.321678][ T5763] sysfs_create_dir_ns+0x237/0x290 [ 241.326818][ T5763] ? sysfs_create_mount_point+0xb0/0xb0 [ 241.332391][ T5763] ? spin_bug+0x1c0/0x1c0 [ 241.336750][ T5763] ? do_raw_spin_unlock+0x175/0x230 [ 241.341986][ T5763] kobject_add_internal+0x2c9/0x9c0 [ 241.347213][ T5763] ? kfree+0x11/0x150 [ 241.351222][ T5763] kobject_init_and_add+0x101/0x170 [ 241.356446][ T5763] ? kobject_create_and_add+0xf0/0xf0 [ 241.361846][ T5763] ? lockdep_init_map_type+0x21e/0x810 [ 241.367339][ T5763] ? lockdep_hardirqs_on+0x7d/0x100 [ 241.372567][ T5763] ? lockdep_init_map_type+0x21e/0x810 [ 241.378063][ T5763] gfs2_sys_fs_add+0x1d5/0x450 [ 241.382862][ T5763] ? recover_store+0x170/0x170 [ 241.387650][ T5763] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 241.393404][ T5763] gfs2_fill_super+0x1312/0x2aa0 [ 241.398376][ T5763] ? gfs2_reconfigure+0xf90/0xf90 [ 241.403430][ T5763] ? snprintf+0xbf/0x100 [ 241.407701][ T5763] ? vsprintf+0x30/0x30 [ 241.411883][ T5763] ? wait_for_completion_io_timeout+0x20/0x20 [ 241.417999][ T5763] ? set_blocksize+0x2d8/0x370 [ 241.422801][ T5763] get_tree_bdev+0x43e/0x7d0 [ 241.427421][ T5763] ? gfs2_reconfigure+0xf90/0xf90 [ 241.432470][ T5763] gfs2_get_tree+0x4e/0x270 [ 241.437003][ T5763] vfs_get_tree+0x8d/0x350 [ 241.441469][ T5763] path_mount+0x136e/0x1e70 [ 241.445998][ T5763] ? putname+0x102/0x140 [ 241.450260][ T5763] ? lockdep_hardirqs_on+0x7d/0x100 [ 241.455489][ T5763] ? finish_automount+0xa30/0xa30 [ 241.460549][ T5763] ? putname+0x102/0x140 [ 241.464815][ T5763] __x64_sys_mount+0x283/0x300 [ 241.469609][ T5763] ? copy_mnt_ns+0xb30/0xb30 [ 241.474233][ T5763] ? lockdep_hardirqs_on+0x7d/0x100 [ 241.479461][ T5763] ? _raw_spin_unlock_irq+0x2e/0x50 [ 241.484692][ T5763] ? ptrace_notify+0xfe/0x140 [ 241.489403][ T5763] do_syscall_64+0x39/0xb0 [ 241.493841][ T5763] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 241.499782][ T5763] RIP: 0033:0x7f4f6dd11c5a [ 241.504214][ T5763] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [pid 5755] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5770 attached ./strace-static-x86_64: Process 5769 attached [pid 5757] <... openat resumed>) = -1 EIO (Input/output error) [pid 5755] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5770] rseq(0x7f4f6607efe0, 0x20, 0, 0x53053053 [pid 5769] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5757] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5770] <... rseq resumed>) = 0 [pid 5769] <... rseq resumed>) = 0 [pid 5757] <... futex resumed>) = 0 [pid 5770] set_robust_list(0x7f4f6607e9a0, 24 [pid 5769] set_robust_list(0x7f4f6609f9a0, 24 [pid 5757] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5770] <... set_robust_list resumed>) = 0 [pid 5769] <... set_robust_list resumed>) = 0 [pid 5770] rt_sigprocmask(SIG_SETMASK, [], [pid 5769] rt_sigprocmask(SIG_SETMASK, [], [pid 5770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5769] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5770] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5769] ioctl(0, VFAT_IOCTL_READDIR_SHORT [pid 5770] <... openat resumed>) = -1 EIO (Input/output error) [pid 5770] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5769] <... ioctl resumed>, 0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5770] <... futex resumed>) = 0 [pid 5769] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5770] futex(0x7f4f6dda4708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5769] <... futex resumed>) = 0 [ 241.523844][ T5763] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 241.532288][ T5763] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 241.540295][ T5763] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 241.548288][ T5763] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 241.556304][ T5763] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 241.564298][ T5763] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 241.572386][ T5763] [pid 5769] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5755] close(3) = 0 [pid 5755] close(4) = -1 EBADF (Bad file descriptor) [pid 5755] close(5) = -1 EBADF (Bad file descriptor) [pid 5755] close(6) = -1 EBADF (Bad file descriptor) [pid 5755] close(7) = -1 EBADF (Bad file descriptor) [pid 5755] close(8) = -1 EBADF (Bad file descriptor) [pid 5755] close(9) = -1 EBADF (Bad file descriptor) [pid 5755] close(10) = -1 EBADF (Bad file descriptor) [pid 5755] close(11) = -1 EBADF (Bad file descriptor) [pid 5755] close(12) = -1 EBADF (Bad file descriptor) [pid 5755] close(13) = -1 EBADF (Bad file descriptor) [pid 5755] close(14) = -1 EBADF (Bad file descriptor) [pid 5755] close(15) = -1 EBADF (Bad file descriptor) [pid 5755] close(16) = -1 EBADF (Bad file descriptor) [pid 5755] close(17) = -1 EBADF (Bad file descriptor) [pid 5755] close(18) = -1 EBADF (Bad file descriptor) [pid 5755] close(19) = -1 EBADF (Bad file descriptor) [pid 5755] close(20) = -1 EBADF (Bad file descriptor) [pid 5755] close(21) = -1 EBADF (Bad file descriptor) [pid 5755] close(22) = -1 EBADF (Bad file descriptor) [pid 5755] close(23) = -1 EBADF (Bad file descriptor) [pid 5755] close(24) = -1 EBADF (Bad file descriptor) [pid 5755] close(25) = -1 EBADF (Bad file descriptor) [ 241.584607][ T5765] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 241.619359][ T5761] CPU: 1 PID: 5761 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 241.629858][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 241.639964][ T5761] Call Trace: [ 241.643298][ T5761] [ 241.646275][ T5761] dump_stack_lvl+0x136/0x150 [ 241.651014][ T5761] sysfs_warn_dup+0x80/0xa0 [ 241.655548][ T5761] sysfs_create_dir_ns+0x237/0x290 [ 241.660689][ T5761] ? sysfs_create_mount_point+0xb0/0xb0 [ 241.666266][ T5761] ? spin_bug+0x1c0/0x1c0 [ 241.670629][ T5761] ? do_raw_spin_unlock+0x175/0x230 [ 241.675862][ T5761] kobject_add_internal+0x2c9/0x9c0 [ 241.681086][ T5761] ? kfree+0x11/0x150 [ 241.685094][ T5761] kobject_init_and_add+0x101/0x170 [ 241.690332][ T5761] ? kobject_create_and_add+0xf0/0xf0 [ 241.695730][ T5761] ? lockdep_init_map_type+0x21e/0x810 [ 241.701221][ T5761] ? lockdep_hardirqs_on+0x7d/0x100 [ 241.706456][ T5761] ? lockdep_init_map_type+0x21e/0x810 [ 241.711949][ T5761] gfs2_sys_fs_add+0x1d5/0x450 [ 241.716741][ T5761] ? recover_store+0x170/0x170 [ 241.721531][ T5761] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 241.727475][ T5761] gfs2_fill_super+0x1312/0x2aa0 [ 241.732444][ T5761] ? gfs2_reconfigure+0xf90/0xf90 [ 241.737493][ T5761] ? snprintf+0xbf/0x100 [ 241.741767][ T5761] ? vsprintf+0x30/0x30 [ 241.745948][ T5761] ? wait_for_completion_io_timeout+0x20/0x20 [ 241.752077][ T5761] ? set_blocksize+0x2d8/0x370 [ 241.756903][ T5761] get_tree_bdev+0x43e/0x7d0 [ 241.761532][ T5761] ? gfs2_reconfigure+0xf90/0xf90 [ 241.766588][ T5761] gfs2_get_tree+0x4e/0x270 [ 241.771123][ T5761] vfs_get_tree+0x8d/0x350 [ 241.775569][ T5761] path_mount+0x136e/0x1e70 [ 241.780108][ T5761] ? putname+0x102/0x140 [ 241.784381][ T5761] ? lockdep_hardirqs_on+0x7d/0x100 [ 241.789612][ T5761] ? finish_automount+0xa30/0xa30 [ 241.794669][ T5761] ? putname+0x102/0x140 [ 241.798938][ T5761] __x64_sys_mount+0x283/0x300 [ 241.803734][ T5761] ? copy_mnt_ns+0xb30/0xb30 [ 241.808360][ T5761] ? lockdep_hardirqs_on+0x7d/0x100 [ 241.813590][ T5761] ? _raw_spin_unlock_irq+0x2e/0x50 [ 241.818845][ T5761] ? ptrace_notify+0xfe/0x140 [ 241.823575][ T5761] do_syscall_64+0x39/0xb0 [ 241.828021][ T5761] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 241.833967][ T5761] RIP: 0033:0x7f4f6dd11c5a [ 241.838411][ T5761] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 241.858060][ T5761] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 241.866507][ T5761] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 241.874501][ T5761] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [pid 5755] close(26) = -1 EBADF (Bad file descriptor) [ 241.882507][ T5761] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 241.890523][ T5761] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 241.898519][ T5761] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 241.906514][ T5761] [ 241.915767][ T5763] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 241.930087][ T5765] CPU: 0 PID: 5765 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 241.940545][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 241.950635][ T5765] Call Trace: [ 241.953946][ T5765] [ 241.956917][ T5765] dump_stack_lvl+0x136/0x150 [ 241.961666][ T5765] sysfs_warn_dup+0x80/0xa0 [ 241.966211][ T5765] sysfs_create_dir_ns+0x237/0x290 [ 241.971371][ T5765] ? sysfs_create_mount_point+0xb0/0xb0 [ 241.976985][ T5765] ? spin_bug+0x1c0/0x1c0 [ 241.981373][ T5765] ? do_raw_spin_unlock+0x175/0x230 [pid 5756] <... mount resumed>) = -1 EEXIST (File exists) [pid 5755] close(27 [pid 5754] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5756] ioctl(4, LOOP_CLR_FD [pid 5755] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5754] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5755] close(28 [pid 5754] <... futex resumed>) = 0 [pid 5755] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5755] close(29 [pid 5754] <... mmap resumed>) = 0x7f4f6607f000 [pid 5755] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5754] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITEwrite to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5755] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5754] <... mprotect resumed>) = 0 [pid 5755] <... write resumed>) = 156 [pid 5754] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5755] exit_group(0 [pid 5754] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5755] <... exit_group resumed>) = ? [pid 5754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} => {parent_tid=[82]}, 88) = 82 [pid 5754] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5754] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 241.986641][ T5765] kobject_add_internal+0x2c9/0x9c0 [ 241.991886][ T5765] ? kfree+0x11/0x150 [ 241.995919][ T5765] kobject_init_and_add+0x101/0x170 [ 241.996398][ T5763] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 242.001143][ T5765] ? kobject_create_and_add+0xf0/0xf0 [ 242.001183][ T5765] ? lockdep_init_map_type+0x21e/0x810 [ 242.018579][ T5765] ? lockdep_hardirqs_on+0x7d/0x100 [ 242.023837][ T5765] ? lockdep_init_map_type+0x21e/0x810 [ 242.029361][ T5765] gfs2_sys_fs_add+0x1d5/0x450 [pid 5754] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5754] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6605e000 [pid 5754] mprotect(0x7f4f6605f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5754] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 242.034195][ T5765] ? recover_store+0x170/0x170 [ 242.039019][ T5765] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 242.044806][ T5765] gfs2_fill_super+0x1312/0x2aa0 [ 242.049801][ T5765] ? gfs2_reconfigure+0xf90/0xf90 [ 242.054894][ T5765] ? snprintf+0xbf/0x100 [ 242.059193][ T5765] ? vsprintf+0x30/0x30 [ 242.063411][ T5765] ? wait_for_completion_io_timeout+0x20/0x20 [ 242.069540][ T5765] ? set_blocksize+0x2d8/0x370 [ 242.074428][ T5765] get_tree_bdev+0x43e/0x7d0 [ 242.079081][ T5765] ? gfs2_reconfigure+0xf90/0xf90 [pid 5754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6607e990, parent_tid=0x7f4f6607e990, exit_signal=0, stack=0x7f4f6605e000, stack_size=0x20300, tls=0x7f4f6607e6c0}./strace-static-x86_64: Process 5775 attached [pid 5775] rseq(0x7f4f6607efe0, 0x20, 0, 0x53053053 [pid 5754] <... clone3 resumed> => {parent_tid=[83]}, 88) = 83 [pid 5775] <... rseq resumed>) = 0 [pid 5754] rt_sigprocmask(SIG_SETMASK, [], [pid 5775] set_robust_list(0x7f4f6607e9a0, 24) = 0 [pid 5754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5775] rt_sigprocmask(SIG_SETMASK, [], [pid 5754] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5754] <... futex resumed>) = 0 [pid 5775] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5754] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5775] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5775] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5754] <... futex resumed>) = 0 [pid 5775] futex(0x7f4f6dda4708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5754] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5754] <... futex resumed>) = 0 [pid 5775] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5754] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5775] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5775] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5754] <... futex resumed>) = 0 [ 242.084177][ T5765] gfs2_get_tree+0x4e/0x270 [ 242.088735][ T5765] vfs_get_tree+0x8d/0x350 [ 242.093207][ T5765] path_mount+0x136e/0x1e70 [ 242.097772][ T5765] ? putname+0x102/0x140 [ 242.102075][ T5765] ? lockdep_hardirqs_on+0x7d/0x100 [ 242.107339][ T5765] ? finish_automount+0xa30/0xa30 [ 242.112434][ T5765] ? putname+0x102/0x140 [ 242.116735][ T5765] __x64_sys_mount+0x283/0x300 [ 242.121563][ T5765] ? copy_mnt_ns+0xb30/0xb30 [ 242.126220][ T5765] ? lockdep_hardirqs_on+0x7d/0x100 [ 242.131476][ T5765] ? _raw_spin_unlock_irq+0x2e/0x50 [pid 5775] futex(0x7f4f6dda4708, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5774 attached [pid 5770] <... futex resumed>) = ? [pid 5769] <... futex resumed>) = ? [pid 5757] <... futex resumed>) = ? [pid 5774] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5770] +++ exited with 0 +++ [pid 5769] +++ exited with 0 +++ [pid 5757] +++ exited with 0 +++ [pid 5755] +++ exited with 0 +++ [pid 5774] <... rseq resumed>) = 0 [ 242.136736][ T5765] ? ptrace_notify+0xfe/0x140 [ 242.141483][ T5765] do_syscall_64+0x39/0xb0 [ 242.141924][ T5761] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 242.145915][ T5765] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 242.145974][ T5765] RIP: 0033:0x7f4f6dd11c5a [pid 5033] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=82, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=73 /* 0.73 s */} --- [pid 5774] set_robust_list(0x7f4f6609f9a0, 24) = 0 [pid 5774] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5774] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5774] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5774] <... futex resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5774] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5033] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5033] umount2("./29/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./29/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./29/cgroup.cpu") = 0 [pid 5033] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./29/binderfs") = 0 [ 242.170203][ T5765] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 242.189872][ T5765] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 242.198349][ T5765] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 242.206376][ T5765] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 242.214403][ T5765] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 242.222433][ T5765] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [pid 5033] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5763] <... mount resumed>) = -1 EEXIST (File exists) [pid 5759] <... ioctl resumed>) = 0 [pid 5758] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5763] ioctl(4, LOOP_CLR_FD [pid 5759] close(4 [pid 5758] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5759] <... close resumed>) = 0 [pid 5759] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5758] <... futex resumed>) = 0 [pid 5765] <... mount resumed>) = -1 EEXIST (File exists) [pid 5761] <... mount resumed>) = -1 EEXIST (File exists) [pid 5759] <... futex resumed>) = 0 [ 242.230464][ T5765] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 242.232430][ T5761] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 242.238465][ T5765] [ 242.252219][ T5765] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 242.268573][ T5765] gfs2: fsid=syz:syz: error -17 adding sysfs files [pid 5765] ioctl(4, LOOP_CLR_FD [pid 5759] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5758] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5761] ioctl(4, LOOP_CLR_FD [pid 5758] <... mmap resumed>) = 0x7f4f6607f000 [pid 5758] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5758] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5758] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5776 attached [pid 5776] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5758] <... clone3 resumed> => {parent_tid=[78]}, 88) = 78 [pid 5776] <... rseq resumed>) = 0 [pid 5758] rt_sigprocmask(SIG_SETMASK, [], [pid 5776] set_robust_list(0x7f4f6609f9a0, 24 [pid 5758] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5776] <... set_robust_list resumed>) = 0 [pid 5758] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5776] rt_sigprocmask(SIG_SETMASK, [], [pid 5758] <... futex resumed>) = 0 [pid 5776] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5758] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5776] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5776] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5758] <... futex resumed>) = 0 [pid 5776] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5758] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5759] <... futex resumed>) = 0 [pid 5758] <... futex resumed>) = 1 [pid 5759] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5758] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5759] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5759] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5758] <... futex resumed>) = 0 [pid 5759] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5758] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5758] <... futex resumed>) = 0 [pid 5759] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5758] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5759] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5759] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5758] <... futex resumed>) = 0 [pid 5759] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5758] close(3) = 0 [pid 5758] close(4) = -1 EBADF (Bad file descriptor) [pid 5758] close(5) = -1 EBADF (Bad file descriptor) [pid 5758] close(6) = -1 EBADF (Bad file descriptor) [pid 5758] close(7) = -1 EBADF (Bad file descriptor) [pid 5758] close(8) = -1 EBADF (Bad file descriptor) [pid 5758] close(9) = -1 EBADF (Bad file descriptor) [pid 5758] close(10) = -1 EBADF (Bad file descriptor) [pid 5758] close(11) = -1 EBADF (Bad file descriptor) [pid 5760] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5758] close(12 [pid 5760] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5760] <... futex resumed>) = 0 [pid 5758] close(13 [pid 5760] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5760] <... mmap resumed>) = 0x7f4f6607f000 [pid 5758] close(14 [pid 5760] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5760] <... mprotect resumed>) = 0 [pid 5758] close(15 [pid 5760] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5760] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5758] close(16) = -1 EBADF (Bad file descriptor) [pid 5758] close(17) = -1 EBADF (Bad file descriptor) [pid 5758] close(18 [pid 5760] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5778 attached [pid 5758] close(19 [pid 5778] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5760] <... clone3 resumed> => {parent_tid=[87]}, 88) = 87 [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5778] <... rseq resumed>) = 0 [pid 5760] rt_sigprocmask(SIG_SETMASK, [], [pid 5758] close(20 [pid 5778] set_robust_list(0x7f4f6609f9a0, 24 [pid 5760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5778] <... set_robust_list resumed>) = 0 [pid 5760] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5758] close(21 [pid 5778] rt_sigprocmask(SIG_SETMASK, [], [pid 5760] <... futex resumed>) = 0 [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5760] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5758] close(22 [pid 5778] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5778] <... openat resumed>) = 3 [pid 5758] close(23 [pid 5778] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5778] <... futex resumed>) = 1 [pid 5760] <... futex resumed>) = 0 [pid 5758] close(24 [pid 5778] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5760] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5778] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5760] <... futex resumed>) = 0 [pid 5758] close(25 [pid 5778] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5760] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5778] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5758] close(26 [pid 5778] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5778] <... futex resumed>) = 1 [pid 5760] <... futex resumed>) = 0 [pid 5758] close(27 [pid 5778] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5760] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5758] close(28 [pid 5778] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5760] <... futex resumed>) = 0 [pid 5758] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5778] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5760] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5758] close(29) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5758] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5758] exit_group(0 [pid 5776] <... futex resumed>) = ? [pid 5759] <... futex resumed>) = ? [pid 5758] <... exit_group resumed>) = ? [pid 5776] +++ exited with 0 +++ [pid 5759] +++ exited with 0 +++ [pid 5758] +++ exited with 0 +++ [pid 5778] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5030] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=66 /* 0.66 s */} --- [pid 5030] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5030] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5030] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5778] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] getdents64(3, [pid 5778] <... futex resumed>) = 1 [pid 5760] <... futex resumed>) = 0 [pid 5030] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5778] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] umount2("./27/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./27/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] unlink("./27/cgroup.cpu") = 0 [pid 5030] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] unlink("./27/binderfs") = 0 [pid 5030] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5030] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5030] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5030] close(4) = 0 [pid 5030] rmdir("./27/file0") = 0 [pid 5756] <... ioctl resumed>) = 0 [pid 5030] umount2("./27/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./27/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] unlink("./27/cgroup") = 0 [pid 5030] umount2("./27/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] unlink("./27/cgroup.net") = 0 [pid 5756] close(4 [pid 5030] getdents64(3, [pid 5762] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5756] <... close resumed>) = 0 [pid 5030] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5762] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5756] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5754] close(3 [pid 5030] close(3 [pid 5762] <... futex resumed>) = 0 [pid 5756] <... futex resumed>) = 0 [pid 5754] <... close resumed>) = 0 [pid 5030] <... close resumed>) = 0 [pid 5762] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5756] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5754] close(4 [pid 5030] rmdir("./27" [pid 5762] <... mmap resumed>) = 0x7f4f6607f000 [pid 5754] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] <... rmdir resumed>) = 0 [pid 5762] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5754] close(5 [pid 5030] mkdir("./28", 0777 [pid 5762] <... mprotect resumed>) = 0 [pid 5754] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] <... mkdir resumed>) = 0 [pid 5762] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5754] close(6 [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5762] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5754] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] <... openat resumed>) = 3 [pid 5762] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5754] close(7 [pid 5030] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5780 attached [pid 5754] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5780] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5762] <... clone3 resumed> => {parent_tid=[89]}, 88) = 89 [pid 5754] close(8 [pid 5030] close(3 [pid 5780] <... rseq resumed>) = 0 [pid 5762] rt_sigprocmask(SIG_SETMASK, [], [pid 5754] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] <... close resumed>) = 0 [pid 5780] set_robust_list(0x7f4f6609f9a0, 24 [pid 5762] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5754] close(9 [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5781 attached [pid 5780] <... set_robust_list resumed>) = 0 [pid 5762] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5754] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5781] set_robust_list(0x55555654e6a0, 24 [pid 5780] rt_sigprocmask(SIG_SETMASK, [], [pid 5762] <... futex resumed>) = 0 [pid 5754] close(10 [pid 5031] kill(-80, SIGKILL [pid 5030] <... clone resumed>, child_tidptr=0x55555654e690) = 79 [pid 5781] <... set_robust_list resumed>) = 0 [pid 5780] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5775] <... futex resumed>) = ? [pid 5774] <... futex resumed>) = ? [pid 5762] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5756] <... futex resumed>) = ? [pid 5754] <... close resumed>) = ? [pid 5031] <... kill resumed>) = 0 [pid 5781] chdir("./28" [pid 5780] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5775] +++ killed by SIGKILL +++ [pid 5774] +++ killed by SIGKILL +++ [pid 5756] +++ killed by SIGKILL +++ [pid 5754] +++ killed by SIGKILL +++ [pid 5031] kill(80, SIGKILL [pid 5781] <... chdir resumed>) = 0 [pid 5780] <... openat resumed>) = 3 [pid 5031] <... kill resumed>) = 0 [pid 5781] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5780] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=80, si_uid=0, si_status=SIGKILL, si_utime=4 /* 0.04 s */, si_stime=60 /* 0.60 s */} --- [pid 5781] <... prctl resumed>) = 0 [pid 5780] <... futex resumed>) = 1 [pid 5762] <... futex resumed>) = 0 [pid 5781] setpgid(0, 0 [pid 5780] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5762] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5781] <... setpgid resumed>) = 0 [pid 5780] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5762] <... futex resumed>) = 0 [pid 5781] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5780] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5762] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5781] <... symlink resumed>) = 0 [pid 5780] <... futex resumed>) = 0 [pid 5762] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5781] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5780] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5762] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5781] <... symlink resumed>) = 0 [pid 5780] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5762] <... futex resumed>) = 0 [pid 5781] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5780] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5762] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] <... openat resumed>) = 3 [pid 5781] <... symlink resumed>) = 0 [pid 5780] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5031] newfstatat(3, "", [pid 5781] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5780] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5781] <... openat resumed>) = 3 [pid 5780] <... futex resumed>) = 1 [pid 5762] <... futex resumed>) = 0 [pid 5031] getdents64(3, [pid 5781] write(3, "1000", 4 [pid 5780] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5781] <... write resumed>) = 4 [pid 5031] umount2("./27/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5781] close(3 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5781] <... close resumed>) = 0 [pid 5031] newfstatat(AT_FDCWD, "./27/cgroup.cpu", [pid 5781] symlink("/dev/binderfs", "./binderfs" [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5781] <... symlink resumed>) = 0 [pid 5031] unlink("./27/cgroup.cpu" [pid 5781] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5781] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5031] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5781] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5781] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5031] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5781] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5781] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5031] unlink("./27/binderfs" [pid 5781] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5764] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5764] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5764] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 ./strace-static-x86_64: Process 5782 attached [pid 5031] <... unlink resumed>) = 0 [pid 5764] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5782] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5781] <... clone3 resumed> => {parent_tid=[80]}, 88) = 80 [pid 5764] <... mprotect resumed>) = 0 [pid 5782] <... rseq resumed>) = 0 [pid 5781] rt_sigprocmask(SIG_SETMASK, [], [pid 5764] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5782] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5781] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5764] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5782] <... set_robust_list resumed>) = 0 [pid 5781] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5031] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5782] rt_sigprocmask(SIG_SETMASK, [], [pid 5781] <... futex resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5783 attached [pid 5782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5781] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5031] newfstatat(AT_FDCWD, "./27/file0", [pid 5783] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5782] memfd_create("syzkaller", 0 [pid 5764] <... clone3 resumed> => {parent_tid=[83]}, 88) = 83 [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5783] <... rseq resumed>) = 0 [pid 5782] <... memfd_create resumed>) = 3 [pid 5764] rt_sigprocmask(SIG_SETMASK, [], [pid 5031] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5783] set_robust_list(0x7f4f6609f9a0, 24 [pid 5782] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5783] <... set_robust_list resumed>) = 0 [pid 5782] <... mmap resumed>) = 0x7f4f650a0000 [pid 5764] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5783] rt_sigprocmask(SIG_SETMASK, [], [pid 5765] <... ioctl resumed>) = 0 [pid 5764] <... futex resumed>) = 0 [pid 5783] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5764] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] <... openat resumed>) = 4 [pid 5783] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5031] newfstatat(4, "", [pid 5783] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5764] <... futex resumed>) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5783] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5764] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] getdents64(4, [pid 5783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5764] <... futex resumed>) = 0 [pid 5783] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5764] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5783] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5031] getdents64(4, [pid 5783] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5764] <... futex resumed>) = 0 [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5783] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5765] close(4 [pid 5764] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] close(4 [pid 5783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5765] <... close resumed>) = 0 [pid 5764] <... futex resumed>) = 0 [pid 5031] <... close resumed>) = 0 [pid 5783] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5765] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] rmdir("./27/file0" [pid 5783] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5765] <... futex resumed>) = 0 [pid 5783] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... rmdir resumed>) = 0 [pid 5783] <... futex resumed>) = 1 [pid 5765] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5764] <... futex resumed>) = 0 [pid 5033] <... umount2 resumed>) = 0 [pid 5783] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5764] close(3 [pid 5031] umount2("./27/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5764] <... close resumed>) = 0 [pid 5033] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5764] close(4 [pid 5031] newfstatat(AT_FDCWD, "./27/cgroup", [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5764] close(5 [pid 5033] newfstatat(AT_FDCWD, "./29/file0", [pid 5031] unlink("./27/cgroup" [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5764] close(6 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] umount2("./27/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5764] close(7 [pid 5763] <... ioctl resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5763] close(4 [pid 5033] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5031] newfstatat(AT_FDCWD, "./27/cgroup.net", [pid 5764] close(8 [pid 5033] <... openat resumed>) = 4 [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5763] <... close resumed>) = 0 [pid 5033] newfstatat(4, "", [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5764] close(9 [pid 5763] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] unlink("./27/cgroup.net" [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5763] <... futex resumed>) = 0 [pid 5762] close(3 [pid 5033] getdents64(4, [pid 5764] close(10 [pid 5763] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5762] <... close resumed>) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5031] getdents64(3, [pid 5762] close(4 [pid 5764] close(11 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] getdents64(4, [pid 5031] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5762] close(5 [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5031] close(3 [pid 5764] close(12 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] close(4 [pid 5031] <... close resumed>) = 0 [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5762] close(6 [pid 5033] <... close resumed>) = 0 [pid 5031] rmdir("./27" [pid 5764] close(13 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] rmdir("./29/file0" [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5762] close(7 [pid 5031] <... rmdir resumed>) = 0 [pid 5764] close(14 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... rmdir resumed>) = 0 [pid 5031] mkdir("./28", 0777 [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5762] close(8 [pid 5033] umount2("./29/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5764] close(15 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... mkdir resumed>) = 0 [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5762] close(9 [pid 5033] newfstatat(AT_FDCWD, "./29/cgroup", [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5764] close(16 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5762] close(10 [pid 5031] <... openat resumed>) = 3 [pid 5764] close(17 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] unlink("./29/cgroup" [pid 5031] ioctl(3, LOOP_CLR_FD [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5762] close(11 [pid 5764] close(18) = -1 EBADF (Bad file descriptor) [pid 5033] <... unlink resumed>) = 0 [pid 5764] close(19 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5033] umount2("./29/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5762] close(12 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] close(3 [pid 5764] close(20) = -1 EBADF (Bad file descriptor) [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] newfstatat(AT_FDCWD, "./29/cgroup.net", [pid 5031] <... close resumed>) = 0 [pid 5764] close(21) = -1 EBADF (Bad file descriptor) [pid 5764] close(22) = -1 EBADF (Bad file descriptor) [pid 5764] close(23) = -1 EBADF (Bad file descriptor) [pid 5764] close(24) = -1 EBADF (Bad file descriptor) [pid 5764] close(25) = -1 EBADF (Bad file descriptor) [pid 5764] close(26) = -1 EBADF (Bad file descriptor) [pid 5764] close(27 [pid 5762] close(13 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5784 attached [pid 5764] close(28 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] unlink("./29/cgroup.net" [pid 5764] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5764] close(29) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5764] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5762] close(14 [pid 5764] <... write resumed>) = 156 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... unlink resumed>) = 0 [pid 5764] exit_group(0 [pid 5762] close(15 [pid 5033] getdents64(3, [pid 5031] <... clone resumed>, child_tidptr=0x55555654e690) = 84 [pid 5784] set_robust_list(0x55555654e6a0, 24 [pid 5783] <... futex resumed>) = ? [pid 5765] <... futex resumed>) = ? [pid 5764] <... exit_group resumed>) = ? [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5784] <... set_robust_list resumed>) = 0 [pid 5783] +++ exited with 0 +++ [pid 5765] +++ exited with 0 +++ [pid 5764] +++ exited with 0 +++ [pid 5762] close(16) = -1 EBADF (Bad file descriptor) [pid 5762] close(17) = -1 EBADF (Bad file descriptor) [pid 5762] close(18) = -1 EBADF (Bad file descriptor) [pid 5762] close(19) = -1 EBADF (Bad file descriptor) [pid 5762] close(20) = -1 EBADF (Bad file descriptor) [pid 5762] close(21 [pid 5033] close(3 [pid 5032] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=81, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=60 /* 0.60 s */} --- [pid 5784] chdir("./28" [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... close resumed>) = 0 [pid 5784] <... chdir resumed>) = 0 [pid 5762] close(22) = -1 EBADF (Bad file descriptor) [pid 5033] rmdir("./29" [pid 5784] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5762] close(23 [pid 5784] <... prctl resumed>) = 0 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... rmdir resumed>) = 0 [pid 5032] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5784] setpgid(0, 0 [pid 5762] close(24 [pid 5033] mkdir("./30", 0777 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5784] <... setpgid resumed>) = 0 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5784] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5762] close(25 [pid 5033] <... mkdir resumed>) = 0 [pid 5032] <... openat resumed>) = 3 [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5784] <... symlink resumed>) = 0 [pid 5762] close(26 [pid 5032] newfstatat(3, "", [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5784] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] <... openat resumed>) = 3 [pid 5784] <... symlink resumed>) = 0 [pid 5762] close(27 [pid 5032] getdents64(3, [pid 5033] ioctl(3, LOOP_CLR_FD [pid 5784] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5032] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5762] close(28) = -1 EBADF (Bad file descriptor) [pid 5032] umount2("./28/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOWwrite to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5784] <... symlink resumed>) = 0 [pid 5762] close(29 [pid 5033] close(3 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5762] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] <... close resumed>) = 0 [pid 5032] newfstatat(AT_FDCWD, "./28/cgroup.cpu", [pid 5762] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5784] <... openat resumed>) = 3 [pid 5762] <... write resumed>) = 156 [pid 5033] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5785 attached [pid 5784] write(3, "1000", 4 [pid 5762] exit_group(0 [pid 5032] unlink("./28/cgroup.cpu" [pid 5785] set_robust_list(0x55555654e6a0, 24 [pid 5784] <... write resumed>) = 4 [pid 5780] <... futex resumed>) = ? [pid 5763] <... futex resumed>) = ? [pid 5762] <... exit_group resumed>) = ? [pid 5761] <... ioctl resumed>) = 0 [pid 5033] <... clone resumed>, child_tidptr=0x55555654e690) = 86 [pid 5032] <... unlink resumed>) = 0 [pid 5785] <... set_robust_list resumed>) = 0 [pid 5784] close(3 [pid 5780] +++ exited with 0 +++ [pid 5763] +++ exited with 0 +++ [pid 5762] +++ exited with 0 +++ [pid 5032] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=60 /* 0.60 s */} --- [pid 5785] chdir("./30" [pid 5784] <... close resumed>) = 0 [pid 5029] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5785] <... chdir resumed>) = 0 [pid 5784] symlink("/dev/binderfs", "./binderfs" [pid 5761] close(4 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5785] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5029] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5784] <... symlink resumed>) = 0 [pid 5029] getdents64(3, [pid 5785] <... prctl resumed>) = 0 [pid 5784] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5761] <... close resumed>) = 0 [pid 5032] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5029] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5785] setpgid(0, 0 [pid 5784] <... futex resumed>) = 0 [pid 5761] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] umount2("./27/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5029] newfstatat(AT_FDCWD, "./27/cgroup.cpu", [pid 5785] <... setpgid resumed>) = 0 [pid 5761] <... futex resumed>) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./27/cgroup.cpu" [pid 5784] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5029] <... unlink resumed>) = 0 [pid 5785] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5784] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5761] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5760] close(3 [pid 5032] unlink("./28/binderfs" [pid 5029] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5760] <... close resumed>) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5784] <... mprotect resumed>) = 0 [pid 5029] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... unlink resumed>) = 0 [pid 5760] close(4 [pid 5029] unlink("./27/binderfs" [pid 5785] <... symlink resumed>) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... unlink resumed>) = 0 [pid 5785] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5784] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5760] close(5 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5785] <... symlink resumed>) = 0 [pid 5784] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5785] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5760] close(6 [pid 5032] newfstatat(AT_FDCWD, "./28/file0", [pid 5029] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5786 attached [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5785] <... symlink resumed>) = 0 [pid 5760] close(7 [pid 5029] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5786] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5784] <... clone3 resumed> => {parent_tid=[85]}, 88) = 85 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... openat resumed>) = 4 [pid 5786] <... rseq resumed>) = 0 [pid 5785] <... openat resumed>) = 3 [pid 5784] rt_sigprocmask(SIG_SETMASK, [], [pid 5760] close(8 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(4, "", [pid 5786] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5785] write(3, "1000", 4 [pid 5784] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] getdents64(4, [pid 5786] <... set_robust_list resumed>) = 0 [pid 5785] <... write resumed>) = 4 [pid 5784] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5760] close(9 [pid 5032] <... openat resumed>) = 4 [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5029] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5029] close(4 [pid 5786] rt_sigprocmask(SIG_SETMASK, [], [pid 5785] close(3 [pid 5784] <... futex resumed>) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] newfstatat(4, "", [pid 5029] <... close resumed>) = 0 [pid 5786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5785] <... close resumed>) = 0 [pid 5784] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5760] close(10 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] rmdir("./27/file0") = 0 [pid 5786] memfd_create("syzkaller", 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] symlink("/dev/binderfs", "./binderfs" [pid 5029] umount2("./27/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5786] <... memfd_create resumed>) = 3 [pid 5785] <... symlink resumed>) = 0 [pid 5760] close(11 [pid 5032] getdents64(4, [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5786] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5029] newfstatat(AT_FDCWD, "./27/cgroup", [pid 5785] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5786] <... mmap resumed>) = 0x7f4f650a0000 [pid 5785] <... futex resumed>) = 0 [pid 5760] close(12 [pid 5032] getdents64(4, [pid 5029] unlink("./27/cgroup" [pid 5785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5029] <... unlink resumed>) = 0 [pid 5029] umount2("./27/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./27/cgroup.net") = 0 [pid 5029] getdents64(3, [pid 5760] close(13 [pid 5032] close(4 [pid 5029] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5785] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] close(3) = 0 [pid 5785] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5760] close(14 [pid 5032] <... close resumed>) = 0 [pid 5029] rmdir("./27" [pid 5785] <... mprotect resumed>) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] rmdir("./28/file0" [pid 5029] <... rmdir resumed>) = 0 [pid 5029] mkdir("./28", 0777 [pid 5785] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5760] close(15 [pid 5032] <... rmdir resumed>) = 0 [pid 5029] <... mkdir resumed>) = 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5029] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5029] close(3) = 0 [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5787 attached [pid 5785] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] umount2("./28/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5787] set_robust_list(0x55555654e6a0, 24 [pid 5785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5760] close(16 [pid 5029] <... clone resumed>, child_tidptr=0x55555654e690) = 90 ./strace-static-x86_64: Process 5788 attached [pid 5787] <... set_robust_list resumed>) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5788] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5787] chdir("./28" [pid 5785] <... clone3 resumed> => {parent_tid=[87]}, 88) = 87 [pid 5788] <... rseq resumed>) = 0 [pid 5787] <... chdir resumed>) = 0 [pid 5785] rt_sigprocmask(SIG_SETMASK, [], [pid 5760] close(17 [pid 5032] newfstatat(AT_FDCWD, "./28/cgroup", [pid 5788] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5787] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5788] <... set_robust_list resumed>) = 0 [pid 5787] <... prctl resumed>) = 0 [pid 5785] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5760] close(18 [pid 5788] rt_sigprocmask(SIG_SETMASK, [], [pid 5787] setpgid(0, 0 [pid 5785] <... futex resumed>) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] unlink("./28/cgroup" [pid 5788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5787] <... setpgid resumed>) = 0 [pid 5785] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5760] close(19 [pid 5787] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5032] <... unlink resumed>) = 0 [pid 5788] memfd_create("syzkaller", 0 [pid 5787] <... symlink resumed>) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5787] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5787] write(3, "1000", 4) = 4 [pid 5787] close(3) = 0 [pid 5787] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5787] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5787] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5760] close(20 [pid 5032] umount2("./28/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5788] <... memfd_create resumed>) = 3 [pid 5787] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5787] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5760] close(21 [pid 5032] newfstatat(AT_FDCWD, "./28/cgroup.net", [pid 5788] <... mmap resumed>) = 0x7f4f650a0000 [pid 5787] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5789 attached [pid 5760] close(22 [pid 5789] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5787] <... clone3 resumed> => {parent_tid=[91]}, 88) = 91 [pid 5032] unlink("./28/cgroup.net" [pid 5789] <... rseq resumed>) = 0 [pid 5787] rt_sigprocmask(SIG_SETMASK, [], [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5789] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5789] <... set_robust_list resumed>) = 0 [pid 5787] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5760] close(23 [pid 5789] rt_sigprocmask(SIG_SETMASK, [], [pid 5787] <... futex resumed>) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5787] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5760] close(24 [pid 5789] memfd_create("syzkaller", 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... unlink resumed>) = 0 [pid 5789] <... memfd_create resumed>) = 3 [pid 5760] close(25 [pid 5032] getdents64(3, [pid 5789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5789] <... mmap resumed>) = 0x7f4f650a0000 [pid 5760] close(26 [pid 5032] close(3 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... close resumed>) = 0 [pid 5760] close(27 [pid 5032] rmdir("./28" [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5760] close(28 [pid 5032] <... rmdir resumed>) = 0 [pid 5760] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] mkdir("./29", 0777 [pid 5760] close(29) = -1 EBADF (Bad file descriptor) [pid 5032] <... mkdir resumed>) = 0 [pid 5760] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5032] openat(AT_FDCWD, "/dev/loop1", O_RDWRwrite to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5760] <... write resumed>) = 156 [pid 5032] <... openat resumed>) = 3 [pid 5760] exit_group(0 [pid 5032] ioctl(3, LOOP_CLR_FD [pid 5778] <... futex resumed>) = ? [pid 5761] <... futex resumed>) = ? [pid 5760] <... exit_group resumed>) = ? [pid 5032] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5778] +++ exited with 0 +++ [pid 5032] close(3 [pid 5761] +++ exited with 0 +++ [pid 5760] +++ exited with 0 +++ [pid 5032] <... close resumed>) = 0 [pid 5034] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=85, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=70 /* 0.70 s */} --- [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5034] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5034] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5034] umount2("./28/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5790 attached [pid 5034] unlink("./28/cgroup.cpu" [pid 5790] set_robust_list(0x55555654e6a0, 24 [pid 5034] <... unlink resumed>) = 0 [pid 5032] <... clone resumed>, child_tidptr=0x55555654e690) = 84 [pid 5034] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5790] <... set_robust_list resumed>) = 0 [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./28/binderfs" [pid 5790] chdir("./29" [pid 5034] <... unlink resumed>) = 0 [pid 5034] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5790] <... chdir resumed>) = 0 [pid 5034] newfstatat(AT_FDCWD, "./28/file0", [pid 5790] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5790] <... prctl resumed>) = 0 [pid 5034] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5790] setpgid(0, 0 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5790] <... setpgid resumed>) = 0 [pid 5034] newfstatat(4, "", [pid 5790] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5790] <... symlink resumed>) = 0 [pid 5034] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5034] close(4) = 0 [pid 5034] rmdir("./28/file0") = 0 [pid 5034] umount2("./28/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5790] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5034] newfstatat(AT_FDCWD, "./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./28/cgroup" [pid 5790] <... symlink resumed>) = 0 [pid 5034] <... unlink resumed>) = 0 [pid 5790] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5034] umount2("./28/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5790] <... symlink resumed>) = 0 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5034] newfstatat(AT_FDCWD, "./28/cgroup.net", [pid 5790] <... openat resumed>) = 3 [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5790] write(3, "1000", 4 [pid 5034] unlink("./28/cgroup.net" [pid 5790] <... write resumed>) = 4 [pid 5034] <... unlink resumed>) = 0 [pid 5790] close(3 [pid 5034] getdents64(3, [pid 5790] <... close resumed>) = 0 [pid 5034] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5790] symlink("/dev/binderfs", "./binderfs" [pid 5034] close(3) = 0 [pid 5034] rmdir("./28" [pid 5790] <... symlink resumed>) = 0 [pid 5034] <... rmdir resumed>) = 0 [pid 5790] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] mkdir("./29", 0777 [pid 5790] <... futex resumed>) = 0 [pid 5034] <... mkdir resumed>) = 0 [pid 5790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5034] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5790] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5034] <... openat resumed>) = 3 [pid 5790] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5034] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5034] close(3 [pid 5790] <... mprotect resumed>) = 0 [pid 5034] <... close resumed>) = 0 [pid 5034] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5791 attached [pid 5790] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5791] set_robust_list(0x55555654e6a0, 24 [pid 5790] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5791] <... set_robust_list resumed>) = 0 [pid 5790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5792 attached [pid 5791] chdir("./29" [pid 5034] <... clone resumed>, child_tidptr=0x55555654e690) = 88 [pid 5792] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053) = 0 [pid 5792] set_robust_list(0x7f4f6d4c09a0, 24) = 0 [pid 5792] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5792] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5791] <... chdir resumed>) = 0 [pid 5790] <... clone3 resumed> => {parent_tid=[85]}, 88) = 85 [pid 5791] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5790] rt_sigprocmask(SIG_SETMASK, [], [pid 5791] <... prctl resumed>) = 0 [pid 5791] setpgid(0, 0 [pid 5790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5791] <... setpgid resumed>) = 0 [pid 5790] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5792] <... futex resumed>) = 0 [pid 5790] <... futex resumed>) = 1 [pid 5791] <... symlink resumed>) = 0 [pid 5790] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5792] memfd_create("syzkaller", 0 [pid 5791] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu") = 0 [pid 5792] <... memfd_create resumed>) = 3 [pid 5791] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5791] <... symlink resumed>) = 0 [pid 5792] <... mmap resumed>) = 0x7f4f650a0000 [pid 5791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5791] write(3, "1000", 4 [pid 5782] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5791] <... write resumed>) = 4 [pid 5791] close(3) = 0 [pid 5791] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5791] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5791] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5791] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5791] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5793 attached [pid 5793] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5791] <... clone3 resumed> => {parent_tid=[89]}, 88) = 89 [pid 5793] <... rseq resumed>) = 0 [pid 5793] set_robust_list(0x7f4f6d4c09a0, 24) = 0 [pid 5791] rt_sigprocmask(SIG_SETMASK, [], [pid 5793] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5793] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5791] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5791] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] <... futex resumed>) = 0 [pid 5791] <... futex resumed>) = 1 [pid 5793] memfd_create("syzkaller", 0 [pid 5791] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5793] <... memfd_create resumed>) = 3 [pid 5793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5786] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5782] <... write resumed>) = 16777216 [pid 5792] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5782] munmap(0x7f4f650a0000, 16777216 [pid 5793] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5782] <... munmap resumed>) = 0 [pid 5782] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5782] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5782] close(3) = 0 [pid 5782] mkdir("./file0", 0777) = 0 [ 244.459308][ T5782] loop3: detected capacity change from 0 to 32768 [ 244.531282][ T5782] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 244.552598][ T5782] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 244.607930][ T5782] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 244.667053][ T917] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 244.673908][ T917] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [pid 5782] mount("/dev/loop3", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5786] <... write resumed>) = 16777216 [pid 5786] munmap(0x7f4f650a0000, 16777216 [pid 5788] <... write resumed>) = 16777216 [ 244.895212][ T917] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 221ms [ 244.931839][ T917] gfs2: fsid=syz:syz.0: jid=0: Done [pid 5788] munmap(0x7f4f650a0000, 16777216 [pid 5782] <... mount resumed>) = 0 [pid 5782] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5782] chdir("./file0") = 0 [pid 5782] ioctl(4, LOOP_CLR_FD) = 0 [pid 5782] close(4) = 0 [ 244.948514][ T5782] gfs2: fsid=syz:syz.0: first mount done, others may mount [pid 5782] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5781] <... futex resumed>) = 0 [pid 5782] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5781] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5786] <... munmap resumed>) = 0 [pid 5781] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5786] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5792] <... write resumed>) = 16777216 [pid 5792] munmap(0x7f4f650a0000, 16777216 [ 245.027373][ T5782] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [ 245.056217][ T5782] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 245.056217][ T5782] inode = 12 2341 [ 245.056217][ T5782] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [pid 5786] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5788] <... munmap resumed>) = 0 [pid 5786] close(3 [pid 5788] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5786] <... close resumed>) = 0 [pid 5786] mkdir("./file0", 0777 [pid 5788] <... openat resumed>) = 4 [pid 5786] <... mkdir resumed>) = 0 [pid 5788] ioctl(4, LOOP_SET_FD, 3 [ 245.086405][ T5786] loop4: detected capacity change from 0 to 32768 [ 245.108412][ T5782] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 245.122849][ T5788] loop2: detected capacity change from 0 to 32768 [pid 5786] mount("/dev/loop4", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5788] <... ioctl resumed>) = 0 [pid 5788] close(3) = 0 [pid 5788] mkdir("./file0", 0777) = 0 [ 245.141061][ T5782] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5782 [syz-executor676] __gfs2_lookup+0x83/0x280 [pid 5788] mount("/dev/loop2", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5781] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 245.184502][ T5782] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 245.194814][ T5786] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 245.202934][ T5786] CPU: 0 PID: 5786 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 245.214536][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 245.224645][ T5786] Call Trace: [ 245.227963][ T5786] [ 245.230930][ T5786] dump_stack_lvl+0x136/0x150 [ 245.235681][ T5786] sysfs_warn_dup+0x80/0xa0 [ 245.240246][ T5786] sysfs_create_dir_ns+0x237/0x290 [ 245.245414][ T5786] ? sysfs_create_mount_point+0xb0/0xb0 [ 245.251021][ T5786] ? spin_bug+0x1c0/0x1c0 [ 245.255413][ T5786] ? do_raw_spin_unlock+0x175/0x230 [ 245.260673][ T5786] kobject_add_internal+0x2c9/0x9c0 [ 245.265931][ T5786] ? kfree+0x11/0x150 [ 245.269981][ T5786] kobject_init_and_add+0x101/0x170 [ 245.275318][ T5786] ? kobject_create_and_add+0xf0/0xf0 [ 245.280745][ T5786] ? lockdep_init_map_type+0x21e/0x810 [ 245.286269][ T5786] ? lockdep_hardirqs_on+0x7d/0x100 [ 245.291528][ T5786] ? lockdep_init_map_type+0x21e/0x810 [ 245.297044][ T5786] gfs2_sys_fs_add+0x1d5/0x450 [ 245.301858][ T5786] ? recover_store+0x170/0x170 [ 245.306761][ T5786] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 245.312547][ T5786] gfs2_fill_super+0x1312/0x2aa0 [ 245.317558][ T5786] ? gfs2_reconfigure+0xf90/0xf90 [ 245.322648][ T5786] ? snprintf+0xbf/0x100 [ 245.326948][ T5786] ? vsprintf+0x30/0x30 [ 245.331180][ T5786] ? wait_for_completion_io_timeout+0x20/0x20 [ 245.337335][ T5786] ? set_blocksize+0x2d8/0x370 [ 245.342185][ T5786] get_tree_bdev+0x43e/0x7d0 [ 245.346834][ T5786] ? gfs2_reconfigure+0xf90/0xf90 [ 245.351915][ T5786] gfs2_get_tree+0x4e/0x270 [ 245.356484][ T5786] vfs_get_tree+0x8d/0x350 [ 245.360955][ T5786] path_mount+0x136e/0x1e70 [ 245.365518][ T5786] ? putname+0x102/0x140 [ 245.369818][ T5786] ? lockdep_hardirqs_on+0x7d/0x100 [ 245.375076][ T5786] ? finish_automount+0xa30/0xa30 [ 245.380165][ T5786] ? putname+0x102/0x140 [ 245.384465][ T5786] __x64_sys_mount+0x283/0x300 [ 245.389294][ T5786] ? copy_mnt_ns+0xb30/0xb30 [ 245.393946][ T5786] ? lockdep_hardirqs_on+0x7d/0x100 [ 245.399209][ T5786] ? _raw_spin_unlock_irq+0x2e/0x50 [ 245.404476][ T5786] ? ptrace_notify+0xfe/0x140 [ 245.409236][ T5786] do_syscall_64+0x39/0xb0 [ 245.413704][ T5786] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 245.419670][ T5786] RIP: 0033:0x7f4f6dd11c5a [ 245.424124][ T5786] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 245.443791][ T5786] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 245.452273][ T5786] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 245.460297][ T5786] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 245.468317][ T5786] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 245.476337][ T5786] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [pid 5789] <... write resumed>) = 16777216 [pid 5789] munmap(0x7f4f650a0000, 16777216 [pid 5793] <... write resumed>) = 16777216 [pid 5793] munmap(0x7f4f650a0000, 16777216 [pid 5792] <... munmap resumed>) = 0 [pid 5781] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5781] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5781] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5781] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5781] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5800 attached [pid 5800] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5781] <... clone3 resumed> => {parent_tid=[81]}, 88) = 81 [pid 5800] <... rseq resumed>) = 0 [pid 5781] rt_sigprocmask(SIG_SETMASK, [], [pid 5800] set_robust_list(0x7f4f6609f9a0, 24 [pid 5781] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5800] <... set_robust_list resumed>) = 0 [pid 5781] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5800] rt_sigprocmask(SIG_SETMASK, [], [pid 5781] <... futex resumed>) = 0 [pid 5800] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5781] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5800] ioctl(0, VFAT_IOCTL_READDIR_SHORT [pid 5789] <... munmap resumed>) = 0 [pid 5800] <... ioctl resumed>, 0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5800] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5781] <... futex resumed>) = 0 [pid 5800] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5781] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5781] <... futex resumed>) = 0 [pid 5800] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5781] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5789] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 245.484360][ T5786] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 245.485031][ T5800] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [ 245.492358][ T5786] [ 245.499797][ T5788] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 245.514416][ T5789] loop0: detected capacity change from 0 to 32768 [ 245.521356][ T5788] CPU: 1 PID: 5788 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 245.531836][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 245.542036][ T5788] Call Trace: [ 245.545348][ T5788] [ 245.548310][ T5788] dump_stack_lvl+0x136/0x150 [ 245.553067][ T5788] sysfs_warn_dup+0x80/0xa0 [ 245.557622][ T5788] sysfs_create_dir_ns+0x237/0x290 [ 245.562785][ T5788] ? sysfs_create_mount_point+0xb0/0xb0 [ 245.565404][ T5800] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 245.565404][ T5800] inode = 12 2341 [ 245.565404][ T5800] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 245.568358][ T5788] ? spin_bug+0x1c0/0x1c0 [ 245.568402][ T5788] ? do_raw_spin_unlock+0x175/0x230 [ 245.568446][ T5788] kobject_add_internal+0x2c9/0x9c0 [ 245.568481][ T5788] ? kfree+0x11/0x150 [ 245.568514][ T5788] kobject_init_and_add+0x101/0x170 [ 245.595181][ T5800] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 245.596620][ T5788] ? kobject_create_and_add+0xf0/0xf0 [ 245.596658][ T5788] ? lockdep_init_map_type+0x21e/0x810 [ 245.596698][ T5788] ? lockdep_hardirqs_on+0x7d/0x100 [ 245.596736][ T5788] ? lockdep_init_map_type+0x21e/0x810 [ 245.596778][ T5788] gfs2_sys_fs_add+0x1d5/0x450 [ 245.602901][ T5800] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5782 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 245.605940][ T5788] ? recover_store+0x170/0x170 [ 245.605975][ T5788] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 245.606023][ T5788] gfs2_fill_super+0x1312/0x2aa0 [ 245.606062][ T5788] ? gfs2_reconfigure+0xf90/0xf90 [ 245.606099][ T5788] ? snprintf+0xbf/0x100 [ 245.606136][ T5788] ? vsprintf+0x30/0x30 [ 245.615850][ T5800] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5800 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 245.620346][ T5788] ? wait_for_completion_io_timeout+0x20/0x20 [ 245.625717][ T5800] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 245.631166][ T5788] ? set_blocksize+0x2d8/0x370 [ 245.631207][ T5788] get_tree_bdev+0x43e/0x7d0 [ 245.631248][ T5788] ? gfs2_reconfigure+0xf90/0xf90 [ 245.631285][ T5788] gfs2_get_tree+0x4e/0x270 [ 245.631320][ T5788] vfs_get_tree+0x8d/0x350 [ 245.631356][ T5788] path_mount+0x136e/0x1e70 [ 245.644130][ T5800] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 245.646768][ T5788] ? putname+0x102/0x140 [ 245.646809][ T5788] ? lockdep_hardirqs_on+0x7d/0x100 [ 245.646848][ T5788] ? finish_automount+0xa30/0xa30 [ 245.664766][ T5800] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 245.667310][ T5788] ? putname+0x102/0x140 [ 245.667348][ T5788] __x64_sys_mount+0x283/0x300 [ 245.667389][ T5788] ? copy_mnt_ns+0xb30/0xb30 [pid 5789] ioctl(4, LOOP_SET_FD, 3 [pid 5793] <... munmap resumed>) = 0 [pid 5792] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5789] <... ioctl resumed>) = 0 [pid 5781] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5793] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5792] <... openat resumed>) = 4 [pid 5789] close(3 [pid 5793] <... openat resumed>) = 4 [pid 5792] ioctl(4, LOOP_SET_FD, 3 [pid 5789] <... close resumed>) = 0 [ 245.672324][ T5800] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 245.677335][ T5788] ? lockdep_hardirqs_on+0x7d/0x100 [ 245.677375][ T5788] ? _raw_spin_unlock_irq+0x2e/0x50 [ 245.677420][ T5788] ? ptrace_notify+0xfe/0x140 [ 245.677471][ T5788] do_syscall_64+0x39/0xb0 [ 245.677501][ T5788] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 245.688105][ T5800] gfs2: fsid=syz:syz.0: File system withdrawn [ 245.695890][ T5788] RIP: 0033:0x7f4f6dd11c5a [pid 5793] ioctl(4, LOOP_SET_FD, 3 [pid 5792] <... ioctl resumed>) = 0 [pid 5789] mkdir("./file0", 0777 [pid 5792] close(3 [pid 5789] <... mkdir resumed>) = 0 [pid 5792] <... close resumed>) = 0 [pid 5789] mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5792] mkdir("./file0", 0777) = 0 [ 245.695917][ T5788] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 245.695947][ T5788] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 245.695978][ T5788] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 245.696001][ T5788] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 245.696024][ T5788] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 245.696045][ T5788] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 245.696067][ T5788] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 245.696093][ T5788] [ 245.806988][ T5792] loop1: detected capacity change from 0 to 32768 [ 245.810130][ T5786] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 245.817690][ T5793] loop5: detected capacity change from 0 to 32768 [ 245.828680][ T5786] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 245.929400][ T5788] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 245.937863][ T5800] CPU: 1 PID: 5800 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 245.948562][ T5789] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 245.956333][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 245.956355][ T5800] Call Trace: [ 245.956364][ T5800] [ 245.956375][ T5800] dump_stack_lvl+0x136/0x150 [ 245.956429][ T5800] gfs2_withdraw+0xb33/0x1060 [ 245.956462][ T5800] ? gfs2_consist_inode_i+0x104/0x150 [ 245.956498][ T5800] gfs2_dirent_scan+0x32a/0x3d0 [ 245.956543][ T5800] ? gfs2_dirent_prev+0x210/0x210 [ 245.956592][ T5800] ? gfs2_dirent_prev+0x210/0x210 [ 245.964195][ T5792] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 245.974011][ T5800] gfs2_dirent_search+0x47d/0x580 [ 245.974063][ T5800] ? get_first_leaf+0x190/0x190 [ 245.974110][ T5800] ? gfs2_permission+0x256/0x3e0 [ 246.032436][ T5800] gfs2_dir_search+0x8d/0x2d0 [ 246.037166][ T5800] ? gfs2_dir_read+0x14e0/0x14e0 [ 246.042148][ T5800] gfs2_lookupi+0x481/0x640 [ 246.046681][ T5800] ? gfs2_lookup_by_inum+0x100/0x100 [ 246.052002][ T5800] ? __gfs2_lookup+0x83/0x280 [ 246.056713][ T5800] __gfs2_lookup+0x83/0x280 [ 246.061247][ T5800] ? gfs2_lookupi+0x640/0x640 [ 246.065956][ T5800] ? lockdep_init_map_type+0x21e/0x810 [ 246.071444][ T5800] ? avc_has_perm_noaudit+0x10b/0x3a0 [ 246.076854][ T5800] ? lockdep_init_map_type+0x21e/0x810 [ 246.082343][ T5800] __lookup_slow+0x24c/0x460 [ 246.086966][ T5800] ? lookup_one_qstr_excl+0x180/0x180 [ 246.092373][ T5800] ? lookup_fast+0x14e/0x520 [ 246.096994][ T5800] walk_component+0x33f/0x5a0 [ 246.101718][ T5800] link_path_walk.part.0+0x74e/0xd60 [ 246.107040][ T5800] ? walk_component+0x5a0/0x5a0 [ 246.111925][ T5800] path_lookupat+0xb7/0x840 [ 246.116470][ T5800] path_openat+0x1710/0x2710 [ 246.121091][ T5800] ? __lock_acquire+0x1984/0x5e20 [ 246.126145][ T5800] ? path_lookupat+0x840/0x840 [ 246.130947][ T5800] do_filp_open+0x1ba/0x410 [ 246.135480][ T5800] ? may_open_dev+0xf0/0xf0 [ 246.140016][ T5800] ? find_held_lock+0x2d/0x110 [ 246.144806][ T5800] ? do_raw_spin_lock+0x124/0x2b0 [ 246.149865][ T5800] ? spin_bug+0x1c0/0x1c0 [ 246.154226][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 246.159110][ T5800] ? alloc_fd+0x2e4/0x750 [ 246.163477][ T5800] do_sys_openat2+0x160/0x1c0 [ 246.168217][ T5800] ? build_open_flags+0x720/0x720 [ 246.173288][ T5800] ? ptrace_notify+0xfe/0x140 [ 246.178008][ T5800] ? lock_downgrade+0x690/0x690 [ 246.182906][ T5800] __x64_sys_openat+0x143/0x1f0 [ 246.187809][ T5800] ? __ia32_sys_open+0x1c0/0x1c0 [ 246.192783][ T5800] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.198019][ T5800] ? lockdep_hardirqs_on+0x7d/0x100 [ 246.203247][ T5800] ? _raw_spin_unlock_irq+0x2e/0x50 [ 246.208481][ T5800] ? ptrace_notify+0xfe/0x140 [ 246.213201][ T5800] do_syscall_64+0x39/0xb0 [ 246.217641][ T5800] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 246.223574][ T5800] RIP: 0033:0x7f4f6dd107f9 [ 246.228009][ T5800] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 246.247639][ T5800] RSP: 002b:00007f4f6609f228 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.256084][ T5800] RAX: ffffffffffffffda RBX: 00007f4f6dda46f8 RCX: 00007f4f6dd107f9 [ 246.264073][ T5800] RDX: 0000000000200002 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 246.272068][ T5800] RBP: 00007f4f6dda46f0 R08: 00007f4f6609f6c0 R09: 00007f4f6609f6c0 [ 246.280059][ T5800] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f6dda46fc [ 246.288136][ T5800] R13: 0030656c69662f2e R14: 00007f4f6dd5d740 R15: 00007fffaa0db528 [ 246.296223][ T5800] [ 246.302401][ T5789] CPU: 0 PID: 5789 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 246.312899][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 246.323003][ T5789] Call Trace: [ 246.326319][ T5789] [ 246.329291][ T5789] dump_stack_lvl+0x136/0x150 [ 246.334043][ T5789] sysfs_warn_dup+0x80/0xa0 [ 246.338595][ T5789] sysfs_create_dir_ns+0x237/0x290 [ 246.343755][ T5789] ? sysfs_create_mount_point+0xb0/0xb0 [ 246.349356][ T5789] ? spin_bug+0x1c0/0x1c0 [ 246.353744][ T5789] ? do_raw_spin_unlock+0x175/0x230 [ 246.359006][ T5789] kobject_add_internal+0x2c9/0x9c0 [ 246.360411][ T5788] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 246.364323][ T5789] ? kfree+0x11/0x150 [ 246.364360][ T5789] kobject_init_and_add+0x101/0x170 [ 246.380091][ T5789] ? kobject_create_and_add+0xf0/0xf0 [ 246.385515][ T5789] ? lockdep_init_map_type+0x21e/0x810 [ 246.391025][ T5789] ? lockdep_hardirqs_on+0x7d/0x100 [ 246.396367][ T5789] ? lockdep_init_map_type+0x21e/0x810 [ 246.401898][ T5789] gfs2_sys_fs_add+0x1d5/0x450 [ 246.406712][ T5789] ? recover_store+0x170/0x170 [ 246.411517][ T5789] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 246.417282][ T5789] gfs2_fill_super+0x1312/0x2aa0 [ 246.422259][ T5789] ? gfs2_reconfigure+0xf90/0xf90 [ 246.427327][ T5789] ? snprintf+0xbf/0x100 [ 246.431624][ T5789] ? vsprintf+0x30/0x30 [ 246.435836][ T5789] ? wait_for_completion_io_timeout+0x20/0x20 [ 246.441956][ T5789] ? set_blocksize+0x2d8/0x370 [ 246.446784][ T5789] get_tree_bdev+0x43e/0x7d0 [ 246.451436][ T5789] ? gfs2_reconfigure+0xf90/0xf90 [ 246.456514][ T5789] gfs2_get_tree+0x4e/0x270 [ 246.461070][ T5789] vfs_get_tree+0x8d/0x350 [ 246.465542][ T5789] path_mount+0x136e/0x1e70 [ 246.470098][ T5789] ? putname+0x102/0x140 [ 246.474397][ T5789] ? lockdep_hardirqs_on+0x7d/0x100 [ 246.479658][ T5789] ? finish_automount+0xa30/0xa30 [ 246.484730][ T5789] ? putname+0x102/0x140 [pid 5792] mount("/dev/loop1", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5793] <... ioctl resumed>) = 0 [pid 5793] close(3) = 0 [pid 5793] mkdir("./file0", 0777) = 0 [pid 5793] mount("/dev/loop5", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5800] <... openat resumed>) = -1 EIO (Input/output error) [pid 5800] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5800] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5782] <... openat resumed>) = -1 EIO (Input/output error) [pid 5782] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5781] close(3 [pid 5782] <... futex resumed>) = 0 [pid 5781] <... close resumed>) = 0 [pid 5782] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5781] close(4) = -1 EBADF (Bad file descriptor) [pid 5781] close(5) = -1 EBADF (Bad file descriptor) [pid 5781] close(6) = -1 EBADF (Bad file descriptor) [pid 5781] close(7) = -1 EBADF (Bad file descriptor) [pid 5781] close(8) = -1 EBADF (Bad file descriptor) [pid 5781] close(9) = -1 EBADF (Bad file descriptor) [pid 5781] close(10) = -1 EBADF (Bad file descriptor) [pid 5781] close(11) = -1 EBADF (Bad file descriptor) [pid 5781] close(12) = -1 EBADF (Bad file descriptor) [ 246.489018][ T5789] __x64_sys_mount+0x283/0x300 [ 246.493841][ T5789] ? copy_mnt_ns+0xb30/0xb30 [ 246.498485][ T5789] ? lockdep_hardirqs_on+0x7d/0x100 [ 246.503733][ T5789] ? _raw_spin_unlock_irq+0x2e/0x50 [ 246.508997][ T5789] ? ptrace_notify+0xfe/0x140 [ 246.513741][ T5789] do_syscall_64+0x39/0xb0 [ 246.518215][ T5789] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 246.524188][ T5789] RIP: 0033:0x7f4f6dd11c5a [pid 5781] close(13) = -1 EBADF (Bad file descriptor) [pid 5781] close(14) = -1 EBADF (Bad file descriptor) [pid 5781] close(15) = -1 EBADF (Bad file descriptor) [pid 5781] close(16) = -1 EBADF (Bad file descriptor) [pid 5781] close(17) = -1 EBADF (Bad file descriptor) [pid 5781] close(18) = -1 EBADF (Bad file descriptor) [pid 5781] close(19) = -1 EBADF (Bad file descriptor) [pid 5781] close(20) = -1 EBADF (Bad file descriptor) [pid 5781] close(21) = -1 EBADF (Bad file descriptor) [pid 5781] close(22) = -1 EBADF (Bad file descriptor) [pid 5781] close(23) = -1 EBADF (Bad file descriptor) [pid 5781] close(24) = -1 EBADF (Bad file descriptor) [pid 5781] close(25) = -1 EBADF (Bad file descriptor) [pid 5781] close(26) = -1 EBADF (Bad file descriptor) [pid 5781] close(27) = -1 EBADF (Bad file descriptor) [pid 5781] close(28) = -1 EBADF (Bad file descriptor) [pid 5781] close(29) = -1 EBADF (Bad file descriptor) [pid 5781] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [ 246.528650][ T5789] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 246.548318][ T5789] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 246.556791][ T5789] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 246.564819][ T5789] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 246.572846][ T5789] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 246.580874][ T5789] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 ) = 156 [pid 5781] exit_group(0 [pid 5800] <... futex resumed>) = ? [pid 5782] <... futex resumed>) = ? [pid 5781] <... exit_group resumed>) = ? [pid 5800] +++ exited with 0 +++ [pid 5786] <... mount resumed>) = -1 EEXIST (File exists) [pid 5782] +++ exited with 0 +++ [pid 5781] +++ exited with 0 +++ [ 246.588904][ T5789] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 246.596933][ T5789] [ 246.603062][ T5793] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 246.610009][ T5789] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 246.619448][ T5792] CPU: 1 PID: 5792 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 246.632324][ T5789] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 246.634757][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 246.651394][ T5792] Call Trace: [ 246.654719][ T5792] [ 246.657668][ T5792] dump_stack_lvl+0x136/0x150 [ 246.662390][ T5792] sysfs_warn_dup+0x80/0xa0 [ 246.666930][ T5792] sysfs_create_dir_ns+0x237/0x290 [ 246.672094][ T5792] ? sysfs_create_mount_point+0xb0/0xb0 [ 246.677683][ T5792] ? spin_bug+0x1c0/0x1c0 [ 246.682049][ T5792] ? do_raw_spin_unlock+0x175/0x230 [ 246.687378][ T5792] kobject_add_internal+0x2c9/0x9c0 [ 246.692634][ T5792] ? kfree+0x11/0x150 [ 246.696658][ T5792] kobject_init_and_add+0x101/0x170 [ 246.701890][ T5792] ? kobject_create_and_add+0xf0/0xf0 [ 246.707301][ T5792] ? lockdep_init_map_type+0x21e/0x810 [ 246.712803][ T5792] ? lockdep_hardirqs_on+0x7d/0x100 [ 246.718032][ T5792] ? lockdep_init_map_type+0x21e/0x810 [ 246.723526][ T5792] gfs2_sys_fs_add+0x1d5/0x450 [ 246.728319][ T5792] ? recover_store+0x170/0x170 [ 246.733105][ T5792] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 246.738861][ T5792] gfs2_fill_super+0x1312/0x2aa0 [ 246.743841][ T5792] ? gfs2_reconfigure+0xf90/0xf90 [ 246.748904][ T5792] ? snprintf+0xbf/0x100 [ 246.753198][ T5792] ? vsprintf+0x30/0x30 [ 246.757395][ T5792] ? wait_for_completion_io_timeout+0x20/0x20 [ 246.763501][ T5792] ? set_blocksize+0x2d8/0x370 [ 246.768298][ T5792] get_tree_bdev+0x43e/0x7d0 [ 246.773012][ T5792] ? gfs2_reconfigure+0xf90/0xf90 [ 246.778067][ T5792] gfs2_get_tree+0x4e/0x270 [ 246.782600][ T5792] vfs_get_tree+0x8d/0x350 [ 246.787045][ T5792] path_mount+0x136e/0x1e70 [ 246.791591][ T5792] ? putname+0x102/0x140 [ 246.795860][ T5792] ? lockdep_hardirqs_on+0x7d/0x100 [ 246.801093][ T5792] ? finish_automount+0xa30/0xa30 [ 246.806154][ T5792] ? putname+0x102/0x140 [ 246.810422][ T5792] __x64_sys_mount+0x283/0x300 [ 246.815229][ T5792] ? copy_mnt_ns+0xb30/0xb30 [ 246.819851][ T5792] ? lockdep_hardirqs_on+0x7d/0x100 [ 246.825080][ T5792] ? _raw_spin_unlock_irq+0x2e/0x50 [ 246.830316][ T5792] ? ptrace_notify+0xfe/0x140 [ 246.835119][ T5792] do_syscall_64+0x39/0xb0 [ 246.839563][ T5792] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 246.845503][ T5792] RIP: 0033:0x7f4f6dd11c5a [ 246.849942][ T5792] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 246.869595][ T5792] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 246.878052][ T5792] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 246.886052][ T5792] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 246.894060][ T5792] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 246.902146][ T5792] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 246.910138][ T5792] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 246.918136][ T5792] [ 246.922163][ T5793] CPU: 0 PID: 5793 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 246.932668][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [pid 5788] <... mount resumed>) = -1 EEXIST (File exists) [pid 5786] ioctl(4, LOOP_CLR_FD [pid 5788] ioctl(4, LOOP_CLR_FD [pid 5030] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=76 /* 0.76 s */} --- [pid 5030] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5030] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5030] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5030] umount2("./28/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] unlink("./28/cgroup.cpu") = 0 [pid 5030] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] unlink("./28/binderfs") = 0 [ 246.942768][ T5793] Call Trace: [ 246.946085][ T5793] [ 246.949054][ T5793] dump_stack_lvl+0x136/0x150 [ 246.953825][ T5793] sysfs_warn_dup+0x80/0xa0 [ 246.958414][ T5793] sysfs_create_dir_ns+0x237/0x290 [ 246.963586][ T5793] ? sysfs_create_mount_point+0xb0/0xb0 [ 246.969189][ T5793] ? spin_bug+0x1c0/0x1c0 [ 246.973584][ T5793] ? do_raw_spin_unlock+0x175/0x230 [ 246.978846][ T5793] kobject_add_internal+0x2c9/0x9c0 [ 246.984097][ T5793] ? kfree+0x11/0x150 [ 246.988134][ T5793] kobject_init_and_add+0x101/0x170 [ 246.991231][ T5792] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 246.993367][ T5793] ? kobject_create_and_add+0xf0/0xf0 [ 246.993407][ T5793] ? lockdep_init_map_type+0x21e/0x810 [ 246.993448][ T5793] ? lockdep_hardirqs_on+0x7d/0x100 [ 247.008883][ T5792] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 247.012685][ T5793] ? lockdep_init_map_type+0x21e/0x810 [ 247.012734][ T5793] gfs2_sys_fs_add+0x1d5/0x450 [ 247.040315][ T5793] ? recover_store+0x170/0x170 [ 247.045134][ T5793] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 247.050935][ T5793] gfs2_fill_super+0x1312/0x2aa0 [ 247.055931][ T5793] ? gfs2_reconfigure+0xf90/0xf90 [ 247.061007][ T5793] ? snprintf+0xbf/0x100 [ 247.065280][ T5793] ? vsprintf+0x30/0x30 [ 247.069460][ T5793] ? wait_for_completion_io_timeout+0x20/0x20 [ 247.075561][ T5793] ? set_blocksize+0x2d8/0x370 [ 247.080369][ T5793] get_tree_bdev+0x43e/0x7d0 [ 247.084987][ T5793] ? gfs2_reconfigure+0xf90/0xf90 [ 247.090043][ T5793] gfs2_get_tree+0x4e/0x270 [ 247.094571][ T5793] vfs_get_tree+0x8d/0x350 [ 247.099017][ T5793] path_mount+0x136e/0x1e70 [ 247.103552][ T5793] ? putname+0x102/0x140 [ 247.107823][ T5793] ? lockdep_hardirqs_on+0x7d/0x100 [ 247.113095][ T5793] ? finish_automount+0xa30/0xa30 [ 247.118167][ T5793] ? putname+0x102/0x140 [ 247.122438][ T5793] __x64_sys_mount+0x283/0x300 [ 247.127236][ T5793] ? copy_mnt_ns+0xb30/0xb30 [ 247.131858][ T5793] ? lockdep_hardirqs_on+0x7d/0x100 [ 247.137089][ T5793] ? _raw_spin_unlock_irq+0x2e/0x50 [ 247.142322][ T5793] ? ptrace_notify+0xfe/0x140 [ 247.147041][ T5793] do_syscall_64+0x39/0xb0 [ 247.151483][ T5793] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 247.157421][ T5793] RIP: 0033:0x7f4f6dd11c5a [ 247.161855][ T5793] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 247.181496][ T5793] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [pid 5030] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5784] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5784] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5784] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5792] <... mount resumed>) = -1 EEXIST (File exists) [pid 5789] <... mount resumed>) = -1 EEXIST (File exists) [pid 5784] <... mmap resumed>) = 0x7f4f6607f000 [pid 5784] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5792] ioctl(4, LOOP_CLR_FD [pid 5789] ioctl(4, LOOP_CLR_FD [pid 5784] <... mprotect resumed>) = 0 [ 247.189941][ T5793] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 247.197937][ T5793] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 247.205932][ T5793] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 247.213923][ T5793] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 247.221913][ T5793] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 247.229909][ T5793] [pid 5784] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5784] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5805 attached => {parent_tid=[86]}, 88) = 86 [pid 5784] rt_sigprocmask(SIG_SETMASK, [], [pid 5805] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5784] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5784] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... rseq resumed>) = 0 [pid 5784] <... futex resumed>) = 0 [pid 5784] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5805] set_robust_list(0x7f4f6609f9a0, 24) = 0 [pid 5805] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5805] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5785] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5784] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5805] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5785] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = 0 [pid 5785] <... futex resumed>) = 0 [pid 5784] <... futex resumed>) = 0 [pid 5805] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5785] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5784] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5805] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5805] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... futex resumed>) = 0 [pid 5805] <... futex resumed>) = 1 [pid 5784] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5784] <... futex resumed>) = 0 [ 247.250371][ T5793] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 247.273911][ T5793] gfs2: fsid=syz:syz: error -17 adding sysfs files [pid 5784] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5805] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5793] <... mount resumed>) = -1 EEXIST (File exists) [pid 5787] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5785] <... mmap resumed>) = 0x7f4f6607f000 [pid 5805] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] ioctl(4, LOOP_CLR_FD [pid 5805] <... futex resumed>) = 1 [pid 5784] <... futex resumed>) = 0 [pid 5805] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5787] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5787] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5785] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5785] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5787] <... mprotect resumed>) = 0 [pid 5785] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5790] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5790] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5790] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5787] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5790] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5806 attached [pid 5787] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5787] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} => {parent_tid=[92]}, 88) = 92 [pid 5787] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5787] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5787] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5790] <... clone3 resumed> => {parent_tid=[86]}, 88) = 86 [pid 5790] rt_sigprocmask(SIG_SETMASK, [], [pid 5806] <... rseq resumed>) = 0 [pid 5790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5806] set_robust_list(0x7f4f6609f9a0, 24 [pid 5790] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] <... set_robust_list resumed>) = 0 [pid 5790] <... futex resumed>) = 0 [pid 5806] rt_sigprocmask(SIG_SETMASK, [], [pid 5790] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5806] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5806] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5790] <... futex resumed>) = 0 [pid 5806] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5790] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5790] <... futex resumed>) = 0 [pid 5806] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5806] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] <... futex resumed>) = 0 [pid 5806] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5790] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5790] <... futex resumed>) = 0 [pid 5806] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5790] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5790] <... futex resumed>) = 0 [pid 5806] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5785] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5791] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5791] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5791] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 5807 attached [pid 5807] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053) = 0 [pid 5791] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5791] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5807] set_robust_list(0x7f4f6609f9a0, 24 [pid 5787] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5791] <... clone3 resumed> => {parent_tid=[90]}, 88) = 90 [pid 5791] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5808 attached NULL, 8) = 0 [pid 5808] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5807] <... set_robust_list resumed>) = 0 [pid 5791] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5787] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5786] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5809 attached [pid 5808] <... rseq resumed>) = 0 [pid 5791] <... futex resumed>) = 0 [pid 5809] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5786] close(4) = 0 [pid 5809] <... rseq resumed>) = 0 [pid 5807] rt_sigprocmask(SIG_SETMASK, [], [pid 5787] <... futex resumed>) = 0 [pid 5809] set_robust_list(0x7f4f6609f9a0, 24 [pid 5786] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5809] <... set_robust_list resumed>) = 0 [pid 5786] <... futex resumed>) = 0 [pid 5784] close(3 [pid 5809] rt_sigprocmask(SIG_SETMASK, [], [pid 5786] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5784] <... close resumed>) = 0 [pid 5809] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5784] close(4) = -1 EBADF (Bad file descriptor) [pid 5784] close(5) = -1 EBADF (Bad file descriptor) [pid 5784] close(6) = -1 EBADF (Bad file descriptor) [pid 5784] close(7) = -1 EBADF (Bad file descriptor) [pid 5784] close(8) = -1 EBADF (Bad file descriptor) [pid 5785] <... clone3 resumed> => {parent_tid=[88]}, 88) = 88 [pid 5784] close(9 [pid 5807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5787] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5785] rt_sigprocmask(SIG_SETMASK, [], [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5807] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5787] <... mmap resumed>) = 0x7f4f6605e000 [pid 5785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5784] close(10 [pid 5807] <... openat resumed>) = 3 [pid 5787] mprotect(0x7f4f6605f000, 131072, PROT_READ|PROT_WRITE [pid 5807] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5787] <... mprotect resumed>) = 0 [pid 5807] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5787] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5785] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5809] <... futex resumed>) = 0 [pid 5808] set_robust_list(0x7f4f6609f9a0, 24 [pid 5791] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5785] <... futex resumed>) = 1 [pid 5784] close(11 [pid 5809] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5787] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6607e990, parent_tid=0x7f4f6607e990, exit_signal=0, stack=0x7f4f6605e000, stack_size=0x20300, tls=0x7f4f6607e6c0} [pid 5785] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5810 attached [pid 5809] <... openat resumed>) = 3 [pid 5808] <... set_robust_list resumed>) = 0 [pid 5784] close(12 [pid 5810] rseq(0x7f4f6607efe0, 0x20, 0, 0x53053053 [pid 5809] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5787] <... clone3 resumed> => {parent_tid=[93]}, 88) = 93 [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5810] <... rseq resumed>) = 0 [pid 5809] <... futex resumed>) = 1 [pid 5787] rt_sigprocmask(SIG_SETMASK, [], [pid 5785] <... futex resumed>) = 0 [pid 5784] close(13 [pid 5810] set_robust_list(0x7f4f6607e9a0, 24 [pid 5809] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5808] rt_sigprocmask(SIG_SETMASK, [], [pid 5787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5785] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5810] <... set_robust_list resumed>) = 0 [pid 5809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5787] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5785] <... futex resumed>) = 0 [pid 5784] close(14 [pid 5810] rt_sigprocmask(SIG_SETMASK, [], [pid 5809] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5787] <... futex resumed>) = 0 [pid 5785] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5810] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5809] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5787] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] close(15 [pid 5810] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5809] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5810] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5809] <... futex resumed>) = 1 [pid 5785] <... futex resumed>) = 0 [pid 5784] close(16 [pid 5810] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5809] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5785] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5810] <... futex resumed>) = 1 [pid 5809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5787] <... futex resumed>) = 0 [pid 5785] <... futex resumed>) = 0 [pid 5784] close(17 [pid 5810] futex(0x7f4f6dda4708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5809] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5808] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5787] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5785] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5809] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5807] <... futex resumed>) = 0 [pid 5787] <... futex resumed>) = 1 [pid 5807] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5787] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5807] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5787] <... futex resumed>) = 0 [pid 5807] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5784] close(18) = -1 EBADF (Bad file descriptor) [pid 5784] close(19) = -1 EBADF (Bad file descriptor) [pid 5784] close(20) = -1 EBADF (Bad file descriptor) [pid 5784] close(21 [pid 5808] <... openat resumed>) = 3 [pid 5791] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5808] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] close(22 [pid 5809] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5809] <... futex resumed>) = 1 [pid 5808] <... futex resumed>) = 0 [pid 5791] <... futex resumed>) = 0 [pid 5785] <... futex resumed>) = 0 [pid 5784] close(23 [pid 5808] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5791] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5808] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5784] close(24 [pid 5809] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5784] close(25 [pid 5808] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5784] close(26) = -1 EBADF (Bad file descriptor) [pid 5784] close(27) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5808] <... futex resumed>) = 1 [pid 5791] <... futex resumed>) = 0 [pid 5784] close(28 [pid 5808] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5791] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5791] <... futex resumed>) = 0 [pid 5784] close(29) = -1 EBADF (Bad file descriptor) [pid 5784] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5808] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5791] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... write resumed>) = 156 [pid 5784] exit_group(0 [pid 5805] <... futex resumed>) = ? [pid 5784] <... exit_group resumed>) = ? [pid 5805] +++ exited with 0 +++ [pid 5786] <... futex resumed>) = ? [pid 5808] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5786] +++ exited with 0 +++ [pid 5784] +++ exited with 0 +++ [pid 5808] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5791] <... futex resumed>) = 0 [pid 5031] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=74 /* 0.74 s */} --- [pid 5808] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5031] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5031] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5792] <... ioctl resumed>) = 0 [pid 5788] <... ioctl resumed>) = 0 [pid 5031] umount2("./28/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5792] close(4 [pid 5788] close(4 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5792] <... close resumed>) = 0 [pid 5031] newfstatat(AT_FDCWD, "./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./28/cgroup.cpu") = 0 [pid 5031] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5792] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5788] <... close resumed>) = 0 [pid 5031] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5792] <... futex resumed>) = 0 [pid 5788] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5792] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5790] close(3 [pid 5789] <... ioctl resumed>) = 0 [pid 5788] <... futex resumed>) = 0 [pid 5785] close(3 [pid 5031] unlink("./28/binderfs" [pid 5790] <... close resumed>) = 0 [pid 5788] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5785] <... close resumed>) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5790] close(4 [pid 5785] close(4 [pid 5031] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5790] close(5 [pid 5789] close(4 [pid 5785] close(5 [pid 5031] newfstatat(AT_FDCWD, "./28/file0", [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5789] <... close resumed>) = 0 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5790] close(6 [pid 5789] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5785] close(6 [pid 5031] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5789] <... futex resumed>) = 0 [pid 5787] close(3 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5793] <... ioctl resumed>) = 0 [pid 5790] close(7 [pid 5789] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5787] <... close resumed>) = 0 [pid 5785] close(7 [pid 5031] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5793] close(4 [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(4 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... openat resumed>) = 4 [pid 5793] <... close resumed>) = 0 [pid 5790] close(8 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(8 [pid 5031] newfstatat(4, "", [pid 5793] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(5 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5793] <... futex resumed>) = 0 [pid 5791] close(3 [pid 5790] close(9 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(9 [pid 5031] getdents64(4, [pid 5793] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5791] <... close resumed>) = 0 [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(6 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5791] close(4 [pid 5790] close(10 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(10 [pid 5031] getdents64(4, [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(7 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5791] close(5 [pid 5790] close(11 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(11 [pid 5031] close(4 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(8 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... close resumed>) = 0 [pid 5791] close(6 [pid 5790] close(12 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(12 [pid 5031] rmdir("./28/file0" [pid 5787] close(9 [pid 5031] <... rmdir resumed>) = 0 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] umount2("./28/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5787] close(10 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] newfstatat(AT_FDCWD, "./28/cgroup", [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(11 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5791] close(7 [pid 5790] close(13 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(13 [pid 5031] unlink("./28/cgroup" [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(12 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... unlink resumed>) = 0 [pid 5791] close(8 [pid 5790] close(14 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(14 [pid 5031] umount2("./28/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(13 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5791] close(9 [pid 5790] close(15 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(15 [pid 5031] newfstatat(AT_FDCWD, "./28/cgroup.net", [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(14 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5791] close(10 [pid 5790] close(16 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(16 [pid 5031] unlink("./28/cgroup.net" [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(15 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... unlink resumed>) = 0 [pid 5791] close(11 [pid 5790] close(17 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(17 [pid 5031] getdents64(3, [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(16 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5791] close(12 [pid 5790] close(18 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(18 [pid 5031] close(3 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(17 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... close resumed>) = 0 [pid 5791] close(13 [pid 5790] close(19 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(19 [pid 5031] rmdir("./28" [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(18 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... rmdir resumed>) = 0 [pid 5791] close(14 [pid 5790] close(20 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(20 [pid 5031] mkdir("./29", 0777 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(19 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... mkdir resumed>) = 0 [pid 5791] close(15 [pid 5790] close(21 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(21 [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(20 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... openat resumed>) = 3 [pid 5791] close(16 [pid 5790] close(22 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(22 [pid 5031] ioctl(3, LOOP_CLR_FD [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(21 [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5791] close(17 [pid 5790] close(23 [pid 5785] close(23 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5791] close(18 [pid 5790] close(24 [pid 5785] close(24 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5791] close(19 [pid 5790] close(25 [pid 5785] close(25 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5791] close(20 [pid 5790] close(26 [pid 5785] close(26 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5791] close(21 [pid 5790] close(27 [pid 5785] close(27 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5791] close(22 [pid 5790] close(28 [pid 5785] close(28 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5791] close(23 [pid 5790] close(29 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] close(29 [pid 5031] close(3 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5785] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5791] close(24 [pid 5790] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5785] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... write resumed>) = 156 [pid 5785] <... write resumed>) = 156 [pid 5791] close(25 [pid 5790] exit_group(0 [pid 5785] exit_group(0 [pid 5809] <... futex resumed>) = ? [pid 5806] <... futex resumed>) = ? [pid 5792] <... futex resumed>) = ? [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] <... exit_group resumed>) = ? [pid 5788] <... futex resumed>) = ? [pid 5785] <... exit_group resumed>) = ? [pid 5809] +++ exited with 0 +++ [pid 5806] +++ exited with 0 +++ [pid 5792] +++ exited with 0 +++ [pid 5791] close(26 [pid 5787] close(22 [pid 5031] <... close resumed>) = 0 [pid 5030] <... umount2 resumed>) = 0 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] +++ exited with 0 +++ [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5811 attached [pid 5791] close(27 [pid 5788] +++ exited with 0 +++ [pid 5787] close(23 [pid 5785] +++ exited with 0 +++ [pid 5030] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5811] set_robust_list(0x55555654e6a0, 24 [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=53 /* 0.53 s */} --- [pid 5032] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=58 /* 0.58 s */} --- [pid 5031] <... clone resumed>, child_tidptr=0x55555654e690) = 87 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5811] <... set_robust_list resumed>) = 0 [pid 5791] close(28 [pid 5787] close(24 [pid 5032] restart_syscall(<... resuming interrupted clone ...> [pid 5030] newfstatat(AT_FDCWD, "./28/file0", [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... restart_syscall resumed>) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5787] close(25 [pid 5033] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5811] chdir("./29" [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(26 [pid 5033] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5811] <... chdir resumed>) = 0 [pid 5791] close(29 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... openat resumed>) = 3 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... openat resumed>) = 4 [pid 5811] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5791] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5787] close(27 [pid 5033] newfstatat(3, "", [pid 5032] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5030] newfstatat(4, "", write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5811] <... prctl resumed>) = 0 [pid 5791] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] <... openat resumed>) = 3 [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5811] setpgid(0, 0 [pid 5791] <... write resumed>) = 156 [pid 5787] close(28 [pid 5033] getdents64(3, [pid 5032] newfstatat(3, "", [pid 5030] getdents64(4, [pid 5811] <... setpgid resumed>) = 0 [pid 5791] exit_group(0 [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5811] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5808] <... futex resumed>) = ? [pid 5793] <... futex resumed>) = ? [pid 5791] <... exit_group resumed>) = ? [pid 5787] close(29 [pid 5033] umount2("./30/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] getdents64(3, write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5811] <... symlink resumed>) = 0 [pid 5808] +++ exited with 0 +++ [pid 5793] +++ exited with 0 +++ [pid 5791] +++ exited with 0 +++ [pid 5787] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5030] getdents64(4, [pid 5811] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5787] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5034] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=88, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=67 /* 0.67 s */} --- [pid 5033] newfstatat(AT_FDCWD, "./30/cgroup.cpu", [pid 5032] umount2("./29/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5811] <... symlink resumed>) = 0 [pid 5787] <... write resumed>) = 156 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] close(4 [pid 5811] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5787] exit_group(0 [pid 5033] unlink("./30/cgroup.cpu" [pid 5032] newfstatat(AT_FDCWD, "./29/cgroup.cpu", [pid 5030] <... close resumed>) = 0 [pid 5811] <... symlink resumed>) = 0 [pid 5810] <... futex resumed>) = ? [pid 5807] <... futex resumed>) = ? [pid 5789] <... futex resumed>) = ? [pid 5787] <... exit_group resumed>) = ? [pid 5034] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] <... unlink resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] rmdir("./28/file0" [pid 5811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5810] +++ exited with 0 +++ [pid 5807] +++ exited with 0 +++ [pid 5789] +++ exited with 0 +++ [pid 5787] +++ exited with 0 +++ [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] unlink("./29/cgroup.cpu" [pid 5811] <... openat resumed>) = 3 [pid 5034] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... rmdir resumed>) = 0 [pid 5811] write(3, "1000", 4 [pid 5034] <... openat resumed>) = 3 [pid 5033] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5032] <... unlink resumed>) = 0 [pid 5030] umount2("./28/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=62 /* 0.62 s */} --- [pid 5811] <... write resumed>) = 4 [pid 5034] newfstatat(3, "", [pid 5029] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5811] close(3 [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5811] <... close resumed>) = 0 [pid 5034] getdents64(3, [pid 5033] unlink("./30/binderfs" [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./28/cgroup", [pid 5029] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5811] symlink("/dev/binderfs", "./binderfs" [pid 5034] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5033] <... unlink resumed>) = 0 [pid 5032] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5029] <... openat resumed>) = 3 [pid 5811] <... symlink resumed>) = 0 [pid 5034] umount2("./29/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] newfstatat(3, "", [pid 5811] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] unlink("./29/binderfs" [pid 5030] unlink("./28/cgroup" [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5811] <... futex resumed>) = 0 [pid 5034] newfstatat(AT_FDCWD, "./29/cgroup.cpu", [pid 5033] newfstatat(AT_FDCWD, "./30/file0", [pid 5029] getdents64(3, [pid 5811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... unlink resumed>) = 0 [pid 5030] <... unlink resumed>) = 0 [pid 5029] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5811] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5034] unlink("./29/cgroup.cpu" [pid 5033] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] umount2("./28/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] umount2("./28/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5811] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5034] <... unlink resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5811] <... mprotect resumed>) = 0 [pid 5034] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] newfstatat(AT_FDCWD, "./29/file0", [pid 5030] newfstatat(AT_FDCWD, "./28/cgroup.net", [pid 5029] newfstatat(AT_FDCWD, "./28/cgroup.cpu", [pid 5811] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... openat resumed>) = 4 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5811] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5034] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5033] newfstatat(4, "", [pid 5032] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./28/cgroup.cpu" [pid 5811] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] unlink("./28/cgroup.net" [pid 5029] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5812 attached [pid 5034] unlink("./29/binderfs" [pid 5033] getdents64(4, [pid 5032] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5812] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5811] <... clone3 resumed> => {parent_tid=[88]}, 88) = 88 [pid 5034] <... unlink resumed>) = 0 [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5030] <... unlink resumed>) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5812] <... rseq resumed>) = 0 [pid 5811] rt_sigprocmask(SIG_SETMASK, [], [pid 5034] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] getdents64(4, [pid 5032] <... openat resumed>) = 4 [pid 5030] getdents64(3, [pid 5029] newfstatat(AT_FDCWD, "./28/binderfs", [pid 5812] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5811] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5032] newfstatat(4, "", [pid 5030] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5812] <... set_robust_list resumed>) = 0 [pid 5811] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] newfstatat(AT_FDCWD, "./29/file0", [pid 5033] close(4 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] close(3 [pid 5029] unlink("./28/binderfs" [pid 5812] rt_sigprocmask(SIG_SETMASK, [], [pid 5811] <... futex resumed>) = 0 [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... close resumed>) = 0 [pid 5032] getdents64(4, [pid 5030] <... close resumed>) = 0 [pid 5029] <... unlink resumed>) = 0 [pid 5812] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5811] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5034] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] rmdir("./30/file0" [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5030] rmdir("./28" [pid 5029] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5812] memfd_create("syzkaller", 0 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5812] <... memfd_create resumed>) = 3 [pid 5034] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5033] <... rmdir resumed>) = 0 [pid 5032] getdents64(4, [pid 5029] newfstatat(AT_FDCWD, "./28/file0", [pid 5812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5034] <... openat resumed>) = 4 [pid 5033] umount2("./30/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5030] <... rmdir resumed>) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5812] <... mmap resumed>) = 0x7f4f650a0000 [pid 5034] newfstatat(4, "", [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] close(4 [pid 5029] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] mkdir("./29", 0777 [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] newfstatat(AT_FDCWD, "./30/cgroup", [pid 5032] <... close resumed>) = 0 [pid 5030] <... mkdir resumed>) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] getdents64(4, [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] rmdir("./29/file0" [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5029] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5033] unlink("./30/cgroup" [pid 5032] <... rmdir resumed>) = 0 [pid 5030] <... openat resumed>) = 3 [pid 5034] getdents64(4, [pid 5033] <... unlink resumed>) = 0 [pid 5032] umount2("./29/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] ioctl(3, LOOP_CLR_FD [pid 5029] <... openat resumed>) = 4 [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5033] umount2("./30/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5029] newfstatat(4, "", [pid 5034] close(4 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] newfstatat(AT_FDCWD, "./29/cgroup", [pid 5030] close(3 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] <... close resumed>) = 0 [pid 5033] newfstatat(AT_FDCWD, "./30/cgroup.net", [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... close resumed>) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] unlink("./29/cgroup" [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5813 attached [pid 5034] rmdir("./29/file0" [pid 5033] unlink("./30/cgroup.net" [pid 5032] <... unlink resumed>) = 0 [pid 5029] getdents64(4, [pid 5813] set_robust_list(0x55555654e6a0, 24 [pid 5034] <... rmdir resumed>) = 0 [pid 5033] <... unlink resumed>) = 0 [pid 5032] umount2("./29/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... clone resumed>, child_tidptr=0x55555654e690) = 82 [pid 5813] <... set_robust_list resumed>) = 0 [pid 5034] umount2("./29/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] getdents64(3, [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5813] chdir("./29" [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5032] newfstatat(AT_FDCWD, "./29/cgroup.net", [pid 5029] getdents64(4, [pid 5813] <... chdir resumed>) = 0 [pid 5034] newfstatat(AT_FDCWD, "./29/cgroup", [pid 5033] close(3 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5813] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... close resumed>) = 0 [pid 5032] unlink("./29/cgroup.net" [pid 5029] close(4 [pid 5813] <... prctl resumed>) = 0 [pid 5034] unlink("./29/cgroup" [pid 5033] rmdir("./30" [pid 5032] <... unlink resumed>) = 0 [pid 5813] setpgid(0, 0 [pid 5034] <... unlink resumed>) = 0 [pid 5033] <... rmdir resumed>) = 0 [pid 5032] getdents64(3, [pid 5029] <... close resumed>) = 0 [pid 5813] <... setpgid resumed>) = 0 [pid 5034] umount2("./29/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] mkdir("./31", 0777 [pid 5032] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5029] rmdir("./28/file0" [pid 5813] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... mkdir resumed>) = 0 [pid 5032] close(3 [pid 5813] <... symlink resumed>) = 0 [pid 5034] newfstatat(AT_FDCWD, "./29/cgroup.net", [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5032] <... close resumed>) = 0 [pid 5029] <... rmdir resumed>) = 0 [pid 5813] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... openat resumed>) = 3 [pid 5032] rmdir("./29" [pid 5029] umount2("./28/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5813] <... symlink resumed>) = 0 [pid 5034] unlink("./29/cgroup.net" [pid 5033] ioctl(3, LOOP_CLR_FD [pid 5032] <... rmdir resumed>) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5813] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5034] <... unlink resumed>) = 0 [pid 5033] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5032] mkdir("./30", 0777 [pid 5029] newfstatat(AT_FDCWD, "./28/cgroup", [pid 5813] <... symlink resumed>) = 0 [pid 5034] getdents64(3, [pid 5033] close(3 [pid 5032] <... mkdir resumed>) = 0 [pid 5813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5034] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5033] <... close resumed>) = 0 [pid 5032] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5813] <... openat resumed>) = 3 [pid 5034] close(3 [pid 5033] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5032] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5814 attached [pid 5032] ioctl(3, LOOP_CLR_FD [pid 5814] set_robust_list(0x55555654e6a0, 24 [pid 5033] <... clone resumed>, child_tidptr=0x55555654e690) = 89 [pid 5032] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5814] <... set_robust_list resumed>) = 0 [pid 5032] close(3 [pid 5814] chdir("./31" [pid 5813] write(3, "1000", 4 [pid 5034] <... close resumed>) = 0 [pid 5032] <... close resumed>) = 0 [pid 5029] unlink("./28/cgroup" [pid 5814] <... chdir resumed>) = 0 [pid 5813] <... write resumed>) = 4 [pid 5034] rmdir("./29" [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5815 attached [pid 5814] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5813] close(3 [pid 5034] <... rmdir resumed>) = 0 [pid 5029] <... unlink resumed>) = 0 [pid 5815] set_robust_list(0x55555654e6a0, 24 [pid 5814] <... prctl resumed>) = 0 [pid 5813] <... close resumed>) = 0 [pid 5034] mkdir("./30", 0777 [pid 5032] <... clone resumed>, child_tidptr=0x55555654e690) = 87 [pid 5029] umount2("./28/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5815] <... set_robust_list resumed>) = 0 [pid 5814] setpgid(0, 0 [pid 5813] symlink("/dev/binderfs", "./binderfs" [pid 5034] <... mkdir resumed>) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5815] chdir("./30" [pid 5814] <... setpgid resumed>) = 0 [pid 5813] <... symlink resumed>) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5029] newfstatat(AT_FDCWD, "./28/cgroup.net", [pid 5815] <... chdir resumed>) = 0 [pid 5814] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5813] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... openat resumed>) = 3 [pid 5815] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5814] <... symlink resumed>) = 0 [pid 5813] <... futex resumed>) = 0 [pid 5034] ioctl(3, LOOP_CLR_FD [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5815] <... prctl resumed>) = 0 [pid 5814] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5034] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5029] unlink("./28/cgroup.net" [pid 5815] setpgid(0, 0 [pid 5814] <... symlink resumed>) = 0 [pid 5813] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5034] close(3 [pid 5815] <... setpgid resumed>) = 0 [pid 5814] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5813] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5034] <... close resumed>) = 0 [pid 5029] <... unlink resumed>) = 0 [pid 5815] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5814] <... symlink resumed>) = 0 [pid 5813] <... mprotect resumed>) = 0 [pid 5034] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5029] getdents64(3, [pid 5815] <... symlink resumed>) = 0 [pid 5814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5813] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5816 attached [pid 5815] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5814] <... openat resumed>) = 3 [pid 5813] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5029] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5816] set_robust_list(0x55555654e6a0, 24 [pid 5815] <... symlink resumed>) = 0 [pid 5814] write(3, "1000", 4 [pid 5813] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5034] <... clone resumed>, child_tidptr=0x55555654e690) = 91 [pid 5029] close(3./strace-static-x86_64: Process 5817 attached [pid 5816] <... set_robust_list resumed>) = 0 [pid 5815] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5814] <... write resumed>) = 4 [pid 5029] <... close resumed>) = 0 [pid 5817] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5816] chdir("./30" [pid 5815] <... symlink resumed>) = 0 [pid 5814] close(3 [pid 5813] <... clone3 resumed> => {parent_tid=[83]}, 88) = 83 [pid 5029] rmdir("./28" [pid 5817] <... rseq resumed>) = 0 [pid 5816] <... chdir resumed>) = 0 [pid 5815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5814] <... close resumed>) = 0 [pid 5813] rt_sigprocmask(SIG_SETMASK, [], [pid 5817] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5816] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5815] <... openat resumed>) = 3 [pid 5814] symlink("/dev/binderfs", "./binderfs" [pid 5813] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5029] <... rmdir resumed>) = 0 [pid 5817] <... set_robust_list resumed>) = 0 [pid 5816] <... prctl resumed>) = 0 [pid 5815] write(3, "1000", 4 [pid 5814] <... symlink resumed>) = 0 [pid 5813] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] mkdir("./29", 0777 [pid 5817] rt_sigprocmask(SIG_SETMASK, [], [pid 5816] setpgid(0, 0 [pid 5815] <... write resumed>) = 4 [pid 5814] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] <... futex resumed>) = 0 [pid 5817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5816] <... setpgid resumed>) = 0 [pid 5815] close(3 [pid 5814] <... futex resumed>) = 0 [pid 5813] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5029] <... mkdir resumed>) = 0 [pid 5817] memfd_create("syzkaller", 0 [pid 5816] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5815] <... close resumed>) = 0 [pid 5814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5817] <... memfd_create resumed>) = 3 [pid 5816] <... symlink resumed>) = 0 [pid 5815] symlink("/dev/binderfs", "./binderfs" [pid 5814] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5817] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5816] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5815] <... symlink resumed>) = 0 [pid 5814] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5029] <... openat resumed>) = 3 [pid 5817] <... mmap resumed>) = 0x7f4f650a0000 [pid 5816] <... symlink resumed>) = 0 [pid 5815] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... mprotect resumed>) = 0 [pid 5029] ioctl(3, LOOP_CLR_FD [pid 5816] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5815] <... futex resumed>) = 0 [pid 5814] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5029] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5816] <... symlink resumed>) = 0 [pid 5815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5814] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5029] close(3 [pid 5816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5815] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5029] <... close resumed>) = 0 ./strace-static-x86_64: Process 5818 attached [pid 5816] <... openat resumed>) = 3 [pid 5815] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5818] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5816] write(3, "1000", 4 [pid 5815] <... mprotect resumed>) = 0 [pid 5814] <... clone3 resumed> => {parent_tid=[90]}, 88) = 90 ./strace-static-x86_64: Process 5819 attached [pid 5818] <... rseq resumed>) = 0 [pid 5816] <... write resumed>) = 4 [pid 5815] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5814] rt_sigprocmask(SIG_SETMASK, [], [pid 5819] set_robust_list(0x55555654e6a0, 24 [pid 5818] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5816] close(3 [pid 5815] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5029] <... clone resumed>, child_tidptr=0x55555654e690) = 94 [pid 5819] <... set_robust_list resumed>) = 0 [pid 5818] <... set_robust_list resumed>) = 0 [pid 5816] <... close resumed>) = 0 [pid 5815] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5814] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5820 attached [pid 5819] chdir("./29" [pid 5818] rt_sigprocmask(SIG_SETMASK, [], [pid 5816] symlink("/dev/binderfs", "./binderfs" [pid 5814] <... futex resumed>) = 0 [pid 5820] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5819] <... chdir resumed>) = 0 [pid 5818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5816] <... symlink resumed>) = 0 [pid 5815] <... clone3 resumed> => {parent_tid=[88]}, 88) = 88 [pid 5814] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5820] <... rseq resumed>) = 0 [pid 5819] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5818] memfd_create("syzkaller", 0 [pid 5816] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] rt_sigprocmask(SIG_SETMASK, [], [pid 5820] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5819] <... prctl resumed>) = 0 [pid 5818] <... memfd_create resumed>) = 3 [pid 5816] <... futex resumed>) = 0 [pid 5815] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5820] <... set_robust_list resumed>) = 0 [pid 5819] setpgid(0, 0 [pid 5818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5815] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] rt_sigprocmask(SIG_SETMASK, [], [pid 5819] <... setpgid resumed>) = 0 [pid 5818] <... mmap resumed>) = 0x7f4f650a0000 [pid 5816] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5815] <... futex resumed>) = 0 [pid 5820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5819] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5815] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5820] memfd_create("syzkaller", 0) = 3 [pid 5819] <... symlink resumed>) = 0 [pid 5816] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5819] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5820] <... mmap resumed>) = 0x7f4f650a0000 [pid 5816] <... mprotect resumed>) = 0 [pid 5819] <... symlink resumed>) = 0 [pid 5816] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5819] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5816] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5819] <... symlink resumed>) = 0 [pid 5816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5821 attached ) = 3 [pid 5821] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5819] write(3, "1000", 4 [pid 5816] <... clone3 resumed> => {parent_tid=[92]}, 88) = 92 [pid 5821] <... rseq resumed>) = 0 [pid 5819] <... write resumed>) = 4 [pid 5816] rt_sigprocmask(SIG_SETMASK, [], [pid 5821] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5819] close(3 [pid 5816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5821] <... set_robust_list resumed>) = 0 [pid 5819] <... close resumed>) = 0 [pid 5816] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5821] rt_sigprocmask(SIG_SETMASK, [], [pid 5819] symlink("/dev/binderfs", "./binderfs" [pid 5816] <... futex resumed>) = 0 [pid 5821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5819] <... symlink resumed>) = 0 [pid 5816] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5821] memfd_create("syzkaller", 0 [pid 5819] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5821] <... memfd_create resumed>) = 3 [pid 5819] <... futex resumed>) = 0 [pid 5821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5821] <... mmap resumed>) = 0x7f4f650a0000 [pid 5819] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5819] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5819] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5822 attached [pid 5822] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5819] <... clone3 resumed> => {parent_tid=[95]}, 88) = 95 [pid 5822] <... rseq resumed>) = 0 [pid 5819] rt_sigprocmask(SIG_SETMASK, [], [pid 5822] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5822] <... set_robust_list resumed>) = 0 [pid 5819] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5822] rt_sigprocmask(SIG_SETMASK, [], [pid 5819] <... futex resumed>) = 0 [pid 5822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5819] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5822] memfd_create("syzkaller", 0) = 3 [pid 5822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5817] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5818] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5812] <... write resumed>) = 16777216 [pid 5812] munmap(0x7f4f650a0000, 16777216) = 0 [pid 5812] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5812] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5812] close(3) = 0 [pid 5812] mkdir("./file0", 0777) = 0 [pid 5812] mount("/dev/loop4", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5822] <... write resumed>) = 16777216 [pid 5821] <... write resumed>) = 16777216 [ 250.016175][ T5812] loop4: detected capacity change from 0 to 32768 [ 250.053094][ T5812] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [pid 5821] munmap(0x7f4f650a0000, 16777216 [pid 5822] munmap(0x7f4f650a0000, 16777216 [pid 5820] <... write resumed>) = 16777216 [pid 5818] <... write resumed>) = 16777216 [pid 5817] <... write resumed>) = 16777216 [ 250.086616][ T5812] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [pid 5818] munmap(0x7f4f650a0000, 16777216 [pid 5820] munmap(0x7f4f650a0000, 16777216 [pid 5817] munmap(0x7f4f650a0000, 16777216 [pid 5821] <... munmap resumed>) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 250.136438][ T5812] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 250.161318][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 250.175856][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [pid 5821] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5821] close(3) = 0 [pid 5821] mkdir("./file0", 0777) = 0 [ 250.184316][ T5821] loop5: detected capacity change from 0 to 32768 [ 250.213298][ T5821] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 250.264067][ T5821] CPU: 0 PID: 5821 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 250.274579][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 250.284683][ T5821] Call Trace: [ 250.287993][ T5821] [ 250.290958][ T5821] dump_stack_lvl+0x136/0x150 [ 250.295702][ T5821] sysfs_warn_dup+0x80/0xa0 [ 250.300266][ T5821] sysfs_create_dir_ns+0x237/0x290 [ 250.305427][ T5821] ? sysfs_create_mount_point+0xb0/0xb0 [ 250.311021][ T5821] ? spin_bug+0x1c0/0x1c0 [ 250.315407][ T5821] ? do_raw_spin_unlock+0x175/0x230 [ 250.320662][ T5821] kobject_add_internal+0x2c9/0x9c0 [ 250.325912][ T5821] ? kfree+0x11/0x150 [ 250.329943][ T5821] kobject_init_and_add+0x101/0x170 [ 250.334462][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 158ms [ 250.335167][ T5821] ? kobject_create_and_add+0xf0/0xf0 [ 250.348023][ T5821] ? lockdep_init_map_type+0x21e/0x810 [ 250.353534][ T5821] ? lockdep_init_map_type+0x21e/0x810 [ 250.354092][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [pid 5821] mount("/dev/loop5", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5822] <... munmap resumed>) = 0 [pid 5820] <... munmap resumed>) = 0 [pid 5818] <... munmap resumed>) = 0 [pid 5817] <... munmap resumed>) = 0 [pid 5812] <... mount resumed>) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5820] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5818] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5817] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5822] <... openat resumed>) = 4 [pid 5820] <... openat resumed>) = 4 [pid 5818] <... openat resumed>) = 4 [pid 5817] <... openat resumed>) = 4 [pid 5812] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5822] ioctl(4, LOOP_SET_FD, 3 [ 250.359037][ T5821] gfs2_sys_fs_add+0x1d5/0x450 [ 250.359073][ T5821] ? recover_store+0x170/0x170 [ 250.364329][ T5812] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 250.369065][ T5821] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.369104][ T5821] ? lockdep_hardirqs_on+0x7d/0x100 [ 250.369143][ T5821] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.369182][ T5821] gfs2_fill_super+0x1312/0x2aa0 [ 250.369229][ T5821] ? gfs2_reconfigure+0xf90/0xf90 [ 250.369264][ T5821] ? snprintf+0xbf/0x100 [pid 5820] ioctl(4, LOOP_SET_FD, 3 [pid 5818] ioctl(4, LOOP_SET_FD, 3 [pid 5817] ioctl(4, LOOP_SET_FD, 3 [pid 5812] <... openat resumed>) = 3 [pid 5822] <... ioctl resumed>) = 0 [pid 5820] <... ioctl resumed>) = 0 [pid 5812] chdir("./file0" [pid 5820] close(3 [pid 5812] <... chdir resumed>) = 0 [pid 5820] <... close resumed>) = 0 [pid 5812] ioctl(4, LOOP_CLR_FD [pid 5820] mkdir("./file0", 0777 [pid 5812] <... ioctl resumed>) = 0 [pid 5820] <... mkdir resumed>) = 0 [pid 5812] close(4 [pid 5820] mount("/dev/loop1", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5812] <... close resumed>) = 0 [pid 5822] close(3 [pid 5812] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5822] <... close resumed>) = 0 [pid 5812] <... futex resumed>) = 1 [pid 5822] mkdir("./file0", 0777 [pid 5812] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5822] <... mkdir resumed>) = 0 [pid 5822] mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5818] <... ioctl resumed>) = 0 [pid 5818] close(3) = 0 [pid 5818] mkdir("./file0", 0777) = 0 [pid 5817] <... ioctl resumed>) = 0 [pid 5817] close(3) = 0 [pid 5817] mkdir("./file0", 0777) = 0 [pid 5818] mount("/dev/loop2", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 250.396105][ T5822] loop0: detected capacity change from 0 to 32768 [ 250.398775][ T5821] ? vsprintf+0x30/0x30 [ 250.404601][ T5820] loop1: detected capacity change from 0 to 32768 [ 250.408730][ T5821] ? wait_for_completion_io_timeout+0x20/0x20 [ 250.408779][ T5821] ? set_blocksize+0x2d8/0x370 [ 250.414722][ T5818] loop2: detected capacity change from 0 to 32768 [ 250.419444][ T5821] get_tree_bdev+0x43e/0x7d0 [ 250.419490][ T5821] ? gfs2_reconfigure+0xf90/0xf90 [ 250.419526][ T5821] gfs2_get_tree+0x4e/0x270 [ 250.419559][ T5821] vfs_get_tree+0x8d/0x350 [ 250.419597][ T5821] path_mount+0x136e/0x1e70 [ 250.419637][ T5821] ? putname+0x102/0x140 [ 250.425992][ T5817] loop3: detected capacity change from 0 to 32768 [ 250.430204][ T5821] ? lockdep_hardirqs_on+0x7d/0x100 [ 250.476363][ T5818] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 250.481172][ T5821] ? finish_automount+0xa30/0xa30 [ 250.498975][ T5821] ? putname+0x102/0x140 [ 250.503269][ T5821] __x64_sys_mount+0x283/0x300 [ 250.508167][ T5821] ? copy_mnt_ns+0xb30/0xb30 [pid 5817] mount("/dev/loop3", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5811] <... futex resumed>) = 0 [pid 5811] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] <... futex resumed>) = 0 [pid 5811] <... futex resumed>) = 1 [pid 5812] openat(AT_FDCWD, "./file0", O_RDONLY [ 250.512808][ T5821] ? lockdep_hardirqs_on+0x7d/0x100 [ 250.518069][ T5821] ? _raw_spin_unlock_irq+0x2e/0x50 [ 250.523329][ T5821] ? ptrace_notify+0xfe/0x140 [ 250.528074][ T5821] do_syscall_64+0x39/0xb0 [ 250.532541][ T5821] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 250.538513][ T5821] RIP: 0033:0x7f4f6dd11c5a [ 250.539509][ T5812] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [pid 5811] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5811] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5811] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [ 250.542951][ T5821] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 250.542986][ T5821] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 250.555348][ T5820] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 250.570921][ T5821] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 250.570947][ T5821] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 250.570969][ T5821] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 250.570993][ T5821] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 250.571016][ T5821] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 250.613120][ T5812] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 250.613120][ T5812] inode = 12 2341 [ 250.613120][ T5812] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 250.618782][ T5821] [ 250.621721][ T5821] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 250.627255][ T5817] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 250.645925][ T5821] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 250.666430][ T5822] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 250.670389][ T5820] CPU: 0 PID: 5820 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 250.694396][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 250.704499][ T5820] Call Trace: [ 250.707810][ T5820] [ 250.710769][ T5820] dump_stack_lvl+0x136/0x150 [ 250.715524][ T5820] sysfs_warn_dup+0x80/0xa0 [ 250.720073][ T5820] sysfs_create_dir_ns+0x237/0x290 [ 250.725233][ T5820] ? sysfs_create_mount_point+0xb0/0xb0 [ 250.730828][ T5820] ? spin_bug+0x1c0/0x1c0 [ 250.735192][ T5820] ? do_raw_spin_unlock+0x175/0x230 [ 250.740426][ T5820] kobject_add_internal+0x2c9/0x9c0 [ 250.745655][ T5820] ? kfree+0x11/0x150 [ 250.749664][ T5820] kobject_init_and_add+0x101/0x170 [ 250.754891][ T5820] ? kobject_create_and_add+0xf0/0xf0 [ 250.760292][ T5820] ? lockdep_init_map_type+0x21e/0x810 [ 250.765811][ T5820] ? lockdep_hardirqs_on+0x7d/0x100 [ 250.771044][ T5820] ? lockdep_init_map_type+0x21e/0x810 [ 250.776561][ T5820] gfs2_sys_fs_add+0x1d5/0x450 [ 250.781391][ T5820] ? recover_store+0x170/0x170 [ 250.786187][ T5820] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 250.791962][ T5820] gfs2_fill_super+0x1312/0x2aa0 [ 250.796939][ T5820] ? gfs2_reconfigure+0xf90/0xf90 [ 250.801994][ T5820] ? snprintf+0xbf/0x100 [ 250.806274][ T5820] ? vsprintf+0x30/0x30 [ 250.810457][ T5820] ? wait_for_completion_io_timeout+0x20/0x20 [ 250.816559][ T5820] ? set_blocksize+0x2d8/0x370 [ 250.821352][ T5820] get_tree_bdev+0x43e/0x7d0 [ 250.825987][ T5820] ? gfs2_reconfigure+0xf90/0xf90 [ 250.831055][ T5820] gfs2_get_tree+0x4e/0x270 [ 250.835587][ T5820] vfs_get_tree+0x8d/0x350 [ 250.840039][ T5820] path_mount+0x136e/0x1e70 [ 250.844575][ T5820] ? putname+0x102/0x140 [ 250.848845][ T5820] ? lockdep_hardirqs_on+0x7d/0x100 [ 250.854070][ T5820] ? finish_automount+0xa30/0xa30 [ 250.859122][ T5820] ? putname+0x102/0x140 [ 250.863393][ T5820] __x64_sys_mount+0x283/0x300 [ 250.868186][ T5820] ? copy_mnt_ns+0xb30/0xb30 [ 250.872807][ T5820] ? lockdep_hardirqs_on+0x7d/0x100 [ 250.878050][ T5820] ? _raw_spin_unlock_irq+0x2e/0x50 [ 250.883307][ T5820] ? ptrace_notify+0xfe/0x140 [ 250.888022][ T5820] do_syscall_64+0x39/0xb0 [ 250.892481][ T5820] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 250.898421][ T5820] RIP: 0033:0x7f4f6dd11c5a [ 250.902868][ T5820] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 250.922526][ T5820] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 250.930973][ T5820] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 250.939052][ T5820] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 250.947086][ T5820] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 250.955078][ T5820] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [pid 5811] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 250.963073][ T5820] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 250.971082][ T5820] [ 250.983951][ T5812] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 250.993298][ T5818] CPU: 0 PID: 5818 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 251.003767][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 251.013860][ T5818] Call Trace: [ 251.017174][ T5818] [ 251.020140][ T5818] dump_stack_lvl+0x136/0x150 [ 251.023449][ T5820] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 251.024881][ T5818] sysfs_warn_dup+0x80/0xa0 [ 251.024923][ T5818] sysfs_create_dir_ns+0x237/0x290 [ 251.039870][ T5820] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 251.043325][ T5818] ? sysfs_create_mount_point+0xb0/0xb0 [ 251.043370][ T5818] ? spin_bug+0x1c0/0x1c0 [ 251.064951][ T5818] ? do_raw_spin_unlock+0x175/0x230 [ 251.070216][ T5818] kobject_add_internal+0x2c9/0x9c0 [ 251.075462][ T5818] ? kfree+0x11/0x150 [ 251.079520][ T5818] kobject_init_and_add+0x101/0x170 [ 251.084767][ T5818] ? kobject_create_and_add+0xf0/0xf0 [ 251.090186][ T5818] ? lockdep_init_map_type+0x21e/0x810 [ 251.095699][ T5818] ? lockdep_hardirqs_on+0x7d/0x100 [ 251.100959][ T5818] ? lockdep_init_map_type+0x21e/0x810 [ 251.106459][ T5818] gfs2_sys_fs_add+0x1d5/0x450 [ 251.111262][ T5818] ? recover_store+0x170/0x170 [ 251.116052][ T5818] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 251.121835][ T5818] gfs2_fill_super+0x1312/0x2aa0 [ 251.126888][ T5818] ? gfs2_reconfigure+0xf90/0xf90 [ 251.131937][ T5818] ? snprintf+0xbf/0x100 [ 251.136214][ T5818] ? vsprintf+0x30/0x30 [ 251.140397][ T5818] ? wait_for_completion_io_timeout+0x20/0x20 [ 251.146496][ T5818] ? set_blocksize+0x2d8/0x370 [ 251.151292][ T5818] get_tree_bdev+0x43e/0x7d0 [ 251.155950][ T5818] ? gfs2_reconfigure+0xf90/0xf90 [ 251.161035][ T5818] gfs2_get_tree+0x4e/0x270 [ 251.165597][ T5818] vfs_get_tree+0x8d/0x350 [ 251.170139][ T5818] path_mount+0x136e/0x1e70 [ 251.174681][ T5818] ? putname+0x102/0x140 [ 251.178956][ T5818] ? lockdep_hardirqs_on+0x7d/0x100 [ 251.184187][ T5818] ? finish_automount+0xa30/0xa30 [ 251.189251][ T5818] ? putname+0x102/0x140 [ 251.196561][ T5818] __x64_sys_mount+0x283/0x300 [ 251.201360][ T5818] ? copy_mnt_ns+0xb30/0xb30 [ 251.205981][ T5818] ? lockdep_hardirqs_on+0x7d/0x100 [ 251.211209][ T5818] ? _raw_spin_unlock_irq+0x2e/0x50 [ 251.216447][ T5818] ? ptrace_notify+0xfe/0x140 [ 251.221166][ T5818] do_syscall_64+0x39/0xb0 [ 251.225608][ T5818] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 251.231551][ T5818] RIP: 0033:0x7f4f6dd11c5a [ 251.235990][ T5818] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 251.255625][ T5818] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 251.264068][ T5818] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 251.272149][ T5818] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 251.280142][ T5818] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 251.288164][ T5818] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 251.296157][ T5818] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 251.304149][ T5818] [pid 5821] <... mount resumed>) = -1 EEXIST (File exists) [ 251.308673][ T5822] CPU: 0 PID: 5822 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 251.319151][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 251.320584][ T5812] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5812 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 251.329221][ T5822] Call Trace: [ 251.329237][ T5822] [ 251.329247][ T5822] dump_stack_lvl+0x136/0x150 [ 251.329298][ T5822] sysfs_warn_dup+0x80/0xa0 [ 251.329333][ T5822] sysfs_create_dir_ns+0x237/0x290 [ 251.329370][ T5822] ? sysfs_create_mount_point+0xb0/0xb0 [ 251.329408][ T5822] ? spin_bug+0x1c0/0x1c0 [ 251.329450][ T5822] ? do_raw_spin_unlock+0x175/0x230 [ 251.329494][ T5822] kobject_add_internal+0x2c9/0x9c0 [ 251.380393][ T5822] ? kfree+0x11/0x150 [ 251.384429][ T5822] kobject_init_and_add+0x101/0x170 [ 251.389681][ T5822] ? kobject_create_and_add+0xf0/0xf0 [ 251.393310][ T5812] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 251.395079][ T5822] ? lockdep_init_map_type+0x21e/0x810 [ 251.395126][ T5822] ? lockdep_hardirqs_on+0x7d/0x100 [ 251.414143][ T5812] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 251.414203][ T5822] ? lockdep_init_map_type+0x21e/0x810 [ 251.423397][ T5812] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 251.426844][ T5822] gfs2_sys_fs_add+0x1d5/0x450 [ 251.426883][ T5822] ? recover_store+0x170/0x170 [ 251.426928][ T5822] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 251.437561][ T5812] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 251.440458][ T5822] gfs2_fill_super+0x1312/0x2aa0 [ 251.440505][ T5822] ? gfs2_reconfigure+0xf90/0xf90 [ 251.451605][ T5812] gfs2: fsid=syz:syz.0: File system withdrawn [ 251.457397][ T5822] ? snprintf+0xbf/0x100 [ 251.457440][ T5822] ? vsprintf+0x30/0x30 [ 251.457475][ T5822] ? wait_for_completion_io_timeout+0x20/0x20 [ 251.457517][ T5822] ? set_blocksize+0x2d8/0x370 [ 251.457556][ T5822] get_tree_bdev+0x43e/0x7d0 [ 251.457596][ T5822] ? gfs2_reconfigure+0xf90/0xf90 [ 251.457634][ T5822] gfs2_get_tree+0x4e/0x270 [ 251.457669][ T5822] vfs_get_tree+0x8d/0x350 [ 251.457706][ T5822] path_mount+0x136e/0x1e70 [ 251.457746][ T5822] ? putname+0x102/0x140 [ 251.457778][ T5822] ? lockdep_hardirqs_on+0x7d/0x100 [ 251.457816][ T5822] ? finish_automount+0xa30/0xa30 [ 251.457855][ T5822] ? putname+0x102/0x140 [ 251.457886][ T5822] __x64_sys_mount+0x283/0x300 [ 251.540088][ T5822] ? copy_mnt_ns+0xb30/0xb30 [ 251.544725][ T5822] ? lockdep_hardirqs_on+0x7d/0x100 [ 251.549973][ T5822] ? _raw_spin_unlock_irq+0x2e/0x50 [ 251.555239][ T5822] ? ptrace_notify+0xfe/0x140 [ 251.559987][ T5822] do_syscall_64+0x39/0xb0 [pid 5821] ioctl(4, LOOP_CLR_FD [pid 5811] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} => {parent_tid=[89]}, 88) = 89 [pid 5811] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5829 attached [pid 5811] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5811] <... futex resumed>) = 0 [pid 5829] <... rseq resumed>) = 0 [pid 5811] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5829] set_robust_list(0x7f4f6609f9a0, 24) = 0 [ 251.564456][ T5822] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 251.570416][ T5822] RIP: 0033:0x7f4f6dd11c5a [ 251.574852][ T5822] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 251.594513][ T5822] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 251.602993][ T5822] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 251.611025][ T5822] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [pid 5829] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5829] ioctl(0, VFAT_IOCTL_READDIR_SHORT, 0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5829] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... mount resumed>) = -1 EEXIST (File exists) [ 251.619038][ T5822] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 251.627055][ T5822] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 251.635071][ T5822] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 251.643098][ T5822] [ 251.647488][ T5822] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 251.651804][ T5812] CPU: 1 PID: 5812 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 251.661584][ T5822] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 251.671815][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 251.671837][ T5812] Call Trace: [ 251.671848][ T5812] [ 251.671860][ T5812] dump_stack_lvl+0x136/0x150 [ 251.684034][ T5818] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 251.688450][ T5812] gfs2_withdraw+0xb33/0x1060 [ 251.688492][ T5812] ? gfs2_consist_inode_i+0x104/0x150 [ 251.688528][ T5812] gfs2_dirent_scan+0x32a/0x3d0 [ 251.691833][ T5818] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 251.694768][ T5812] ? gfs2_dirent_prev+0x210/0x210 [ 251.739836][ T5812] ? gfs2_dirent_prev+0x210/0x210 [ 251.744911][ T5812] gfs2_dirent_search+0x47d/0x580 [ 251.750010][ T5812] ? get_first_leaf+0x190/0x190 [ 251.754907][ T5812] ? gfs2_permission+0x256/0x3e0 [ 251.759883][ T5812] gfs2_dir_search+0x8d/0x2d0 [ 251.764599][ T5812] ? gfs2_dir_read+0x14e0/0x14e0 [ 251.769587][ T5812] gfs2_lookupi+0x481/0x640 [ 251.774123][ T5812] ? gfs2_lookup_by_inum+0x100/0x100 [ 251.779443][ T5812] ? __gfs2_lookup+0x83/0x280 [ 251.784325][ T5812] ? d_alloc_parallel+0x693/0x1530 [ 251.789468][ T5812] __gfs2_lookup+0x83/0x280 [ 251.794004][ T5812] ? gfs2_lookupi+0x640/0x640 [ 251.798729][ T5812] ? __d_lookup_rcu+0x4e0/0x4e0 [ 251.803618][ T5812] ? __d_lookup+0x289/0x4c0 [ 251.808159][ T5812] gfs2_atomic_open+0xde/0x250 [ 251.812965][ T5812] ? __gfs2_lookup+0x280/0x280 [ 251.817766][ T5812] lookup_open.isra.0+0xce2/0x1400 [ 251.822913][ T5812] ? link_path_walk.part.0+0xd60/0xd60 [ 251.828409][ T5812] ? lookup_fast+0x14e/0x520 [ 251.833119][ T5812] path_openat+0x969/0x2710 [ 251.837659][ T5812] ? path_lookupat+0x840/0x840 [ 251.842452][ T5812] ? find_held_lock+0x2d/0x110 [ 251.847246][ T5812] do_filp_open+0x1ba/0x410 [ 251.851780][ T5812] ? may_open_dev+0xf0/0xf0 [ 251.856320][ T5812] ? find_held_lock+0x2d/0x110 [ 251.861113][ T5812] ? do_raw_spin_lock+0x124/0x2b0 [ 251.866172][ T5812] ? spin_bug+0x1c0/0x1c0 [ 251.870530][ T5812] ? _raw_spin_unlock+0x28/0x40 [ 251.875420][ T5812] ? alloc_fd+0x2e4/0x750 [ 251.879785][ T5812] do_sys_openat2+0x160/0x1c0 [ 251.884496][ T5812] ? build_open_flags+0x720/0x720 [ 251.889648][ T5812] ? ptrace_notify+0xfe/0x140 [ 251.894362][ T5812] ? lock_downgrade+0x690/0x690 [ 251.899240][ T5812] __x64_sys_openat+0x143/0x1f0 [ 251.904127][ T5812] ? __ia32_sys_open+0x1c0/0x1c0 [ 251.909095][ T5812] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.914328][ T5812] ? lockdep_hardirqs_on+0x7d/0x100 [ 251.919558][ T5812] ? _raw_spin_unlock_irq+0x2e/0x50 [ 251.924789][ T5812] ? ptrace_notify+0xfe/0x140 [ 251.929516][ T5812] do_syscall_64+0x39/0xb0 [ 251.933956][ T5812] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 251.939890][ T5812] RIP: 0033:0x7f4f6dd107f9 [ 251.944323][ T5812] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 251.963955][ T5812] RSP: 002b:00007f4f6d4c0228 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.972479][ T5812] RAX: ffffffffffffffda RBX: 00007f4f6dda46e8 RCX: 00007f4f6dd107f9 [ 251.980475][ T5812] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000ffffff9c [ 251.988473][ T5812] RBP: 00007f4f6dda46e0 R08: 00007f4f6d4c06c0 R09: 00007f4f6d4c06c0 [ 251.996471][ T5812] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f6dda46ec [ 252.004470][ T5812] R13: 0030656c69662f2e R14: 00007f4f6dd5d740 R15: 00007fffaa0db528 [ 252.012468][ T5812] [pid 5820] ioctl(4, LOOP_CLR_FD [pid 5829] <... futex resumed>) = 1 [pid 5822] <... mount resumed>) = -1 EEXIST (File exists) [pid 5811] <... futex resumed>) = 0 [ 252.018223][ T5817] CPU: 0 PID: 5817 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 252.028705][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 252.038795][ T5817] Call Trace: [ 252.042104][ T5817] [ 252.045066][ T5817] dump_stack_lvl+0x136/0x150 [ 252.049810][ T5817] sysfs_warn_dup+0x80/0xa0 [ 252.054526][ T5817] sysfs_create_dir_ns+0x237/0x290 [ 252.059708][ T5817] ? sysfs_create_mount_point+0xb0/0xb0 [ 252.065310][ T5817] ? spin_bug+0x1c0/0x1c0 [ 252.069698][ T5817] ? do_raw_spin_unlock+0x175/0x230 [ 252.074959][ T5817] kobject_add_internal+0x2c9/0x9c0 [ 252.080232][ T5817] ? kfree+0x11/0x150 [ 252.084263][ T5817] kobject_init_and_add+0x101/0x170 [ 252.089514][ T5817] ? kobject_create_and_add+0xf0/0xf0 [ 252.094944][ T5817] ? lockdep_init_map_type+0x21e/0x810 [ 252.100459][ T5817] ? lockdep_hardirqs_on+0x7d/0x100 [ 252.105712][ T5817] ? lockdep_init_map_type+0x21e/0x810 [ 252.111227][ T5817] gfs2_sys_fs_add+0x1d5/0x450 [ 252.116039][ T5817] ? recover_store+0x170/0x170 [ 252.120829][ T5817] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 252.126600][ T5817] gfs2_fill_super+0x1312/0x2aa0 [ 252.131567][ T5817] ? gfs2_reconfigure+0xf90/0xf90 [ 252.136627][ T5817] ? snprintf+0xbf/0x100 [ 252.140981][ T5817] ? vsprintf+0x30/0x30 [ 252.145168][ T5817] ? wait_for_completion_io_timeout+0x20/0x20 [ 252.151268][ T5817] ? set_blocksize+0x2d8/0x370 [ 252.156064][ T5817] get_tree_bdev+0x43e/0x7d0 [ 252.160681][ T5817] ? gfs2_reconfigure+0xf90/0xf90 [ 252.165733][ T5817] gfs2_get_tree+0x4e/0x270 [ 252.170265][ T5817] vfs_get_tree+0x8d/0x350 [ 252.174811][ T5817] path_mount+0x136e/0x1e70 [ 252.179430][ T5817] ? putname+0x102/0x140 [ 252.183697][ T5817] ? lockdep_hardirqs_on+0x7d/0x100 [ 252.188925][ T5817] ? finish_automount+0xa30/0xa30 [ 252.193984][ T5817] ? putname+0x102/0x140 [ 252.198256][ T5817] __x64_sys_mount+0x283/0x300 [ 252.203050][ T5817] ? copy_mnt_ns+0xb30/0xb30 [ 252.207686][ T5817] ? lockdep_hardirqs_on+0x7d/0x100 [ 252.212915][ T5817] ? _raw_spin_unlock_irq+0x2e/0x50 [ 252.218150][ T5817] ? ptrace_notify+0xfe/0x140 [ 252.222871][ T5817] do_syscall_64+0x39/0xb0 [ 252.227311][ T5817] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 252.233247][ T5817] RIP: 0033:0x7f4f6dd11c5a [ 252.237696][ T5817] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 252.257325][ T5817] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 252.265763][ T5817] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 252.274222][ T5817] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 252.282226][ T5817] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 252.290216][ T5817] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 252.298210][ T5817] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 252.306212][ T5817] [pid 5822] ioctl(4, LOOP_CLR_FD [pid 5829] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5812] <... openat resumed>) = -1 EIO (Input/output error) [pid 5811] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5829] <... openat resumed>) = -1 EIO (Input/output error) [pid 5812] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] <... futex resumed>) = 0 [pid 5829] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] <... futex resumed>) = 0 [pid 5811] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5829] <... futex resumed>) = 0 [pid 5812] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5829] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] close(3) = 0 [pid 5811] close(4) = -1 EBADF (Bad file descriptor) [pid 5811] close(5) = -1 EBADF (Bad file descriptor) [pid 5811] close(6) = -1 EBADF (Bad file descriptor) [pid 5811] close(7) = -1 EBADF (Bad file descriptor) [pid 5811] close(8) = -1 EBADF (Bad file descriptor) [pid 5811] close(9) = -1 EBADF (Bad file descriptor) [pid 5811] close(10) = -1 EBADF (Bad file descriptor) [pid 5811] close(11) = -1 EBADF (Bad file descriptor) [pid 5811] close(12) = -1 EBADF (Bad file descriptor) [pid 5811] close(13) = -1 EBADF (Bad file descriptor) [pid 5811] close(14) = -1 EBADF (Bad file descriptor) [pid 5811] close(15) = -1 EBADF (Bad file descriptor) [pid 5811] close(16) = -1 EBADF (Bad file descriptor) [pid 5811] close(17) = -1 EBADF (Bad file descriptor) [pid 5811] close(18) = -1 EBADF (Bad file descriptor) [pid 5811] close(19) = -1 EBADF (Bad file descriptor) [pid 5811] close(20) = -1 EBADF (Bad file descriptor) [pid 5811] close(21) = -1 EBADF (Bad file descriptor) [pid 5811] close(22) = -1 EBADF (Bad file descriptor) [pid 5811] close(23) = -1 EBADF (Bad file descriptor) [pid 5811] close(24) = -1 EBADF (Bad file descriptor) [pid 5811] close(25) = -1 EBADF (Bad file descriptor) [pid 5811] close(26) = -1 EBADF (Bad file descriptor) [pid 5811] close(27) = -1 EBADF (Bad file descriptor) [pid 5811] close(28) = -1 EBADF (Bad file descriptor) [pid 5811] close(29) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5811] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5811] exit_group(0 [pid 5829] <... futex resumed>) = ? [pid 5812] <... futex resumed>) = ? [pid 5811] <... exit_group resumed>) = ? [pid 5829] +++ exited with 0 +++ [pid 5818] <... mount resumed>) = -1 EEXIST (File exists) [pid 5814] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5813] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] +++ exited with 0 +++ [pid 5811] +++ exited with 0 +++ [pid 5818] ioctl(4, LOOP_CLR_FD [ 252.316448][ T5817] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [pid 5814] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] <... futex resumed>) = 0 [pid 5814] <... futex resumed>) = 0 [pid 5813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5814] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5813] <... mmap resumed>) = 0x7f4f6607f000 [pid 5031] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=66 /* 0.66 s */} --- [pid 5815] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5814] <... mmap resumed>) = 0x7f4f6607f000 [pid 5813] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5815] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5813] <... mprotect resumed>) = 0 [pid 5814] <... mprotect resumed>) = 0 [pid 5813] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5814] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5813] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5031] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5814] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5813] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5814] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5831 attached ./strace-static-x86_64: Process 5830 attached [pid 5031] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5831] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5830] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5814] <... clone3 resumed> => {parent_tid=[91]}, 88) = 91 [pid 5813] <... clone3 resumed> => {parent_tid=[84]}, 88) = 84 [pid 5831] <... rseq resumed>) = 0 [pid 5830] <... rseq resumed>) = 0 [pid 5815] <... futex resumed>) = 0 [pid 5814] rt_sigprocmask(SIG_SETMASK, [], [pid 5813] rt_sigprocmask(SIG_SETMASK, [], [pid 5031] <... openat resumed>) = 3 [pid 5831] set_robust_list(0x7f4f6609f9a0, 24 [pid 5830] set_robust_list(0x7f4f6609f9a0, 24 [pid 5815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5813] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5031] newfstatat(3, "", [pid 5831] <... set_robust_list resumed>) = 0 [pid 5830] <... set_robust_list resumed>) = 0 [pid 5816] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5814] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5831] rt_sigprocmask(SIG_SETMASK, [], [pid 5830] rt_sigprocmask(SIG_SETMASK, [], [pid 5816] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = 0 [pid 5813] <... futex resumed>) = 0 [pid 5031] getdents64(3, [pid 5831] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5830] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5816] <... futex resumed>) = 0 [pid 5814] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5830] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5815] <... mmap resumed>) = 0x7f4f6607f000 [pid 5031] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5831] <... openat resumed>) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5031] umount2("./29/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5831] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] <... futex resumed>) = 1 [pid 5830] <... futex resumed>) = 1 [pid 5814] <... futex resumed>) = 0 [pid 5813] <... futex resumed>) = 0 [pid 5031] newfstatat(AT_FDCWD, "./29/cgroup.cpu", [pid 5831] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5830] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5814] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5814] <... futex resumed>) = 0 [pid 5813] <... futex resumed>) = 0 [pid 5816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5815] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5813] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5831] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5819] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5031] unlink("./29/cgroup.cpu" [pid 5831] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5831] <... futex resumed>) = 1 [pid 5813] <... futex resumed>) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5831] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5816] <... mmap resumed>) = 0x7f4f6607f000 [pid 5813] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5831] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5830] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5816] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5814] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] <... futex resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5831] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5819] <... futex resumed>) = 0 [pid 5813] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5831] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5831] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] <... mprotect resumed>) = 0 [pid 5815] <... mprotect resumed>) = 0 [pid 5031] unlink("./29/binderfs" [pid 5831] <... futex resumed>) = 1 [pid 5830] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5819] <... mmap resumed>) = 0x7f4f6607f000 [pid 5816] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5815] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5813] <... futex resumed>) = 0 [pid 5831] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5816] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5815] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5815] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5031] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5832 attached [pid 5832] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5815] <... clone3 resumed> => {parent_tid=[89]}, 88) = 89 [pid 5832] <... rseq resumed>) = 0 [pid 5815] rt_sigprocmask(SIG_SETMASK, [], [pid 5832] set_robust_list(0x7f4f6609f9a0, 24 [pid 5815] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5832] <... set_robust_list resumed>) = 0 [pid 5815] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] rt_sigprocmask(SIG_SETMASK, [], [pid 5815] <... futex resumed>) = 0 [pid 5832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5815] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5832] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5832] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5819] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5815] <... futex resumed>) = 0 [pid 5832] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5819] <... mprotect resumed>) = 0 [pid 5815] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5830] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5832] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5832] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5832] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5815] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5832] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5832] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5814] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5833 attached => {parent_tid=[93]}, 88) = 93 [pid 5816] rt_sigprocmask(SIG_SETMASK, [], [pid 5833] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5816] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] <... rseq resumed>) = 0 [pid 5816] <... futex resumed>) = 0 [pid 5833] set_robust_list(0x7f4f6609f9a0, 24) = 0 [pid 5833] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5833] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5833] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5830] <... futex resumed>) = 0 [pid 5814] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5814] <... futex resumed>) = 0 [pid 5830] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5814] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5830] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5816] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5819] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 5834 attached [pid 5834] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5819] <... clone3 resumed> => {parent_tid=[96]}, 88) = 96 [pid 5834] <... rseq resumed>) = 0 [pid 5819] rt_sigprocmask(SIG_SETMASK, [], [pid 5834] set_robust_list(0x7f4f6609f9a0, 24 [pid 5819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5834] <... set_robust_list resumed>) = 0 [pid 5819] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] rt_sigprocmask(SIG_SETMASK, [], [pid 5819] <... futex resumed>) = 0 [pid 5834] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5819] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5834] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5834] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5819] <... futex resumed>) = 0 [pid 5834] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5819] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5834] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5834] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5819] <... futex resumed>) = 0 [pid 5834] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5819] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5816] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... futex resumed>) = 1 [pid 5814] <... futex resumed>) = 0 [pid 5834] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5834] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [ 252.656167][ T5817] gfs2: fsid=syz:syz: error -17 adding sysfs files [pid 5834] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] <... futex resumed>) = 0 [pid 5816] <... futex resumed>) = 1 [pid 5817] <... mount resumed>) = -1 EEXIST (File exists) [pid 5817] ioctl(4, LOOP_CLR_FD [pid 5833] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5816] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5833] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5816] <... futex resumed>) = 0 [pid 5816] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5816] <... futex resumed>) = 0 [pid 5816] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5833] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5830] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5816] <... futex resumed>) = 0 [pid 5031] <... umount2 resumed>) = 0 [pid 5833] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5820] <... ioctl resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./29/file0", [pid 5820] close(4) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5820] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] close(3 [pid 5031] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5820] <... futex resumed>) = 0 [pid 5815] <... close resumed>) = 0 [pid 5820] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] close(4 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5815] close(5) = -1 EBADF (Bad file descriptor) [pid 5031] <... openat resumed>) = 4 [pid 5815] close(6 [pid 5031] newfstatat(4, "", [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] close(7 [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] getdents64(4, [pid 5815] close(8) = -1 EBADF (Bad file descriptor) [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5815] close(9 [pid 5031] getdents64(4, [pid 5821] <... ioctl resumed>) = 0 [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5821] close(4 [pid 5815] close(10 [pid 5031] close(4 [pid 5821] <... close resumed>) = 0 [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5821] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] close(11 [pid 5031] <... close resumed>) = 0 [pid 5821] <... futex resumed>) = 0 [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] rmdir("./29/file0" [pid 5821] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5818] <... ioctl resumed>) = 0 [pid 5816] close(3 [pid 5815] close(12 [pid 5818] close(4 [pid 5816] <... close resumed>) = 0 [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... rmdir resumed>) = 0 [pid 5818] <... close resumed>) = 0 [pid 5816] close(4 [pid 5815] close(13 [pid 5031] umount2("./29/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(3 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] <... futex resumed>) = 0 [pid 5816] close(5 [pid 5815] close(14 [pid 5814] <... close resumed>) = 0 [pid 5031] newfstatat(AT_FDCWD, "./29/cgroup", [pid 5818] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(4 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5816] close(6 [pid 5815] close(15 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] unlink("./29/cgroup" [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(5 [pid 5816] close(7 [pid 5815] close(16 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... unlink resumed>) = 0 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(6 [pid 5031] umount2("./29/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5816] close(8 [pid 5815] close(17 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(7 [pid 5031] newfstatat(AT_FDCWD, "./29/cgroup.net", [pid 5816] close(9 [pid 5815] close(18 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(8 [pid 5031] unlink("./29/cgroup.net" [pid 5816] close(10 [pid 5815] close(19 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(9 [pid 5031] <... unlink resumed>) = 0 [pid 5816] close(11 [pid 5815] close(20 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] getdents64(3, [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(10 [pid 5031] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5816] close(12 [pid 5815] close(21 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] close(3 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(11 [pid 5031] <... close resumed>) = 0 [pid 5816] close(13 [pid 5815] close(22 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] rmdir("./29" [pid 5822] <... ioctl resumed>) = 0 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(12 [pid 5816] close(14 [pid 5815] close(23 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... rmdir resumed>) = 0 [pid 5822] close(4 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(13 [pid 5031] mkdir("./30", 0777 [pid 5822] <... close resumed>) = 0 [pid 5816] close(15 [pid 5815] close(24 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(14 [pid 5822] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... mkdir resumed>) = 0 [pid 5822] <... futex resumed>) = 0 [pid 5816] close(16 [pid 5815] close(25 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5822] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] close(3 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(15 [pid 5031] <... openat resumed>) = 3 [pid 5819] <... close resumed>) = 0 [pid 5816] close(17 [pid 5815] close(26 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] ioctl(3, LOOP_CLR_FD [pid 5819] close(4 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(16 [pid 5031] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] close(18 [pid 5815] close(27 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] close(3 [pid 5819] close(5 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(17 [pid 5031] <... close resumed>) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] close(19 [pid 5815] close(28 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5819] close(6 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(18 [pid 5815] close(29./strace-static-x86_64: Process 5835 attached [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] close(20 [pid 5815] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5819] close(7write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5814] close(19 [pid 5835] set_robust_list(0x55555654e6a0, 24 [pid 5031] <... clone resumed>, child_tidptr=0x55555654e690) = 90 [pid 5835] <... set_robust_list resumed>) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] close(21 [pid 5815] <... write resumed>) = 156 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5835] chdir("./30" [pid 5819] close(8 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5815] exit_group(0 [pid 5814] close(20 [pid 5835] <... chdir resumed>) = 0 [pid 5832] <... futex resumed>) = ? [pid 5820] <... futex resumed>) = ? [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] close(22 [pid 5815] <... exit_group resumed>) = ? [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5832] +++ exited with 0 +++ [pid 5819] close(9 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5835] <... prctl resumed>) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] close(23 [pid 5814] close(21 [pid 5835] setpgid(0, 0 [pid 5819] close(10 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5835] <... setpgid resumed>) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] close(24 [pid 5814] close(22 [pid 5835] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5819] close(11 [pid 5816] close(25 [pid 5835] <... symlink resumed>) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(23 [pid 5835] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5820] +++ exited with 0 +++ [pid 5819] close(12 [pid 5816] close(26 [pid 5815] +++ exited with 0 +++ [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5835] <... symlink resumed>) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(24 [pid 5835] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5819] close(13 [pid 5817] <... ioctl resumed>) = 0 [pid 5816] close(27 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5835] <... symlink resumed>) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5817] close(4 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(25 [pid 5032] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=64 /* 0.64 s */} --- [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5819] close(14 [pid 5817] <... close resumed>) = 0 [pid 5816] close(28 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] <... openat resumed>) = 3 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5817] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(26 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] write(3, "1000", 4 [pid 5819] close(15 [pid 5817] <... futex resumed>) = 0 [pid 5816] close(29 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] <... write resumed>) = 4 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5817] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5816] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] close(27 [pid 5032] <... openat resumed>) = 3 [pid 5835] close(3 [pid 5819] close(16 [pid 5816] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(3 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5032] newfstatat(3, "", [pid 5835] <... close resumed>) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] <... write resumed>) = 156 [pid 5814] close(28 [pid 5813] <... close resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5835] symlink("/dev/binderfs", "./binderfs" [pid 5819] close(17 [pid 5816] exit_group(0 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(4 [pid 5032] getdents64(3, [pid 5835] <... symlink resumed>) = 0 [pid 5833] <... futex resumed>) = ? [pid 5821] <... futex resumed>) = ? [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] <... exit_group resumed>) = ? [pid 5814] close(29 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5835] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5833] +++ exited with 0 +++ [pid 5819] close(18 [pid 5814] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(5write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5032] umount2("./30/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] <... futex resumed>) = 0 [pid 5821] +++ exited with 0 +++ [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] +++ exited with 0 +++ [pid 5814] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5819] close(19 [pid 5814] <... write resumed>) = 156 [pid 5813] close(6 [pid 5032] newfstatat(AT_FDCWD, "./30/cgroup.cpu", [pid 5835] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] exit_group(0 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=91, si_uid=0, si_status=0, si_utime=0, si_stime=55 /* 0.55 s */} --- [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5835] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5830] <... futex resumed>) = ? [pid 5819] close(20 [pid 5818] <... futex resumed>) = ? [pid 5814] <... exit_group resumed>) = ? [pid 5813] close(7 [pid 5034] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] unlink("./30/cgroup.cpu" [pid 5830] +++ exited with 0 +++ [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... mprotect resumed>) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(8 [pid 5034] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] <... unlink resumed>) = 0 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... openat resumed>) = 3 [pid 5813] close(9 [pid 5034] newfstatat(3, "", [pid 5818] +++ exited with 0 +++ [pid 5814] +++ exited with 0 +++ [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5813] close(10 [pid 5034] getdents64(3, [pid 5033] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=56 /* 0.56 s */} --- [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5033] restart_syscall(<... resuming interrupted clone ...> [pid 5813] close(11 [pid 5034] umount2("./30/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] <... restart_syscall resumed>) = 0 [pid 5819] close(21 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(12 [pid 5034] newfstatat(AT_FDCWD, "./30/cgroup.cpu", [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5819] close(22 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5835] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(13 [pid 5034] unlink("./30/cgroup.cpu" [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5819] close(23 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... unlink resumed>) = 0 [pid 5033] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] unlink("./30/binderfs"./strace-static-x86_64: Process 5836 attached [pid 5835] <... clone3 resumed> => {parent_tid=[91]}, 88) = 91 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(14 [pid 5034] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] <... openat resumed>) = 3 [pid 5032] <... unlink resumed>) = 0 [pid 5836] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5835] rt_sigprocmask(SIG_SETMASK, [], [pid 5819] close(24 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(3, "", [pid 5032] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5836] <... rseq resumed>) = 0 [pid 5835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(15 [pid 5034] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5836] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5835] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] close(25 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] getdents64(3, [pid 5032] newfstatat(AT_FDCWD, "./30/file0", [pid 5836] <... set_robust_list resumed>) = 0 [pid 5835] <... futex resumed>) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(16 [pid 5034] unlink("./30/binderfs" [pid 5033] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5836] rt_sigprocmask(SIG_SETMASK, [], [pid 5835] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5819] close(26 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(17 [pid 5034] <... unlink resumed>) = 0 [pid 5033] umount2("./31/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5813] close(18 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./31/cgroup.cpu", [pid 5836] memfd_create("syzkaller", 0 [pid 5819] close(27 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] newfstatat(AT_FDCWD, "./30/file0", [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5836] <... memfd_create resumed>) = 3 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5813] close(19 [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./31/cgroup.cpu" [pid 5032] <... openat resumed>) = 4 [pid 5836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5819] close(28 [pid 5813] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] newfstatat(4, "", [pid 5030] kill(-82, SIGKILL [pid 5836] <... mmap resumed>) = 0x7f4f650a0000 [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5831] <... futex resumed>) = ? [pid 5817] <... futex resumed>) = ? [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... unlink resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] <... kill resumed>) = 0 [pid 5831] +++ killed by SIGKILL +++ [pid 5819] close(29 [pid 5817] +++ killed by SIGKILL +++ [pid 5813] +++ killed by SIGKILL +++ [pid 5034] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5033] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5819] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... openat resumed>) = 4 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] getdents64(4, [pid 5030] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=82, si_uid=0, si_status=SIGKILL, si_utime=4 /* 0.04 s */, si_stime=79 /* 0.79 s */} --- write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5819] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5034] newfstatat(4, "", [pid 5033] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5030] kill(82, SIGKILL [pid 5819] <... write resumed>) = 156 [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] getdents64(4, [pid 5030] <... kill resumed>) = 0 [pid 5819] exit_group(0 [pid 5034] getdents64(4, [pid 5033] unlink("./31/binderfs" [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5834] <... futex resumed>) = ? [pid 5822] <... futex resumed>) = ? [pid 5819] <... exit_group resumed>) = ? [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5033] <... unlink resumed>) = 0 [pid 5032] close(4 [pid 5834] +++ exited with 0 +++ [pid 5034] getdents64(4, [pid 5033] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] close(4 [pid 5033] newfstatat(AT_FDCWD, "./31/file0", [pid 5034] <... close resumed>) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] rmdir("./30/file0" [pid 5033] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... close resumed>) = 0 [pid 5032] rmdir("./30/file0" [pid 5030] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... rmdir resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... rmdir resumed>) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] umount2("./30/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] umount2("./30/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... openat resumed>) = 4 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./30/cgroup", [pid 5033] newfstatat(4, "", [pid 5030] <... openat resumed>) = 3 [pid 5822] +++ exited with 0 +++ [pid 5819] +++ exited with 0 +++ [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] newfstatat(AT_FDCWD, "./30/cgroup", [pid 5034] unlink("./30/cgroup" [pid 5033] getdents64(4, [pid 5034] <... unlink resumed>) = 0 [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5034] umount2("./30/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] getdents64(4, [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5034] newfstatat(AT_FDCWD, "./30/cgroup.net", [pid 5033] close(4 [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... close resumed>) = 0 [pid 5034] unlink("./30/cgroup.net" [pid 5033] rmdir("./31/file0" [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] newfstatat(3, "", [pid 5034] <... unlink resumed>) = 0 [pid 5033] <... rmdir resumed>) = 0 [pid 5032] unlink("./30/cgroup" [pid 5034] getdents64(3, [pid 5033] umount2("./31/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=94, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=55 /* 0.55 s */} --- [pid 5034] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... unlink resumed>) = 0 [pid 5030] getdents64(3, [pid 5034] close(3 [pid 5033] newfstatat(AT_FDCWD, "./31/cgroup", [pid 5032] umount2("./30/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... close resumed>) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] rmdir("./30" [pid 5033] unlink("./31/cgroup" [pid 5032] newfstatat(AT_FDCWD, "./30/cgroup.net", [pid 5030] umount2("./29/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... rmdir resumed>) = 0 [pid 5033] <... unlink resumed>) = 0 [pid 5034] mkdir("./31", 0777 [pid 5033] umount2("./31/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... mkdir resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... openat resumed>) = 3 [pid 5034] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5033] newfstatat(AT_FDCWD, "./31/cgroup.net", [pid 5034] <... openat resumed>) = 3 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] unlink("./30/cgroup.net" [pid 5030] newfstatat(AT_FDCWD, "./29/cgroup.cpu", [pid 5029] newfstatat(3, "", [pid 5034] ioctl(3, LOOP_CLR_FD [pid 5033] unlink("./31/cgroup.net" [pid 5034] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5033] <... unlink resumed>) = 0 [pid 5032] <... unlink resumed>) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] close(3 [pid 5033] getdents64(3, [pid 5032] getdents64(3, [pid 5030] unlink("./29/cgroup.cpu" [pid 5029] getdents64(3, [pid 5034] <... close resumed>) = 0 [pid 5033] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5034] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5033] close(3./strace-static-x86_64: Process 5837 attached ) = 0 [pid 5032] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5030] <... unlink resumed>) = 0 [pid 5029] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5837] set_robust_list(0x55555654e6a0, 24 [pid 5034] <... clone resumed>, child_tidptr=0x55555654e690) = 94 [pid 5033] rmdir("./31" [pid 5032] close(3 [pid 5030] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] umount2("./29/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5837] <... set_robust_list resumed>) = 0 [pid 5033] <... rmdir resumed>) = 0 [pid 5032] <... close resumed>) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5837] chdir("./31" [pid 5033] mkdir("./32", 0777 [pid 5029] newfstatat(AT_FDCWD, "./29/cgroup.cpu", [pid 5837] <... chdir resumed>) = 0 [pid 5033] <... mkdir resumed>) = 0 [pid 5032] rmdir("./30" [pid 5030] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... openat resumed>) = 3 [pid 5032] <... rmdir resumed>) = 0 [pid 5837] <... prctl resumed>) = 0 [pid 5033] ioctl(3, LOOP_CLR_FD [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./29/cgroup.cpu" [pid 5837] setpgid(0, 0 [pid 5033] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5032] mkdir("./31", 0777 [pid 5030] unlink("./29/binderfs" [pid 5837] <... setpgid resumed>) = 0 [pid 5033] close(3 [pid 5029] <... unlink resumed>) = 0 [pid 5033] <... close resumed>) = 0 [pid 5032] <... mkdir resumed>) = 0 [pid 5033] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5838 attached [pid 5837] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5032] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5030] <... unlink resumed>) = 0 [pid 5029] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5838] set_robust_list(0x55555654e6a0, 24 [pid 5837] <... symlink resumed>) = 0 [pid 5033] <... clone resumed>, child_tidptr=0x55555654e690) = 92 [pid 5030] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5838] <... set_robust_list resumed>) = 0 [pid 5837] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5032] <... openat resumed>) = 3 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./29/binderfs", [pid 5838] chdir("./32") = 0 [pid 5837] <... symlink resumed>) = 0 [pid 5032] ioctl(3, LOOP_CLR_FD [pid 5030] newfstatat(AT_FDCWD, "./29/file0", [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 5837] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5838] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5032] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./29/binderfs" [pid 5838] <... symlink resumed>) = 0 [pid 5837] <... symlink resumed>) = 0 [pid 5838] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5032] close(3 [pid 5030] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5838] <... symlink resumed>) = 0 [pid 5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5029] <... unlink resumed>) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5837] <... openat resumed>) = 3 [pid 5032] <... close resumed>) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5838] write(3, "1000", 4 [pid 5837] write(3, "1000", 4 [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5030] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5838] <... write resumed>) = 4 [pid 5837] <... write resumed>) = 4 [pid 5838] close(3) = 0 [pid 5838] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5839 attached ) = 0 [pid 5837] close(3 [pid 5030] <... openat resumed>) = 4 [pid 5029] newfstatat(AT_FDCWD, "./29/file0", [pid 5839] set_robust_list(0x55555654e6a0, 24 [pid 5838] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5837] <... close resumed>) = 0 [pid 5032] <... clone resumed>, child_tidptr=0x55555654e690) = 90 [pid 5030] newfstatat(4, "", [pid 5839] <... set_robust_list resumed>) = 0 [pid 5838] <... futex resumed>) = 0 [pid 5837] symlink("/dev/binderfs", "./binderfs" [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5839] chdir("./31" [pid 5838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5839] <... chdir resumed>) = 0 [pid 5838] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5837] <... symlink resumed>) = 0 [pid 5030] getdents64(4, [pid 5029] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5838] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5837] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... prctl resumed>) = 0 [pid 5838] <... mprotect resumed>) = 0 [pid 5837] <... futex resumed>) = 0 [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5839] setpgid(0, 0 [pid 5838] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5030] getdents64(4, [pid 5029] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5839] <... setpgid resumed>) = 0 [pid 5838] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5837] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5839] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5837] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5030] close(4 [pid 5029] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5840 attached [pid 5839] <... symlink resumed>) = 0 [pid 5840] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5839] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5838] <... clone3 resumed> => {parent_tid=[93]}, 88) = 93 [pid 5029] newfstatat(4, "", [pid 5840] <... rseq resumed>) = 0 [pid 5839] <... symlink resumed>) = 0 [pid 5838] rt_sigprocmask(SIG_SETMASK, [], [pid 5837] <... mprotect resumed>) = 0 [pid 5030] <... close resumed>) = 0 [pid 5840] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5839] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5837] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5030] rmdir("./29/file0" [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5840] <... set_robust_list resumed>) = 0 [pid 5839] <... symlink resumed>) = 0 [pid 5838] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5837] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5840] rt_sigprocmask(SIG_SETMASK, [], [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5838] <... futex resumed>) = 0 [pid 5837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5030] <... rmdir resumed>) = 0 [pid 5029] getdents64(4, ./strace-static-x86_64: Process 5841 attached [pid 5840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] <... openat resumed>) = 3 [pid 5838] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5030] umount2("./29/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5841] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5840] memfd_create("syzkaller", 0 [pid 5839] write(3, "1000", 4 [pid 5837] <... clone3 resumed> => {parent_tid=[95]}, 88) = 95 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] getdents64(4, [pid 5841] <... rseq resumed>) = 0 [pid 5840] <... memfd_create resumed>) = 3 [pid 5839] <... write resumed>) = 4 [pid 5837] rt_sigprocmask(SIG_SETMASK, [], [pid 5030] newfstatat(AT_FDCWD, "./29/cgroup", [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5841] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5839] close(3 [pid 5837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5841] <... set_robust_list resumed>) = 0 [pid 5840] <... mmap resumed>) = 0x7f4f650a0000 [pid 5839] <... close resumed>) = 0 [pid 5837] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] unlink("./29/cgroup" [pid 5029] close(4 [pid 5841] rt_sigprocmask(SIG_SETMASK, [], [pid 5839] symlink("/dev/binderfs", "./binderfs" [pid 5841] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] <... symlink resumed>) = 0 [pid 5837] <... futex resumed>) = 0 [pid 5030] <... unlink resumed>) = 0 [pid 5029] <... close resumed>) = 0 [pid 5839] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5841] memfd_create("syzkaller", 0 [pid 5839] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5837] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5030] umount2("./29/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] rmdir("./29/file0" [pid 5839] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5839] <... mprotect resumed>) = 0 [pid 5030] newfstatat(AT_FDCWD, "./29/cgroup.net", [pid 5029] <... rmdir resumed>) = 0 [pid 5841] <... memfd_create resumed>) = 3 [pid 5839] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5839] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] umount2("./29/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5841] <... mmap resumed>) = 0x7f4f650a0000 [pid 5839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5030] unlink("./29/cgroup.net" [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5842 attached [pid 5842] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5839] <... clone3 resumed> => {parent_tid=[91]}, 88) = 91 [pid 5842] <... rseq resumed>) = 0 [pid 5839] rt_sigprocmask(SIG_SETMASK, [], [pid 5030] <... unlink resumed>) = 0 [pid 5029] newfstatat(AT_FDCWD, "./29/cgroup", [pid 5842] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5030] getdents64(3, [pid 5842] <... set_robust_list resumed>) = 0 [pid 5839] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5842] rt_sigprocmask(SIG_SETMASK, [], [pid 5839] <... futex resumed>) = 0 [pid 5030] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5029] unlink("./29/cgroup" [pid 5842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5030] close(3 [pid 5842] memfd_create("syzkaller", 0 [pid 5029] <... unlink resumed>) = 0 [pid 5842] <... memfd_create resumed>) = 3 [pid 5030] <... close resumed>) = 0 [pid 5029] umount2("./29/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5030] rmdir("./29" [pid 5842] <... mmap resumed>) = 0x7f4f650a0000 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... rmdir resumed>) = 0 [pid 5029] newfstatat(AT_FDCWD, "./29/cgroup.net", [pid 5030] mkdir("./30", 0777 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... mkdir resumed>) = 0 [pid 5029] unlink("./29/cgroup.net" [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5029] <... unlink resumed>) = 0 [pid 5030] <... openat resumed>) = 3 [pid 5029] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5030] ioctl(3, LOOP_CLR_FD [pid 5029] close(3 [pid 5030] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5029] <... close resumed>) = 0 [pid 5029] rmdir("./29" [pid 5030] close(3 [pid 5029] <... rmdir resumed>) = 0 [pid 5030] <... close resumed>) = 0 [pid 5029] mkdir("./30", 0777 [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached , child_tidptr=0x55555654e690) = 85 [pid 5029] <... mkdir resumed>) = 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5843] set_robust_list(0x55555654e6a0, 24 [pid 5029] <... openat resumed>) = 3 [pid 5843] <... set_robust_list resumed>) = 0 [pid 5029] ioctl(3, LOOP_CLR_FD [pid 5843] chdir("./30" [pid 5029] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5843] <... chdir resumed>) = 0 [pid 5029] close(3) = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5844 attached [pid 5844] set_robust_list(0x55555654e6a0, 24 [pid 5843] setpgid(0, 0 [pid 5844] <... set_robust_list resumed>) = 0 [pid 5844] chdir("./30") = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] <... setpgid resumed>) = 0 [pid 5029] <... clone resumed>, child_tidptr=0x55555654e690) = 97 [pid 5844] setpgid(0, 0) = 0 [pid 5844] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5843] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5844] <... symlink resumed>) = 0 [pid 5844] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5843] <... symlink resumed>) = 0 [pid 5844] <... symlink resumed>) = 0 [pid 5844] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5843] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5844] <... symlink resumed>) = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] <... symlink resumed>) = 0 [pid 5844] write(3, "1000", 4) = 4 [pid 5844] close(3) = 0 [pid 5843] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5844] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5843] <... symlink resumed>) = 0 [pid 5844] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5844] <... futex resumed>) = 0 [pid 5844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5843] <... openat resumed>) = 3 [pid 5844] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5843] write(3, "1000", 4 [pid 5844] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5843] <... write resumed>) = 4 [pid 5844] <... mprotect resumed>) = 0 [pid 5843] close(3 [pid 5844] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5843] <... close resumed>) = 0 [pid 5844] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs" [pid 5844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5845 attached [pid 5843] <... symlink resumed>) = 0 [pid 5845] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5844] <... clone3 resumed> => {parent_tid=[98]}, 88) = 98 [pid 5843] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] <... rseq resumed>) = 0 [pid 5844] rt_sigprocmask(SIG_SETMASK, [], [pid 5843] <... futex resumed>) = 0 [pid 5845] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5844] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5845] rt_sigprocmask(SIG_SETMASK, [], [pid 5844] <... futex resumed>) = 0 [pid 5843] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5844] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5845] memfd_create("syzkaller", 0 [pid 5843] <... mprotect resumed>) = 0 [pid 5845] <... memfd_create resumed>) = 3 [pid 5843] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5843] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5845] <... mmap resumed>) = 0x7f4f650a0000 [pid 5843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5846 attached [pid 5846] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5843] <... clone3 resumed> => {parent_tid=[86]}, 88) = 86 [pid 5846] <... rseq resumed>) = 0 [pid 5843] rt_sigprocmask(SIG_SETMASK, [], [pid 5846] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5846] <... set_robust_list resumed>) = 0 [pid 5843] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] rt_sigprocmask(SIG_SETMASK, [], [pid 5843] <... futex resumed>) = 0 [pid 5846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5843] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5846] memfd_create("syzkaller", 0) = 3 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5841] <... write resumed>) = 16777216 [pid 5841] munmap(0x7f4f650a0000, 16777216 [pid 5836] <... write resumed>) = 16777216 [pid 5836] munmap(0x7f4f650a0000, 16777216 [pid 5842] <... write resumed>) = 16777216 [pid 5842] munmap(0x7f4f650a0000, 16777216 [pid 5841] <... munmap resumed>) = 0 [pid 5840] <... write resumed>) = 16777216 [pid 5840] munmap(0x7f4f650a0000, 16777216 [pid 5841] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5836] <... munmap resumed>) = 0 [pid 5841] ioctl(4, LOOP_SET_FD, 3 [pid 5836] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5836] ioctl(4, LOOP_SET_FD, 3 [pid 5841] <... ioctl resumed>) = 0 [pid 5841] close(3 [pid 5845] <... write resumed>) = 16777216 [pid 5841] <... close resumed>) = 0 [pid 5845] munmap(0x7f4f650a0000, 16777216 [pid 5841] mkdir("./file0", 0777) = 0 [ 255.197247][ T5841] loop5: detected capacity change from 0 to 32768 [ 255.212573][ T5836] loop4: detected capacity change from 0 to 32768 [pid 5841] mount("/dev/loop5", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5836] <... ioctl resumed>) = 0 [pid 5836] close(3) = 0 [pid 5836] mkdir("./file0", 0777) = 0 [ 255.240647][ T5841] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 255.262390][ T5836] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 255.271836][ T5841] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 255.286254][ T5836] CPU: 1 PID: 5836 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 255.296739][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 255.306830][ T5836] Call Trace: [ 255.310133][ T5836] [ 255.313082][ T5836] dump_stack_lvl+0x136/0x150 [ 255.317805][ T5836] sysfs_warn_dup+0x80/0xa0 [ 255.322344][ T5836] sysfs_create_dir_ns+0x237/0x290 [ 255.327483][ T5836] ? sysfs_create_mount_point+0xb0/0xb0 [ 255.333058][ T5836] ? spin_bug+0x1c0/0x1c0 [ 255.337419][ T5836] ? do_raw_spin_unlock+0x175/0x230 [ 255.342650][ T5836] kobject_add_internal+0x2c9/0x9c0 [ 255.347875][ T5836] ? kfree+0x11/0x150 [ 255.351884][ T5836] kobject_init_and_add+0x101/0x170 [ 255.357110][ T5836] ? kobject_create_and_add+0xf0/0xf0 [ 255.362507][ T5836] ? lockdep_init_map_type+0x21e/0x810 [ 255.367997][ T5836] ? lockdep_hardirqs_on+0x7d/0x100 [ 255.373226][ T5836] ? lockdep_init_map_type+0x21e/0x810 [ 255.378726][ T5836] gfs2_sys_fs_add+0x1d5/0x450 [ 255.383516][ T5836] ? recover_store+0x170/0x170 [ 255.388314][ T5836] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 255.394074][ T5836] gfs2_fill_super+0x1312/0x2aa0 [ 255.399042][ T5836] ? gfs2_reconfigure+0xf90/0xf90 [ 255.404094][ T5836] ? snprintf+0xbf/0x100 [ 255.408382][ T5836] ? vsprintf+0x30/0x30 [ 255.412585][ T5836] ? wait_for_completion_io_timeout+0x20/0x20 [ 255.418689][ T5836] ? set_blocksize+0x2d8/0x370 [ 255.423506][ T5836] get_tree_bdev+0x43e/0x7d0 [ 255.428143][ T5836] ? gfs2_reconfigure+0xf90/0xf90 [ 255.433204][ T5836] gfs2_get_tree+0x4e/0x270 [ 255.437738][ T5836] vfs_get_tree+0x8d/0x350 [ 255.442185][ T5836] path_mount+0x136e/0x1e70 [ 255.446737][ T5836] ? putname+0x102/0x140 [ 255.451012][ T5836] ? lockdep_hardirqs_on+0x7d/0x100 [ 255.456243][ T5836] ? finish_automount+0xa30/0xa30 [ 255.461302][ T5836] ? putname+0x102/0x140 [ 255.465574][ T5836] __x64_sys_mount+0x283/0x300 [ 255.470368][ T5836] ? copy_mnt_ns+0xb30/0xb30 [ 255.475005][ T5836] ? lockdep_hardirqs_on+0x7d/0x100 [ 255.480232][ T5836] ? _raw_spin_unlock_irq+0x2e/0x50 [ 255.485472][ T5836] ? ptrace_notify+0xfe/0x140 [ 255.490193][ T5836] do_syscall_64+0x39/0xb0 [ 255.494644][ T5836] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 255.500585][ T5836] RIP: 0033:0x7f4f6dd11c5a [ 255.505023][ T5836] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 255.524662][ T5836] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 255.533103][ T5836] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 255.541097][ T5836] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 255.549091][ T5836] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 255.557083][ T5836] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 255.565075][ T5836] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 255.573073][ T5836] [pid 5836] mount("/dev/loop4", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5842] <... munmap resumed>) = 0 [pid 5842] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5845] <... munmap resumed>) = 0 [ 255.601364][ T5841] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 255.606527][ T5836] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 255.624420][ T5084] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 255.632963][ T5084] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 255.640930][ T5842] loop1: detected capacity change from 0 to 32768 [pid 5842] ioctl(4, LOOP_SET_FD, 3 [pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5842] <... ioctl resumed>) = 0 [pid 5845] <... openat resumed>) = 4 [pid 5842] close(3 [pid 5845] ioctl(4, LOOP_SET_FD, 3 [pid 5842] <... close resumed>) = 0 [pid 5842] mkdir("./file0", 0777 [pid 5845] <... ioctl resumed>) = 0 [pid 5842] <... mkdir resumed>) = 0 [pid 5836] <... mount resumed>) = -1 EEXIST (File exists) [pid 5845] close(3 [pid 5842] mount("/dev/loop1", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5840] <... munmap resumed>) = 0 [pid 5836] ioctl(4, LOOP_CLR_FD [pid 5845] <... close resumed>) = 0 [pid 5846] <... write resumed>) = 16777216 [pid 5845] mkdir("./file0", 0777) = 0 [pid 5840] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5845] mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5840] <... openat resumed>) = 4 [ 255.647660][ T5836] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 255.662696][ T5845] loop0: detected capacity change from 0 to 32768 [pid 5840] ioctl(4, LOOP_SET_FD, 3 [pid 5846] munmap(0x7f4f650a0000, 16777216 [pid 5840] <... ioctl resumed>) = 0 [pid 5840] close(3) = 0 [pid 5840] mkdir("./file0", 0777) = 0 [ 255.693449][ T5840] loop2: detected capacity change from 0 to 32768 [ 255.702071][ T5842] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 255.714884][ T5845] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 255.724009][ T5842] CPU: 0 PID: 5842 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 255.734490][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 255.744592][ T5842] Call Trace: [ 255.747908][ T5842] [ 255.750906][ T5842] dump_stack_lvl+0x136/0x150 [ 255.755690][ T5842] sysfs_warn_dup+0x80/0xa0 [ 255.760246][ T5842] sysfs_create_dir_ns+0x237/0x290 [ 255.765420][ T5842] ? sysfs_create_mount_point+0xb0/0xb0 [ 255.771036][ T5842] ? spin_bug+0x1c0/0x1c0 [ 255.775453][ T5842] ? do_raw_spin_unlock+0x175/0x230 [ 255.780712][ T5842] kobject_add_internal+0x2c9/0x9c0 [ 255.786059][ T5842] ? kfree+0x11/0x150 [ 255.790095][ T5842] kobject_init_and_add+0x101/0x170 [ 255.795360][ T5842] ? kobject_create_and_add+0xf0/0xf0 [ 255.800787][ T5842] ? lockdep_init_map_type+0x21e/0x810 [ 255.806301][ T5842] ? lockdep_hardirqs_on+0x7d/0x100 [ 255.811552][ T5842] ? lockdep_init_map_type+0x21e/0x810 [ 255.817074][ T5842] gfs2_sys_fs_add+0x1d5/0x450 [ 255.821888][ T5842] ? recover_store+0x170/0x170 [ 255.826705][ T5842] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 255.832490][ T5842] gfs2_fill_super+0x1312/0x2aa0 [ 255.837484][ T5842] ? gfs2_reconfigure+0xf90/0xf90 [ 255.842577][ T5842] ? snprintf+0xbf/0x100 [ 255.846895][ T5842] ? vsprintf+0x30/0x30 [ 255.851108][ T5842] ? wait_for_completion_io_timeout+0x20/0x20 [ 255.853922][ T5846] loop3: detected capacity change from 0 to 32768 [ 255.857215][ T5842] ? set_blocksize+0x2d8/0x370 [ 255.857260][ T5842] get_tree_bdev+0x43e/0x7d0 [ 255.857302][ T5842] ? gfs2_reconfigure+0xf90/0xf90 [ 255.878178][ T5842] gfs2_get_tree+0x4e/0x270 [ 255.882733][ T5842] vfs_get_tree+0x8d/0x350 [ 255.887206][ T5842] path_mount+0x136e/0x1e70 [ 255.891767][ T5842] ? putname+0x102/0x140 [ 255.896161][ T5842] ? lockdep_hardirqs_on+0x7d/0x100 [ 255.901415][ T5842] ? finish_automount+0xa30/0xa30 [ 255.906481][ T5842] ? putname+0x102/0x140 [ 255.910772][ T5842] __x64_sys_mount+0x283/0x300 [ 255.915595][ T5842] ? copy_mnt_ns+0xb30/0xb30 [ 255.920247][ T5842] ? lockdep_hardirqs_on+0x7d/0x100 [ 255.925499][ T5842] ? _raw_spin_unlock_irq+0x2e/0x50 [ 255.930775][ T5842] ? ptrace_notify+0xfe/0x140 [ 255.935513][ T5842] do_syscall_64+0x39/0xb0 [ 255.939963][ T5842] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 255.945922][ T5842] RIP: 0033:0x7f4f6dd11c5a [ 255.950388][ T5842] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 255.970052][ T5842] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 255.978531][ T5842] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 255.986544][ T5842] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [pid 5840] mount("/dev/loop2", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5846] <... munmap resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5846] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5846] close(3) = 0 [pid 5846] mkdir("./file0", 0777) = 0 [ 255.994566][ T5842] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 256.002586][ T5842] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 256.010600][ T5842] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 256.018633][ T5842] [ 256.046210][ T5840] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 256.053692][ T5840] CPU: 1 PID: 5840 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 256.064159][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 256.068080][ T5842] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 256.074241][ T5840] Call Trace: [ 256.074253][ T5840] [ 256.088291][ T5842] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 256.091449][ T5840] dump_stack_lvl+0x136/0x150 [ 256.106035][ T5840] sysfs_warn_dup+0x80/0xa0 [ 256.110567][ T5840] sysfs_create_dir_ns+0x237/0x290 [ 256.115707][ T5840] ? sysfs_create_mount_point+0xb0/0xb0 [ 256.121285][ T5840] ? spin_bug+0x1c0/0x1c0 [ 256.125650][ T5840] ? do_raw_spin_unlock+0x175/0x230 [ 256.130884][ T5840] kobject_add_internal+0x2c9/0x9c0 [ 256.136112][ T5840] ? kfree+0x11/0x150 [ 256.140119][ T5840] kobject_init_and_add+0x101/0x170 [ 256.145346][ T5840] ? kobject_create_and_add+0xf0/0xf0 [ 256.150744][ T5840] ? lockdep_init_map_type+0x21e/0x810 [ 256.156253][ T5840] ? lockdep_hardirqs_on+0x7d/0x100 [ 256.161479][ T5840] ? lockdep_init_map_type+0x21e/0x810 [ 256.166974][ T5840] gfs2_sys_fs_add+0x1d5/0x450 [ 256.171763][ T5840] ? recover_store+0x170/0x170 [ 256.176553][ T5840] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 256.182328][ T5840] gfs2_fill_super+0x1312/0x2aa0 [ 256.187293][ T5840] ? gfs2_reconfigure+0xf90/0xf90 [ 256.192343][ T5840] ? snprintf+0xbf/0x100 [ 256.196614][ T5840] ? vsprintf+0x30/0x30 [ 256.200795][ T5840] ? wait_for_completion_io_timeout+0x20/0x20 [ 256.206891][ T5840] ? set_blocksize+0x2d8/0x370 [ 256.211688][ T5840] get_tree_bdev+0x43e/0x7d0 [ 256.216333][ T5840] ? gfs2_reconfigure+0xf90/0xf90 [ 256.221390][ T5840] gfs2_get_tree+0x4e/0x270 [ 256.225921][ T5840] vfs_get_tree+0x8d/0x350 [ 256.230366][ T5840] path_mount+0x136e/0x1e70 [ 256.234900][ T5840] ? putname+0x102/0x140 [ 256.239174][ T5840] ? lockdep_hardirqs_on+0x7d/0x100 [ 256.244408][ T5840] ? finish_automount+0xa30/0xa30 [ 256.249463][ T5840] ? putname+0x102/0x140 [ 256.253735][ T5840] __x64_sys_mount+0x283/0x300 [ 256.258530][ T5840] ? copy_mnt_ns+0xb30/0xb30 [ 256.263151][ T5840] ? lockdep_hardirqs_on+0x7d/0x100 [ 256.268383][ T5840] ? _raw_spin_unlock_irq+0x2e/0x50 [ 256.273624][ T5840] ? ptrace_notify+0xfe/0x140 [ 256.278344][ T5840] do_syscall_64+0x39/0xb0 [ 256.282783][ T5840] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 256.288742][ T5840] RIP: 0033:0x7f4f6dd11c5a [ 256.293178][ T5840] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 256.312815][ T5840] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 256.321253][ T5840] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 256.329246][ T5840] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 256.337245][ T5840] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 256.345241][ T5840] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 256.353237][ T5840] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 256.361235][ T5840] [ 256.370600][ T5845] CPU: 0 PID: 5845 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 256.370682][ T5846] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 256.381054][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 256.381075][ T5845] Call Trace: [ 256.381084][ T5845] [ 256.381095][ T5845] dump_stack_lvl+0x136/0x150 [ 256.409506][ T5845] sysfs_warn_dup+0x80/0xa0 [ 256.414067][ T5845] sysfs_create_dir_ns+0x237/0x290 [ 256.419232][ T5845] ? sysfs_create_mount_point+0xb0/0xb0 [ 256.424841][ T5845] ? spin_bug+0x1c0/0x1c0 [ 256.429239][ T5845] ? do_raw_spin_unlock+0x175/0x230 [ 256.434501][ T5845] kobject_add_internal+0x2c9/0x9c0 [ 256.439753][ T5845] ? kfree+0x11/0x150 [ 256.443783][ T5845] kobject_init_and_add+0x101/0x170 [ 256.449036][ T5845] ? kobject_create_and_add+0xf0/0xf0 [ 256.454463][ T5845] ? lockdep_init_map_type+0x21e/0x810 [ 256.459978][ T5845] ? lockdep_hardirqs_on+0x7d/0x100 [ 256.465227][ T5845] ? lockdep_init_map_type+0x21e/0x810 [ 256.470736][ T5845] gfs2_sys_fs_add+0x1d5/0x450 [ 256.475530][ T5845] ? recover_store+0x170/0x170 [ 256.480334][ T5845] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 256.486127][ T5845] gfs2_fill_super+0x1312/0x2aa0 [ 256.491124][ T5845] ? gfs2_reconfigure+0xf90/0xf90 [ 256.496205][ T5845] ? snprintf+0xbf/0x100 [ 256.500501][ T5845] ? vsprintf+0x30/0x30 [ 256.504712][ T5845] ? wait_for_completion_io_timeout+0x20/0x20 [ 256.510835][ T5845] ? set_blocksize+0x2d8/0x370 [ 256.515647][ T5845] get_tree_bdev+0x43e/0x7d0 [ 256.520320][ T5845] ? gfs2_reconfigure+0xf90/0xf90 [ 256.525401][ T5845] gfs2_get_tree+0x4e/0x270 [ 256.529959][ T5845] vfs_get_tree+0x8d/0x350 [ 256.534512][ T5845] path_mount+0x136e/0x1e70 [ 256.539055][ T5845] ? putname+0x102/0x140 [ 256.543325][ T5845] ? lockdep_hardirqs_on+0x7d/0x100 [ 256.548564][ T5845] ? finish_automount+0xa30/0xa30 [ 256.553650][ T5845] ? putname+0x102/0x140 [ 256.558032][ T5845] __x64_sys_mount+0x283/0x300 [ 256.562853][ T5845] ? copy_mnt_ns+0xb30/0xb30 [ 256.567497][ T5845] ? lockdep_hardirqs_on+0x7d/0x100 [ 256.572755][ T5845] ? _raw_spin_unlock_irq+0x2e/0x50 [ 256.578021][ T5845] ? ptrace_notify+0xfe/0x140 [ 256.582757][ T5845] do_syscall_64+0x39/0xb0 [ 256.587209][ T5845] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 256.593167][ T5845] RIP: 0033:0x7f4f6dd11c5a [ 256.597624][ T5845] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 256.617303][ T5845] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 256.625765][ T5845] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 256.633789][ T5845] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [pid 5846] mount("/dev/loop3", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5842] <... mount resumed>) = -1 EEXIST (File exists) [ 256.641808][ T5845] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 256.649832][ T5845] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 256.657838][ T5845] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 256.665859][ T5845] [ 256.670341][ T5084] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1037ms [ 256.683696][ T5084] gfs2: fsid=syz:syz.0: jid=0: Done [ 256.685640][ T5846] CPU: 1 PID: 5846 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 256.690360][ T5841] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 256.699764][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 256.699785][ T5846] Call Trace: [ 256.699794][ T5846] [ 256.699805][ T5846] dump_stack_lvl+0x136/0x150 [ 256.699860][ T5846] sysfs_warn_dup+0x80/0xa0 [ 256.714993][ T5845] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 256.717105][ T5846] sysfs_create_dir_ns+0x237/0x290 [ 256.717147][ T5846] ? sysfs_create_mount_point+0xb0/0xb0 [ 256.720443][ T5845] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 256.723369][ T5846] ? spin_bug+0x1c0/0x1c0 [ 256.728289][ T5840] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 256.732541][ T5846] ? do_raw_spin_unlock+0x175/0x230 [ 256.754350][ T5840] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 256.757075][ T5846] kobject_add_internal+0x2c9/0x9c0 [ 256.757117][ T5846] ? kfree+0x11/0x150 [ 256.757151][ T5846] kobject_init_and_add+0x101/0x170 [ 256.757186][ T5846] ? kobject_create_and_add+0xf0/0xf0 [ 256.813818][ T5846] ? lockdep_init_map_type+0x21e/0x810 [ 256.819317][ T5846] ? lockdep_hardirqs_on+0x7d/0x100 [ 256.824551][ T5846] ? lockdep_init_map_type+0x21e/0x810 [ 256.830047][ T5846] gfs2_sys_fs_add+0x1d5/0x450 [ 256.834853][ T5846] ? recover_store+0x170/0x170 [ 256.839656][ T5846] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 256.845514][ T5846] gfs2_fill_super+0x1312/0x2aa0 [ 256.850490][ T5846] ? gfs2_reconfigure+0xf90/0xf90 [ 256.855562][ T5846] ? snprintf+0xbf/0x100 [ 256.859854][ T5846] ? vsprintf+0x30/0x30 [ 256.864051][ T5846] ? wait_for_completion_io_timeout+0x20/0x20 [ 256.870157][ T5846] ? set_blocksize+0x2d8/0x370 [ 256.874952][ T5846] get_tree_bdev+0x43e/0x7d0 [ 256.879575][ T5846] ? gfs2_reconfigure+0xf90/0xf90 [ 256.884625][ T5846] gfs2_get_tree+0x4e/0x270 [ 256.889156][ T5846] vfs_get_tree+0x8d/0x350 [ 256.893601][ T5846] path_mount+0x136e/0x1e70 [ 256.898144][ T5846] ? putname+0x102/0x140 [ 256.902412][ T5846] ? lockdep_hardirqs_on+0x7d/0x100 [ 256.907640][ T5846] ? finish_automount+0xa30/0xa30 [ 256.912696][ T5846] ? putname+0x102/0x140 [ 256.916970][ T5846] __x64_sys_mount+0x283/0x300 [ 256.921778][ T5846] ? copy_mnt_ns+0xb30/0xb30 [ 256.926403][ T5846] ? lockdep_hardirqs_on+0x7d/0x100 [ 256.931651][ T5846] ? _raw_spin_unlock_irq+0x2e/0x50 [ 256.936884][ T5846] ? ptrace_notify+0xfe/0x140 [ 256.941602][ T5846] do_syscall_64+0x39/0xb0 [ 256.946040][ T5846] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 256.951977][ T5846] RIP: 0033:0x7f4f6dd11c5a [ 256.956410][ T5846] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 256.976045][ T5846] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 256.984486][ T5846] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 256.992475][ T5846] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [pid 5845] <... mount resumed>) = -1 EEXIST (File exists) [pid 5842] ioctl(4, LOOP_CLR_FD [pid 5841] <... mount resumed>) = 0 [pid 5840] <... mount resumed>) = -1 EEXIST (File exists) [pid 5845] ioctl(4, LOOP_CLR_FD [pid 5841] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5840] ioctl(4, LOOP_CLR_FD [pid 5841] <... openat resumed>) = 3 [pid 5841] chdir("./file0") = 0 [ 257.000464][ T5846] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 257.008472][ T5846] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 257.016475][ T5846] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 257.024469][ T5846] [pid 5841] ioctl(4, LOOP_CLR_FD) = 0 [pid 5841] close(4) = 0 [pid 5836] <... ioctl resumed>) = 0 [pid 5836] close(4) = 0 [pid 5836] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5836] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... futex resumed>) = 0 [pid 5841] <... futex resumed>) = 1 [pid 5837] <... futex resumed>) = 0 [pid 5835] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5841] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5837] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] <... futex resumed>) = 1 [pid 5836] <... futex resumed>) = 0 [pid 5837] <... futex resumed>) = 0 [pid 5836] openat(AT_FDCWD, "./file0", O_RDONLY) = 3 [pid 5836] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5836] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5835] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] <... futex resumed>) = 0 [pid 5835] <... futex resumed>) = 1 [pid 5836] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5835] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5836] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5836] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5835] <... futex resumed>) = 0 [pid 5836] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5835] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5835] <... futex resumed>) = 0 [pid 5836] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5836] <... futex resumed>) = 0 [pid 5835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5836] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] close(3) = 0 [ 257.056211][ T5846] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 257.075076][ T5846] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 257.085609][ T5841] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [pid 5835] close(4) = -1 EBADF (Bad file descriptor) [pid 5835] close(5) = -1 EBADF (Bad file descriptor) [pid 5835] close(6) = -1 EBADF (Bad file descriptor) [pid 5835] close(7) = -1 EBADF (Bad file descriptor) [pid 5835] close(8) = -1 EBADF (Bad file descriptor) [pid 5835] close(9) = -1 EBADF (Bad file descriptor) [pid 5835] close(10) = -1 EBADF (Bad file descriptor) [pid 5835] close(11) = -1 EBADF (Bad file descriptor) [pid 5835] close(12) = -1 EBADF (Bad file descriptor) [pid 5835] close(13 [pid 5846] <... mount resumed>) = -1 EEXIST (File exists) [pid 5835] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5846] ioctl(4, LOOP_CLR_FD [pid 5835] close(14) = -1 EBADF (Bad file descriptor) [pid 5835] close(15) = -1 EBADF (Bad file descriptor) [pid 5835] close(16) = -1 EBADF (Bad file descriptor) [pid 5835] close(17) = -1 EBADF (Bad file descriptor) [pid 5835] close(18 [pid 5837] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5835] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5835] close(19) = -1 EBADF (Bad file descriptor) [pid 5835] close(20) = -1 EBADF (Bad file descriptor) [pid 5835] close(21) = -1 EBADF (Bad file descriptor) [pid 5835] close(22) = -1 EBADF (Bad file descriptor) [pid 5835] close(23) = -1 EBADF (Bad file descriptor) [pid 5835] close(24) = -1 EBADF (Bad file descriptor) [pid 5835] close(25) = -1 EBADF (Bad file descriptor) [pid 5835] close(26) = -1 EBADF (Bad file descriptor) [pid 5835] close(27) = -1 EBADF (Bad file descriptor) [pid 5835] close(28) = -1 EBADF (Bad file descriptor) [pid 5835] close(29) = -1 EBADF (Bad file descriptor) [ 257.175938][ T5841] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 257.175938][ T5841] inode = 12 2341 [ 257.175938][ T5841] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [pid 5835] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory ) = 156 [pid 5835] exit_group(0 [pid 5836] <... futex resumed>) = ? [pid 5835] <... exit_group resumed>) = ? [pid 5836] +++ exited with 0 +++ [pid 5835] +++ exited with 0 +++ [pid 5031] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=58 /* 0.58 s */} --- [pid 5031] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 257.236130][ T5841] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [pid 5031] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5031] umount2("./30/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./30/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./30/cgroup.cpu") = 0 [pid 5031] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./30/binderfs") = 0 [pid 5031] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5031] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5031] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5031] close(4) = 0 [pid 5031] rmdir("./30/file0") = 0 [pid 5031] umount2("./30/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./30/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 257.293795][ T5841] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5841 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 257.329200][ T5841] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [pid 5837] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5031] unlink("./30/cgroup") = 0 [pid 5031] umount2("./30/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./30/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./30/cgroup.net" [pid 5838] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5031] <... unlink resumed>) = 0 [pid 5838] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] getdents64(3, [pid 5838] <... futex resumed>) = 0 [pid 5031] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5031] close(3 [pid 5838] <... mmap resumed>) = 0x7f4f6607f000 [pid 5031] <... close resumed>) = 0 [pid 5838] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5031] rmdir("./30" [pid 5838] <... mprotect resumed>) = 0 [pid 5031] <... rmdir resumed>) = 0 [pid 5838] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5031] mkdir("./31", 0777 [pid 5838] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5837] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... mkdir resumed>) = 0 [pid 5838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5838] <... clone3 resumed> => {parent_tid=[94]}, 88) = 94 [pid 5031] ioctl(3, LOOP_CLR_FD [pid 5838] rt_sigprocmask(SIG_SETMASK, [], [pid 5031] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5031] close(3 [pid 5838] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... close resumed>) = 0 [pid 5838] <... futex resumed>) = 0 [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5854 attached [pid 5838] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] set_robust_list(0x55555654e6a0, 24 [pid 5031] <... clone resumed>, child_tidptr=0x55555654e690) = 92 [pid 5854] <... set_robust_list resumed>) = 0 [pid 5854] chdir("./31") = 0 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5854] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5853 attached [pid 5854] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 5854] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 5854] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 5853] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 257.365939][ T5841] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 257.373691][ T5841] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [pid 5854] write(3, "1000", 4 [pid 5837] <... futex resumed>) = 0 [pid 5854] <... write resumed>) = 4 [pid 5854] close(3) = 0 [pid 5854] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5854] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5854] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5853] <... rseq resumed>) = 0 [pid 5854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5853] set_robust_list(0x7f4f6609f9a0, 24./strace-static-x86_64: Process 5855 attached [pid 5855] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5854] <... clone3 resumed> => {parent_tid=[93]}, 88) = 93 [pid 5853] <... set_robust_list resumed>) = 0 [pid 5855] <... rseq resumed>) = 0 [pid 5854] rt_sigprocmask(SIG_SETMASK, [], [pid 5855] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5854] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5853] rt_sigprocmask(SIG_SETMASK, [], [pid 5839] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5838] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5855] <... set_robust_list resumed>) = 0 [pid 5854] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5855] rt_sigprocmask(SIG_SETMASK, [], [pid 5854] <... futex resumed>) = 0 [pid 5838] <... futex resumed>) = 0 [pid 5855] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5854] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5855] memfd_create("syzkaller", 0 [pid 5839] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... mmap resumed>) = 0x7f4f6605e000 [pid 5837] <... mmap resumed>) = 0x7f4f6607f000 [pid 5855] <... memfd_create resumed>) = 3 [pid 5838] mprotect(0x7f4f6605f000, 131072, PROT_READ|PROT_WRITE [pid 5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5853] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5838] <... mprotect resumed>) = 0 [pid 5855] <... mmap resumed>) = 0x7f4f650a0000 [ 257.430267][ T5841] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 257.457226][ T5841] gfs2: fsid=syz:syz.0: File system withdrawn [ 257.487479][ T5841] CPU: 0 PID: 5841 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 257.497981][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 257.508078][ T5841] Call Trace: [ 257.511387][ T5841] [ 257.514373][ T5841] dump_stack_lvl+0x136/0x150 [ 257.519115][ T5841] gfs2_withdraw+0xb33/0x1060 [ 257.523838][ T5841] ? gfs2_consist_inode_i+0x104/0x150 [ 257.529265][ T5841] gfs2_dirent_scan+0x32a/0x3d0 [ 257.534172][ T5841] ? gfs2_dirent_prev+0x210/0x210 [ 257.539273][ T5841] ? gfs2_dirent_prev+0x210/0x210 [ 257.544360][ T5841] gfs2_dirent_search+0x47d/0x580 [ 257.549442][ T5841] ? get_first_leaf+0x190/0x190 [ 257.554367][ T5841] ? gfs2_permission+0x256/0x3e0 [ 257.559363][ T5841] gfs2_dir_search+0x8d/0x2d0 [ 257.564095][ T5841] ? gfs2_dir_read+0x14e0/0x14e0 [ 257.569092][ T5841] gfs2_lookupi+0x481/0x640 [ 257.573650][ T5841] ? gfs2_lookup_by_inum+0x100/0x100 [ 257.578989][ T5841] ? __gfs2_lookup+0x83/0x280 [ 257.583718][ T5841] ? d_alloc_parallel+0x693/0x1530 [ 257.588887][ T5841] __gfs2_lookup+0x83/0x280 [ 257.593439][ T5841] ? gfs2_lookupi+0x640/0x640 [ 257.598177][ T5841] ? __d_lookup_rcu+0x4e0/0x4e0 [ 257.603079][ T5841] ? __d_lookup+0x289/0x4c0 [ 257.607631][ T5841] gfs2_atomic_open+0xde/0x250 [ 257.612457][ T5841] ? __gfs2_lookup+0x280/0x280 [ 257.617271][ T5841] lookup_open.isra.0+0xce2/0x1400 [ 257.622441][ T5841] ? link_path_walk.part.0+0xd60/0xd60 [ 257.627968][ T5841] ? lookup_fast+0x14e/0x520 [ 257.632610][ T5841] path_openat+0x969/0x2710 [ 257.637228][ T5841] ? path_lookupat+0x840/0x840 [ 257.642045][ T5841] do_filp_open+0x1ba/0x410 [ 257.646627][ T5841] ? may_open_dev+0xf0/0xf0 [ 257.651180][ T5841] ? find_held_lock+0x2d/0x110 [ 257.655989][ T5841] ? do_raw_spin_lock+0x124/0x2b0 [ 257.661068][ T5841] ? spin_bug+0x1c0/0x1c0 [ 257.665536][ T5841] ? _raw_spin_unlock+0x28/0x40 [ 257.670450][ T5841] ? alloc_fd+0x2e4/0x750 [ 257.674842][ T5841] do_sys_openat2+0x160/0x1c0 [ 257.679586][ T5841] ? build_open_flags+0x720/0x720 [ 257.684684][ T5841] ? ptrace_notify+0xfe/0x140 [ 257.689458][ T5841] ? lock_downgrade+0x690/0x690 [ 257.694379][ T5841] __x64_sys_openat+0x143/0x1f0 [ 257.699289][ T5841] ? __ia32_sys_open+0x1c0/0x1c0 [ 257.704281][ T5841] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.709587][ T5841] ? lockdep_hardirqs_on+0x7d/0x100 [ 257.714838][ T5841] ? _raw_spin_unlock_irq+0x2e/0x50 [ 257.720100][ T5841] ? ptrace_notify+0xfe/0x140 [ 257.725026][ T5841] do_syscall_64+0x39/0xb0 [ 257.729485][ T5841] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 257.735446][ T5841] RIP: 0033:0x7f4f6dd107f9 [ 257.739899][ T5841] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 257.759562][ T5841] RSP: 002b:00007f4f6d4c0228 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.768039][ T5841] RAX: ffffffffffffffda RBX: 00007f4f6dda46e8 RCX: 00007f4f6dd107f9 [ 257.776057][ T5841] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000ffffff9c [pid 5853] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5837] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5839] <... futex resumed>) = 0 [pid 5839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5839] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5839] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5838] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6607e990, parent_tid=0x7f4f6607e990, exit_signal=0, stack=0x7f4f6605e000, stack_size=0x20300, tls=0x7f4f6607e6c0} => {parent_tid=[95]}, 88) = 95 [pid 5838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5838] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5838] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5856 attached [pid 5856] rseq(0x7f4f6607efe0, 0x20, 0, 0x53053053) = 0 [pid 5856] set_robust_list(0x7f4f6607e9a0, 24) = 0 [pid 5856] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5856] ioctl(-1, VFAT_IOCTL_READDIR_SHORT, 0) = -1 EBADF (Bad file descriptor) [pid 5856] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5838] <... futex resumed>) = 0 [pid 5856] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5838] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5838] <... futex resumed>) = 0 [pid 5839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5856] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... futex resumed>) = 0 [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] futex(0x7f4f6dda4708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5844] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5844] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5839] <... clone3 resumed> => {parent_tid=[92]}, 88) = 92 [pid 5844] <... mprotect resumed>) = 0 [pid 5844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5858 attached [pid 5858] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5844] <... clone3 resumed> => {parent_tid=[99]}, 88) = 99 [pid 5858] <... rseq resumed>) = 0 [pid 5844] rt_sigprocmask(SIG_SETMASK, [], [pid 5839] rt_sigprocmask(SIG_SETMASK, [], [pid 5858] set_robust_list(0x7f4f6609f9a0, 24 [pid 5844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5858] <... set_robust_list resumed>) = 0 [pid 5858] rt_sigprocmask(SIG_SETMASK, [], [pid 5844] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5858] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5844] <... futex resumed>) = 0 [pid 5858] <... openat resumed>) = 3 [pid 5858] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... futex resumed>) = 0 [pid 5858] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5844] <... futex resumed>) = 0 [pid 5858] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5844] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5844] <... futex resumed>) = 0 [pid 5858] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5844] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5858] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... futex resumed>) = 0 [pid 5858] <... futex resumed>) = 0 [pid 5844] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5839] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5853] <... openat resumed>) = 3 [pid 5853] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5839] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6605e000 [pid 5839] mprotect(0x7f4f6605f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5839] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5839] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6607e990, parent_tid=0x7f4f6607e990, exit_signal=0, stack=0x7f4f6605e000, stack_size=0x20300, tls=0x7f4f6607e6c0} [pid 5842] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5857 attached [pid 5843] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5857] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5843] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... rseq resumed>) = 0 [pid 5843] <... futex resumed>) = 0 [pid 5857] set_robust_list(0x7f4f6609f9a0, 24 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5857] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5859 attached [pid 5857] rt_sigprocmask(SIG_SETMASK, [], [pid 5843] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5842] close(4 [pid 5839] <... clone3 resumed> => {parent_tid=[93]}, 88) = 93 [pid 5857] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5857] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5859] rseq(0x7f4f6607efe0, 0x20, 0, 0x53053053 [pid 5843] <... mprotect resumed>) = 0 [pid 5842] <... close resumed>) = 0 [pid 5839] rt_sigprocmask(SIG_SETMASK, [], [pid 5859] <... rseq resumed>) = 0 [pid 5842] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5859] set_robust_list(0x7f4f6607e9a0, 24 [pid 5842] <... futex resumed>) = 0 [pid 5839] futex(0x7f4f6dda4708, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... set_robust_list resumed>) = 0 [pid 5842] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] <... futex resumed>) = 0 [pid 5859] rt_sigprocmask(SIG_SETMASK, [], [pid 5839] futex(0x7f4f6dda470c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 257.784074][ T5841] RBP: 00007f4f6dda46e0 R08: 00007f4f6d4c06c0 R09: 00007f4f6d4c06c0 [ 257.792102][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f6dda46ec [ 257.800130][ T5841] R13: 0030656c69662f2e R14: 00007f4f6dd5d740 R15: 00007fffaa0db528 [ 257.808259][ T5841] [pid 5859] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5857] <... openat resumed>) = 3 [pid 5843] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5859] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5857] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5859] futex(0x7f4f6dda470c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5860 attached [pid 5859] <... futex resumed>) = 1 [pid 5857] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] <... futex resumed>) = 0 [pid 5860] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5859] futex(0x7f4f6dda4708, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] <... ioctl resumed>) = 0 [pid 5843] <... clone3 resumed> => {parent_tid=[87]}, 88) = 87 [pid 5840] <... ioctl resumed>) = 0 [pid 5839] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] <... futex resumed>) = 0 [pid 5839] <... futex resumed>) = 1 [pid 5842] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5839] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5842] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5842] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5842] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] close(3 [pid 5860] <... rseq resumed>) = 0 [pid 5845] close(4 [pid 5843] rt_sigprocmask(SIG_SETMASK, [], [pid 5841] <... openat resumed>) = -1 EIO (Input/output error) [pid 5840] close(4 [pid 5839] <... close resumed>) = 0 [pid 5837] <... mprotect resumed>) = 0 [pid 5860] set_robust_list(0x7f4f6609f9a0, 24 [pid 5843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] close(4) = -1 EBADF (Bad file descriptor) [pid 5845] <... close resumed>) = 0 [pid 5840] <... close resumed>) = 0 [pid 5839] close(5) = -1 EBADF (Bad file descriptor) [pid 5839] close(6) = -1 EBADF (Bad file descriptor) [pid 5839] close(7) = -1 EBADF (Bad file descriptor) [pid 5839] close(8) = -1 EBADF (Bad file descriptor) [pid 5839] close(9) = -1 EBADF (Bad file descriptor) [pid 5839] close(10) = -1 EBADF (Bad file descriptor) [pid 5839] close(11) = -1 EBADF (Bad file descriptor) [pid 5860] <... set_robust_list resumed>) = 0 [pid 5845] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] close(12 [pid 5860] rt_sigprocmask(SIG_SETMASK, [], [pid 5845] <... futex resumed>) = 0 [pid 5844] close(3 [pid 5843] <... futex resumed>) = 0 [pid 5840] <... futex resumed>) = 0 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5845] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] <... close resumed>) = 0 [pid 5840] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] close(13 [pid 5837] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5841] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5844] close(4 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(3 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5841] <... futex resumed>) = 0 [pid 5839] close(14 [pid 5838] <... close resumed>) = 0 [pid 5837] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5860] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5844] close(5 [pid 5841] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(4 [pid 5837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5861 attached [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] close(15 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5861] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5844] close(6 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(5 [pid 5861] <... rseq resumed>) = 0 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] close(16 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5861] set_robust_list(0x7f4f6609f9a0, 24 [pid 5860] <... openat resumed>) = 3 [pid 5846] <... ioctl resumed>) = 0 [pid 5844] close(7 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(6 [pid 5837] <... clone3 resumed> => {parent_tid=[96]}, 88) = 96 [pid 5861] <... set_robust_list resumed>) = 0 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] close(17 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] rt_sigprocmask(SIG_SETMASK, [], [pid 5861] rt_sigprocmask(SIG_SETMASK, [], [pid 5860] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] close(4 [pid 5844] close(8 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(7 [pid 5837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5861] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5860] <... futex resumed>) = 1 [pid 5846] <... close resumed>) = 0 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] <... futex resumed>) = 0 [pid 5839] close(18 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5861] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5860] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] close(9 [pid 5843] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(8 [pid 5837] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5846] <... futex resumed>) = 0 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] <... futex resumed>) = 0 [pid 5839] close(19 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... futex resumed>) = 0 [pid 5861] ioctl(0, VFAT_IOCTL_READDIR_SHORT [pid 5844] close(10 [pid 5843] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5860] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5838] close(9 [pid 5846] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5861] <... ioctl resumed>, 0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] close(20 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5861] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] close(11 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(10 [pid 5861] <... futex resumed>) = 0 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] close(21 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5861] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] close(12 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(11 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] close(22 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] close(13 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(12 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] close(23 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] close(14 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(13 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] close(24 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] close(15 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(14 [pid 5860] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] close(25 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5860] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] close(16 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(15 [pid 5837] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] <... futex resumed>) = 1 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] <... futex resumed>) = 0 [pid 5839] close(26 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... futex resumed>) = 1 [pid 5841] <... futex resumed>) = 0 [pid 5860] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] close(17 [pid 5843] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(16 [pid 5841] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5837] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] <... futex resumed>) = 0 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] <... futex resumed>) = 1 [pid 5841] <... openat resumed>) = -1 EIO (Input/output error) [pid 5839] close(27 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5846] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5844] close(18 [pid 5843] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5841] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(17 [pid 5846] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5841] <... futex resumed>) = 1 [pid 5839] close(28 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... futex resumed>) = 0 [pid 5846] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] close(19 [pid 5841] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(18 [pid 5837] close(3 [pid 5846] <... futex resumed>) = 1 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] <... futex resumed>) = 0 [pid 5839] close(29 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = 0 [pid 5846] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] close(20 [pid 5843] close(3 [pid 5839] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(19 [pid 5837] close(4 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] <... close resumed>) = 0 [pid 5839] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] close(21 [pid 5843] close(4 [pid 5839] <... write resumed>) = 156 [pid 5838] close(20 [pid 5837] close(5 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5839] exit_group(0 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] <... futex resumed>) = ? [pid 5857] <... futex resumed>) = ? [pid 5844] close(22 [pid 5843] close(5 [pid 5842] <... futex resumed>) = ? [pid 5839] <... exit_group resumed>) = ? [pid 5838] close(21 [pid 5837] close(6 [pid 5859] +++ exited with 0 +++ [pid 5857] +++ exited with 0 +++ [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5842] +++ exited with 0 +++ [pid 5839] +++ exited with 0 +++ [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5844] close(23 [pid 5843] close(6 [pid 5838] close(22 [pid 5837] close(7 [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=61 /* 0.61 s */} --- [pid 5844] close(24 [pid 5843] close(7 [pid 5838] close(23 [pid 5837] close(8 [pid 5032] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5844] close(25 [pid 5838] close(24 [pid 5032] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... openat resumed>) = 3 [pid 5844] close(26 [pid 5838] close(25 [pid 5032] newfstatat(3, "", [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] close(8 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] close(9 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5844] close(27 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(26 [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] getdents64(3, [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] close(9 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] close(10 [pid 5032] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5844] close(28 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(27 [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] umount2("./31/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] close(10 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] close(11 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5844] close(29 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(28 [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] newfstatat(AT_FDCWD, "./31/cgroup.cpu", [pid 5844] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] close(11 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] close(12 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5844] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] close(29 [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] unlink("./31/cgroup.cpu" [pid 5844] <... write resumed>) = 156 [pid 5843] close(12 [pid 5838] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] close(13 [pid 5032] <... unlink resumed>) = 0 [pid 5844] exit_group(0 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5858] <... futex resumed>) = ? [pid 5845] <... futex resumed>) = ? [pid 5844] <... exit_group resumed>) = ? [pid 5843] close(13 [pid 5838] <... write resumed>) = 156 [pid 5837] close(14 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5858] +++ exited with 0 +++ [pid 5845] +++ exited with 0 +++ [pid 5844] +++ exited with 0 +++ [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] exit_group(0 [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5856] <... futex resumed>) = ? [pid 5853] <... futex resumed>) = ? [pid 5843] close(14 [pid 5840] <... futex resumed>) = ? [pid 5838] <... exit_group resumed>) = ? [pid 5837] close(15 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=97, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=68 /* 0.68 s */} --- [pid 5856] +++ exited with 0 +++ [pid 5853] +++ exited with 0 +++ [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5840] +++ exited with 0 +++ [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] close(15 [pid 5837] close(16 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] +++ exited with 0 +++ [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] unlink("./31/binderfs" [pid 5029] restart_syscall(<... resuming interrupted clone ...> [pid 5843] close(16 [pid 5837] close(17 [pid 5033] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=58 /* 0.58 s */} --- [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... unlink resumed>) = 0 [pid 5029] <... restart_syscall resumed>) = 0 [pid 5843] close(17 [pid 5837] close(18 [pid 5032] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5843] close(18 [pid 5837] close(19 [pid 5032] newfstatat(AT_FDCWD, "./31/file0", [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] close(19 [pid 5837] close(20 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5843] close(20 [pid 5837] close(21 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5843] close(21 [pid 5837] close(22 [pid 5029] <... openat resumed>) = 3 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... openat resumed>) = 3 [pid 5843] close(22 [pid 5837] close(23 [pid 5033] newfstatat(3, "", [pid 5032] <... openat resumed>) = 4 [pid 5029] newfstatat(3, "", [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] newfstatat(4, "", [pid 5843] close(23 [pid 5837] close(24 [pid 5033] getdents64(3, [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5843] close(24 [pid 5837] close(25 [pid 5033] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5032] getdents64(4, [pid 5029] getdents64(3, [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] umount2("./32/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5843] close(25 [pid 5837] close(26 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] getdents64(4, [pid 5029] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] newfstatat(AT_FDCWD, "./32/cgroup.cpu", [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5029] umount2("./30/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5843] close(26 [pid 5837] close(27 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] close(4 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5843] close(27 [pid 5837] close(28 [pid 5033] unlink("./32/cgroup.cpu" [pid 5032] <... close resumed>) = 0 [pid 5029] newfstatat(AT_FDCWD, "./30/cgroup.cpu", [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] close(28 [pid 5837] close(29 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5843] close(29 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5837] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5843] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5837] <... write resumed>) = 156 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5843] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5837] exit_group(0 [pid 5843] <... write resumed>) = 156 [pid 5841] <... futex resumed>) = ? [pid 5837] <... exit_group resumed>) = ? [pid 5843] exit_group(0 [pid 5841] +++ exited with 0 +++ [pid 5860] <... futex resumed>) = ? [pid 5846] <... futex resumed>) = ? [pid 5843] <... exit_group resumed>) = ? [pid 5861] <... futex resumed>) = ? [pid 5860] +++ exited with 0 +++ [pid 5846] +++ exited with 0 +++ [pid 5843] +++ exited with 0 +++ [pid 5033] <... unlink resumed>) = 0 [pid 5032] rmdir("./31/file0" [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... rmdir resumed>) = 0 [pid 5861] +++ exited with 0 +++ [pid 5837] +++ exited with 0 +++ [pid 5034] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=94, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=55 /* 0.55 s */} --- [pid 5032] umount2("./31/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] unlink("./30/cgroup.cpu" [pid 5034] restart_syscall(<... resuming interrupted clone ...> [pid 5030] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=85, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=71 /* 0.71 s */} --- [pid 5034] <... restart_syscall resumed>) = 0 [pid 5030] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... unlink resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5032] newfstatat(AT_FDCWD, "./31/cgroup", [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5034] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5034] umount2("./31/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./31/cgroup.cpu") = 0 [pid 5034] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./31/binderfs") = 0 [pid 5034] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] unlink("./31/cgroup" [pid 5033] unlink("./32/binderfs" [pid 5030] <... openat resumed>) = 3 [pid 5029] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5033] <... unlink resumed>) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... unlink resumed>) = 0 [pid 5030] newfstatat(3, "", [pid 5029] unlink("./30/binderfs" [pid 5033] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] umount2("./31/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] <... unlink resumed>) = 0 [pid 5030] getdents64(3, [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5033] newfstatat(AT_FDCWD, "./32/file0", [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] umount2("./30/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] newfstatat(AT_FDCWD, "./31/cgroup.net", [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5030] newfstatat(AT_FDCWD, "./30/cgroup.cpu", [pid 5029] newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... openat resumed>) = 4 [pid 5032] unlink("./31/cgroup.net" [pid 5029] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] newfstatat(4, "", [pid 5032] <... unlink resumed>) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] getdents64(3, [pid 5030] unlink("./30/cgroup.cpu" [pid 5029] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5033] getdents64(4, [pid 5029] <... openat resumed>) = 4 [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5029] newfstatat(4, "", [pid 5032] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5030] <... unlink resumed>) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] getdents64(4, [pid 5032] close(3 [pid 5030] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] getdents64(4, [pid 5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5032] <... close resumed>) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5033] close(4) = 0 [pid 5032] rmdir("./31" [pid 5029] getdents64(4, [pid 5032] <... rmdir resumed>) = 0 [pid 5033] rmdir("./32/file0" [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5033] <... rmdir resumed>) = 0 [pid 5029] close(4) = 0 [pid 5033] umount2("./32/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] mkdir("./32", 0777 [pid 5029] rmdir("./30/file0" [pid 5030] newfstatat(AT_FDCWD, "./30/binderfs", [pid 5029] <... rmdir resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... mkdir resumed>) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] umount2("./30/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] newfstatat(AT_FDCWD, "./32/cgroup", [pid 5032] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5030] unlink("./30/binderfs" [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... openat resumed>) = 3 [pid 5030] <... unlink resumed>) = 0 [pid 5029] newfstatat(AT_FDCWD, "./30/cgroup", [pid 5033] unlink("./32/cgroup" [pid 5032] ioctl(3, LOOP_CLR_FD [pid 5030] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... unlink resumed>) = 0 [pid 5032] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] unlink("./30/cgroup" [pid 5033] umount2("./32/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] close(3 [pid 5030] newfstatat(AT_FDCWD, "./30/file0", [pid 5029] <... unlink resumed>) = 0 [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] umount2("./30/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] newfstatat(AT_FDCWD, "./32/cgroup.net", [pid 5032] <... close resumed>) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5030] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5862 attached [pid 5033] unlink("./32/cgroup.net" [pid 5030] <... openat resumed>) = 4 [pid 5862] set_robust_list(0x55555654e6a0, 24 [pid 5033] <... unlink resumed>) = 0 [pid 5030] newfstatat(4, "", [pid 5029] newfstatat(AT_FDCWD, "./30/cgroup.net", [pid 5862] <... set_robust_list resumed>) = 0 [pid 5033] getdents64(3, [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5030] getdents64(4, [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5862] chdir("./32" [pid 5033] close(3 [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5029] unlink("./30/cgroup.net" [pid 5862] <... chdir resumed>) = 0 [pid 5033] <... close resumed>) = 0 [pid 5032] <... clone resumed>, child_tidptr=0x55555654e690) = 94 [pid 5030] getdents64(4, [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5033] rmdir("./32" [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5029] <... unlink resumed>) = 0 [pid 5862] <... prctl resumed>) = 0 [pid 5033] <... rmdir resumed>) = 0 [pid 5030] close(4 [pid 5862] setpgid(0, 0 [pid 5033] mkdir("./33", 0777 [pid 5030] <... close resumed>) = 0 [pid 5029] getdents64(3, [pid 5862] <... setpgid resumed>) = 0 [pid 5033] <... mkdir resumed>) = 0 [pid 5030] rmdir("./30/file0" [pid 5862] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5030] <... rmdir resumed>) = 0 [pid 5029] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5862] <... symlink resumed>) = 0 [pid 5033] <... openat resumed>) = 3 [pid 5030] umount2("./30/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5862] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5033] ioctl(3, LOOP_CLR_FD [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] close(3 [pid 5862] <... symlink resumed>) = 0 [pid 5033] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5030] newfstatat(AT_FDCWD, "./30/cgroup", [pid 5862] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5033] close(3 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... close resumed>) = 0 [pid 5862] <... symlink resumed>) = 0 [pid 5033] <... close resumed>) = 0 [pid 5030] unlink("./30/cgroup" [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5029] rmdir("./30"./strace-static-x86_64: Process 5863 attached [pid 5862] <... openat resumed>) = 3 [pid 5863] set_robust_list(0x55555654e6a0, 24 [pid 5862] write(3, "1000", 4 [pid 5033] <... clone resumed>, child_tidptr=0x55555654e690) = 96 [pid 5863] <... set_robust_list resumed>) = 0 [pid 5862] <... write resumed>) = 4 [pid 5863] chdir("./33" [pid 5862] close(3 [pid 5863] <... chdir resumed>) = 0 [pid 5862] <... close resumed>) = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5862] symlink("/dev/binderfs", "./binderfs" [pid 5863] <... prctl resumed>) = 0 [pid 5863] setpgid(0, 0) = 0 [pid 5863] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5030] <... unlink resumed>) = 0 [pid 5863] <... symlink resumed>) = 0 [pid 5862] <... symlink resumed>) = 0 [pid 5030] umount2("./30/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./30/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] unlink("./30/cgroup.net") = 0 [pid 5030] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5029] <... rmdir resumed>) = 0 [pid 5030] close(3) = 0 [pid 5030] rmdir("./30" [pid 5863] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5862] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... rmdir resumed>) = 0 [pid 5029] mkdir("./31", 0777) = 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5029] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5029] close(3 [pid 5863] <... symlink resumed>) = 0 [pid 5862] <... futex resumed>) = 0 [pid 5030] mkdir("./31", 0777 [pid 5029] <... close resumed>) = 0 [pid 5863] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5864 attached [pid 5863] <... symlink resumed>) = 0 [pid 5862] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5030] <... mkdir resumed>) = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5862] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5029] <... clone resumed>, child_tidptr=0x55555654e690) = 100 [pid 5864] set_robust_list(0x55555654e6a0, 24 [pid 5863] <... openat resumed>) = 3 [pid 5862] <... mprotect resumed>) = 0 [pid 5864] <... set_robust_list resumed>) = 0 [pid 5862] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5864] chdir("./31" [pid 5862] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5030] <... openat resumed>) = 3 [pid 5864] <... chdir resumed>) = 0 [pid 5862] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5864] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5863] write(3, "1000", 4./strace-static-x86_64: Process 5865 attached [pid 5864] <... prctl resumed>) = 0 [pid 5863] <... write resumed>) = 4 [pid 5864] setpgid(0, 0 [pid 5030] ioctl(3, LOOP_CLR_FD [pid 5863] close(3 [pid 5864] <... setpgid resumed>) = 0 [pid 5862] <... clone3 resumed> => {parent_tid=[95]}, 88) = 95 [pid 5030] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5863] <... close resumed>) = 0 [pid 5865] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053) = 0 [pid 5865] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5864] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5863] symlink("/dev/binderfs", "./binderfs" [pid 5862] rt_sigprocmask(SIG_SETMASK, [], [pid 5030] close(3 [pid 5865] <... set_robust_list resumed>) = 0 [pid 5864] <... symlink resumed>) = 0 [pid 5865] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5863] <... symlink resumed>) = 0 [pid 5030] <... close resumed>) = 0 [pid 5862] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5864] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5863] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5865] memfd_create("syzkaller", 0 [pid 5864] <... symlink resumed>) = 0 [pid 5865] <... memfd_create resumed>) = 3 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 ./strace-static-x86_64: Process 5866 attached [pid 5864] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5863] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 0 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5862] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5864] <... symlink resumed>) = 0 [pid 5866] set_robust_list(0x55555654e6a0, 24 [pid 5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5863] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5030] <... clone resumed>, child_tidptr=0x55555654e690) = 88 [pid 5863] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5863] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5866] <... set_robust_list resumed>) = 0 [pid 5864] <... openat resumed>) = 3 [pid 5863] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5867 attached [pid 5867] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053) = 0 [pid 5867] set_robust_list(0x7f4f6d4c09a0, 24) = 0 [pid 5867] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5864] write(3, "1000", 4 [pid 5867] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5866] chdir("./31" [pid 5864] <... write resumed>) = 4 [pid 5863] <... clone3 resumed> => {parent_tid=[97]}, 88) = 97 [pid 5866] <... chdir resumed>) = 0 [pid 5864] close(3 [pid 5863] rt_sigprocmask(SIG_SETMASK, [], [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5864] <... close resumed>) = 0 [pid 5863] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5864] symlink("/dev/binderfs", "./binderfs" [pid 5866] <... prctl resumed>) = 0 [pid 5863] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... symlink resumed>) = 0 [pid 5867] <... futex resumed>) = 0 [pid 5866] setpgid(0, 0 [pid 5864] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... futex resumed>) = 1 [pid 5867] memfd_create("syzkaller", 0) = 3 [pid 5866] <... setpgid resumed>) = 0 [pid 5864] <... futex resumed>) = 0 [pid 5863] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5866] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5866] <... symlink resumed>) = 0 [pid 5864] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5866] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5864] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5866] <... symlink resumed>) = 0 [pid 5864] <... mprotect resumed>) = 0 [pid 5866] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5864] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5866] <... symlink resumed>) = 0 [pid 5864] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5866] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5868 attached [pid 5866] write(3, "1000", 4 [pid 5868] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5864] <... clone3 resumed> => {parent_tid=[101]}, 88) = 101 [pid 5866] <... write resumed>) = 4 [pid 5864] rt_sigprocmask(SIG_SETMASK, [], [pid 5868] <... rseq resumed>) = 0 [pid 5866] close(3 [pid 5868] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5866] <... close resumed>) = 0 [pid 5868] <... set_robust_list resumed>) = 0 [pid 5866] symlink("/dev/binderfs", "./binderfs" [pid 5864] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5868] rt_sigprocmask(SIG_SETMASK, [], [pid 5866] <... symlink resumed>) = 0 [pid 5868] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5864] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5866] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5868] memfd_create("syzkaller", 0 [pid 5866] <... futex resumed>) = 0 [pid 5866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5868] <... memfd_create resumed>) = 3 [pid 5866] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5866] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5868] <... mmap resumed>) = 0x7f4f650a0000 [pid 5866] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5866] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5869 attached [pid 5869] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053) = 0 [pid 5869] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5866] <... clone3 resumed> => {parent_tid=[89]}, 88) = 89 [pid 5869] <... set_robust_list resumed>) = 0 [pid 5866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5869] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5866] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] memfd_create("syzkaller", 0 [pid 5866] <... futex resumed>) = 0 [pid 5866] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5869] <... memfd_create resumed>) = 3 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5034] <... umount2 resumed>) = 0 [pid 5034] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5034] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5034] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5034] close(4) = 0 [pid 5034] rmdir("./31/file0") = 0 [pid 5034] umount2("./31/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./31/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./31/cgroup") = 0 [pid 5034] umount2("./31/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./31/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./31/cgroup.net") = 0 [pid 5034] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5034] close(3) = 0 [pid 5034] rmdir("./31") = 0 [pid 5034] mkdir("./32", 0777) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5034] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5034] close(3) = 0 [pid 5034] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5870 attached , child_tidptr=0x55555654e690) = 97 [pid 5870] set_robust_list(0x55555654e6a0, 24) = 0 [pid 5870] chdir("./32") = 0 [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5870] setpgid(0, 0) = 0 [pid 5870] symlink("/syzcgroup/unified/syz5", "./cgroup") = 0 [pid 5870] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu") = 0 [pid 5870] symlink("/syzcgroup/net/syz5", "./cgroup.net") = 0 [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5870] write(3, "1000", 4) = 4 [pid 5870] close(3) = 0 [pid 5870] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5870] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5870] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5870] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5871 attached [pid 5871] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5870] <... clone3 resumed> => {parent_tid=[98]}, 88) = 98 [pid 5871] <... rseq resumed>) = 0 [pid 5870] rt_sigprocmask(SIG_SETMASK, [], [pid 5871] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5871] <... set_robust_list resumed>) = 0 [pid 5870] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5871] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5870] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5871] memfd_create("syzkaller", 0) = 3 [pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5855] <... write resumed>) = 16777216 [pid 5855] munmap(0x7f4f650a0000, 16777216) = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5855] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5855] close(3) = 0 [pid 5855] mkdir("./file0", 0777) = 0 [pid 5855] mount("/dev/loop4", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 259.198383][ T5855] loop4: detected capacity change from 0 to 32768 [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 259.266353][ T5855] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 259.274587][ T5855] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [pid 5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 259.335325][ T5855] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 259.390139][ T5084] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 259.398641][ T5084] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 259.570123][ T5084] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 171ms [ 259.620531][ T5084] gfs2: fsid=syz:syz.0: jid=0: Done [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5855] <... mount resumed>) = 0 [pid 5855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5855] chdir("./file0") = 0 [pid 5855] ioctl(4, LOOP_CLR_FD) = 0 [pid 5855] close(4) = 0 [pid 5855] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5854] <... futex resumed>) = 0 [pid 5855] openat(AT_FDCWD, "./file0", O_RDONLY [ 259.655864][ T5855] gfs2: fsid=syz:syz.0: first mount done, others may mount [pid 5854] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5854] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5854] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 259.697090][ T5855] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [ 259.705564][ T5855] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 259.705564][ T5855] inode = 12 2341 [ 259.705564][ T5855] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [pid 5854] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5854] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5854] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5854] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5854] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} => {parent_tid=[94]}, 88) = 94 [pid 5854] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5854] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5854] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5873 attached [pid 5873] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053) = 0 [pid 5873] set_robust_list(0x7f4f6609f9a0, 24) = 0 [pid 5873] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5873] ioctl(0, VFAT_IOCTL_READDIR_SHORT, 0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5873] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5854] <... futex resumed>) = 0 [pid 5873] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5854] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5854] <... futex resumed>) = 0 [ 259.802097][ T5855] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [pid 5873] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [ 259.854540][ T5873] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [ 259.864077][ T5855] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5855 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 259.887595][ T5873] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 259.887595][ T5873] inode = 12 2341 [ 259.887595][ T5873] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 259.912344][ T5855] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5873 [syz-executor676] __gfs2_lookup+0x83/0x280 [pid 5854] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 259.981502][ T5855] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 260.026704][ T5873] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 260.065379][ T5855] gfs2: fsid=syz:syz.0: about to withdraw this file system [pid 5869] <... write resumed>) = 16777216 [pid 5869] munmap(0x7f4f650a0000, 16777216 [pid 5868] <... write resumed>) = 16777216 [pid 5868] munmap(0x7f4f650a0000, 16777216 [pid 5865] <... write resumed>) = 16777216 [ 260.107815][ T5873] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5855 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 260.146004][ T5855] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 260.188109][ T5873] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5873 [syz-executor676] __gfs2_lookup+0x83/0x280 [pid 5865] munmap(0x7f4f650a0000, 16777216 [pid 5869] <... munmap resumed>) = 0 [ 260.236713][ T5855] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 260.250691][ T5873] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [pid 5869] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5868] <... munmap resumed>) = 0 [pid 5869] <... openat resumed>) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3) = 0 [ 260.300831][ T5855] gfs2: fsid=syz:syz.0: File system withdrawn [ 260.319021][ T5869] loop3: detected capacity change from 0 to 32768 [ 260.330349][ T5855] CPU: 0 PID: 5855 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 260.340836][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 260.350951][ T5855] Call Trace: [ 260.354263][ T5855] [ 260.357228][ T5855] dump_stack_lvl+0x136/0x150 [ 260.361975][ T5855] gfs2_withdraw+0xb33/0x1060 [ 260.366703][ T5855] ? gfs2_consist_inode_i+0x104/0x150 [ 260.372130][ T5855] gfs2_dirent_scan+0x32a/0x3d0 [ 260.377043][ T5855] ? gfs2_dirent_prev+0x210/0x210 [ 260.382135][ T5855] ? gfs2_dirent_prev+0x210/0x210 [ 260.387231][ T5855] gfs2_dirent_search+0x47d/0x580 [ 260.392329][ T5855] ? get_first_leaf+0x190/0x190 [ 260.397240][ T5855] ? gfs2_permission+0x256/0x3e0 [ 260.402232][ T5855] gfs2_dir_search+0x8d/0x2d0 [ 260.406976][ T5855] ? gfs2_dir_read+0x14e0/0x14e0 [ 260.411977][ T5855] gfs2_lookupi+0x481/0x640 [ 260.416537][ T5855] ? gfs2_lookup_by_inum+0x100/0x100 [ 260.421880][ T5855] ? __gfs2_lookup+0x83/0x280 [ 260.426611][ T5855] ? d_alloc_parallel+0x693/0x1530 [ 260.431781][ T5855] __gfs2_lookup+0x83/0x280 [ 260.436339][ T5855] ? gfs2_lookupi+0x640/0x640 [ 260.441069][ T5855] ? __d_lookup_rcu+0x4e0/0x4e0 [ 260.445969][ T5855] ? __d_lookup+0x289/0x4c0 [ 260.450521][ T5855] gfs2_atomic_open+0xde/0x250 [ 260.455337][ T5855] ? __gfs2_lookup+0x280/0x280 [ 260.460150][ T5855] lookup_open.isra.0+0xce2/0x1400 [ 260.465323][ T5855] ? link_path_walk.part.0+0xd60/0xd60 [ 260.470840][ T5855] ? lookup_fast+0x14e/0x520 [ 260.475487][ T5855] path_openat+0x969/0x2710 [ 260.480044][ T5855] ? path_lookupat+0x840/0x840 [ 260.484869][ T5855] do_filp_open+0x1ba/0x410 [ 260.489455][ T5855] ? may_open_dev+0xf0/0xf0 [ 260.494010][ T5855] ? find_held_lock+0x2d/0x110 [pid 5867] <... write resumed>) = 16777216 [ 260.498829][ T5855] ? do_raw_spin_lock+0x124/0x2b0 [ 260.503928][ T5855] ? spin_bug+0x1c0/0x1c0 [ 260.508323][ T5855] ? _raw_spin_unlock+0x28/0x40 [ 260.513226][ T5855] ? alloc_fd+0x2e4/0x750 [ 260.517621][ T5855] do_sys_openat2+0x160/0x1c0 [ 260.522370][ T5855] ? build_open_flags+0x720/0x720 [ 260.527473][ T5855] ? ptrace_notify+0xfe/0x140 [ 260.532221][ T5855] ? lock_downgrade+0x690/0x690 [ 260.537136][ T5855] __x64_sys_openat+0x143/0x1f0 [ 260.542051][ T5855] ? __ia32_sys_open+0x1c0/0x1c0 [ 260.547047][ T5855] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.552309][ T5855] ? lockdep_hardirqs_on+0x7d/0x100 [ 260.557564][ T5855] ? _raw_spin_unlock_irq+0x2e/0x50 [ 260.562827][ T5855] ? ptrace_notify+0xfe/0x140 [ 260.567566][ T5855] do_syscall_64+0x39/0xb0 [ 260.572029][ T5855] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 260.578004][ T5855] RIP: 0033:0x7f4f6dd107f9 [ 260.582461][ T5855] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [pid 5867] munmap(0x7f4f650a0000, 16777216 [pid 5871] <... write resumed>) = 16777216 [ 260.602128][ T5855] RSP: 002b:00007f4f6d4c0228 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.610606][ T5855] RAX: ffffffffffffffda RBX: 00007f4f6dda46e8 RCX: 00007f4f6dd107f9 [ 260.618652][ T5855] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000ffffff9c [ 260.626675][ T5855] RBP: 00007f4f6dda46e0 R08: 00007f4f6d4c06c0 R09: 00007f4f6d4c06c0 [ 260.634696][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f6dda46ec [ 260.642718][ T5855] R13: 0030656c69662f2e R14: 00007f4f6dd5d740 R15: 00007fffaa0db528 [pid 5871] munmap(0x7f4f650a0000, 16777216 [pid 5873] <... openat resumed>) = -1 EIO (Input/output error) [pid 5869] close(3 [pid 5868] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5865] <... munmap resumed>) = 0 [pid 5855] <... openat resumed>) = -1 EIO (Input/output error) [pid 5873] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... close resumed>) = 0 [pid 5868] <... openat resumed>) = 4 [pid 5865] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5855] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] close(3 [pid 5873] <... futex resumed>) = 0 [pid 5869] mkdir("./file0", 0777 [pid 5868] ioctl(4, LOOP_SET_FD, 3 [pid 5865] <... openat resumed>) = 4 [pid 5855] <... futex resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5873] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5869] <... mkdir resumed>) = 0 [ 260.650742][ T5855] [pid 5854] close(4) = -1 EBADF (Bad file descriptor) [pid 5869] mount("/dev/loop3", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5865] ioctl(4, LOOP_SET_FD, 3 [pid 5855] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5854] close(5) = -1 EBADF (Bad file descriptor) [pid 5854] close(6) = -1 EBADF (Bad file descriptor) [pid 5854] close(7 [pid 5868] <... ioctl resumed>) = 0 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5868] close(3 [pid 5854] close(8 [pid 5868] <... close resumed>) = 0 [pid 5865] <... ioctl resumed>) = 0 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5868] mkdir("./file0", 0777 [pid 5865] close(3 [pid 5854] close(9 [pid 5868] <... mkdir resumed>) = 0 [pid 5865] <... close resumed>) = 0 [pid 5854] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5868] mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5867] <... munmap resumed>) = 0 [pid 5865] mkdir("./file0", 0777 [pid 5854] close(10) = -1 EBADF (Bad file descriptor) [pid 5865] <... mkdir resumed>) = 0 [pid 5854] close(11) = -1 EBADF (Bad file descriptor) [pid 5854] close(12) = -1 EBADF (Bad file descriptor) [pid 5854] close(13) = -1 EBADF (Bad file descriptor) [pid 5854] close(14) = -1 EBADF (Bad file descriptor) [pid 5854] close(15) = -1 EBADF (Bad file descriptor) [pid 5854] close(16) = -1 EBADF (Bad file descriptor) [pid 5854] close(17) = -1 EBADF (Bad file descriptor) [pid 5854] close(18) = -1 EBADF (Bad file descriptor) [pid 5854] close(19) = -1 EBADF (Bad file descriptor) [pid 5854] close(20) = -1 EBADF (Bad file descriptor) [ 260.683541][ T5868] loop0: detected capacity change from 0 to 32768 [ 260.692258][ T5865] loop1: detected capacity change from 0 to 32768 [ 260.716637][ T5869] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [pid 5854] close(21) = -1 EBADF (Bad file descriptor) [pid 5854] close(22) = -1 EBADF (Bad file descriptor) [pid 5854] close(23) = -1 EBADF (Bad file descriptor) [pid 5854] close(24) = -1 EBADF (Bad file descriptor) [pid 5854] close(25) = -1 EBADF (Bad file descriptor) [pid 5854] close(26) = -1 EBADF (Bad file descriptor) [pid 5854] close(27) = -1 EBADF (Bad file descriptor) [pid 5854] close(28) = -1 EBADF (Bad file descriptor) [pid 5854] close(29) = -1 EBADF (Bad file descriptor) [pid 5854] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory ) = 156 [pid 5854] exit_group(0 [pid 5873] <... futex resumed>) = ? [pid 5854] <... exit_group resumed>) = ? [pid 5873] +++ exited with 0 +++ [ 260.724082][ T5869] CPU: 0 PID: 5869 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 260.734559][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 260.744662][ T5869] Call Trace: [ 260.748001][ T5869] [ 260.750983][ T5869] dump_stack_lvl+0x136/0x150 [ 260.755831][ T5869] sysfs_warn_dup+0x80/0xa0 [ 260.760417][ T5869] sysfs_create_dir_ns+0x237/0x290 [ 260.765579][ T5869] ? sysfs_create_mount_point+0xb0/0xb0 [ 260.771174][ T5869] ? spin_bug+0x1c0/0x1c0 [ 260.775561][ T5869] ? do_raw_spin_unlock+0x175/0x230 [ 260.780829][ T5869] kobject_add_internal+0x2c9/0x9c0 [ 260.786062][ T5869] ? kfree+0x11/0x150 [ 260.790072][ T5869] kobject_init_and_add+0x101/0x170 [ 260.795307][ T5869] ? kobject_create_and_add+0xf0/0xf0 [ 260.800723][ T5869] ? lockdep_init_map_type+0x21e/0x810 [ 260.806234][ T5869] ? lockdep_hardirqs_on+0x7d/0x100 [ 260.811505][ T5869] ? lockdep_init_map_type+0x21e/0x810 [ 260.817013][ T5869] gfs2_sys_fs_add+0x1d5/0x450 [ 260.821819][ T5869] ? recover_store+0x170/0x170 [ 260.826636][ T5869] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 260.832572][ T5869] gfs2_fill_super+0x1312/0x2aa0 [ 260.837575][ T5869] ? gfs2_reconfigure+0xf90/0xf90 [ 260.842660][ T5869] ? snprintf+0xbf/0x100 [ 260.846933][ T5869] ? vsprintf+0x30/0x30 [ 260.851119][ T5869] ? wait_for_completion_io_timeout+0x20/0x20 [ 260.857216][ T5869] ? set_blocksize+0x2d8/0x370 [ 260.862009][ T5869] get_tree_bdev+0x43e/0x7d0 [ 260.866628][ T5869] ? gfs2_reconfigure+0xf90/0xf90 [ 260.871681][ T5869] gfs2_get_tree+0x4e/0x270 [ 260.876213][ T5869] vfs_get_tree+0x8d/0x350 [ 260.880666][ T5869] path_mount+0x136e/0x1e70 [ 260.885201][ T5869] ? putname+0x102/0x140 [ 260.889463][ T5869] ? lockdep_hardirqs_on+0x7d/0x100 [ 260.894688][ T5869] ? finish_automount+0xa30/0xa30 [ 260.899756][ T5869] ? putname+0x102/0x140 [ 260.904023][ T5869] __x64_sys_mount+0x283/0x300 [ 260.908828][ T5869] ? copy_mnt_ns+0xb30/0xb30 [ 260.913445][ T5869] ? lockdep_hardirqs_on+0x7d/0x100 [ 260.918673][ T5869] ? _raw_spin_unlock_irq+0x2e/0x50 [ 260.923907][ T5869] ? ptrace_notify+0xfe/0x140 [ 260.928655][ T5869] do_syscall_64+0x39/0xb0 [ 260.933368][ T5869] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 260.939316][ T5869] RIP: 0033:0x7f4f6dd11c5a [ 260.943755][ T5869] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 260.963390][ T5869] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 260.971830][ T5869] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 260.979823][ T5869] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 260.987899][ T5869] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 260.995900][ T5869] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 261.003891][ T5869] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 261.011889][ T5869] [ 261.017986][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [pid 5871] <... munmap resumed>) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5865] mount("/dev/loop1", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5855] <... futex resumed>) = ? [pid 5867] <... openat resumed>) = 4 [pid 5855] +++ exited with 0 +++ [pid 5854] +++ exited with 0 +++ [pid 5867] ioctl(4, LOOP_SET_FD, 3 [pid 5031] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=57 /* 0.57 s */} --- [ 261.020548][ T5869] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 261.024305][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.044786][ T5868] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 261.058246][ T5868] CPU: 0 PID: 5868 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 261.059646][ T5867] loop2: detected capacity change from 0 to 32768 [ 261.068816][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 261.068836][ T5868] Call Trace: [ 261.068846][ T5868] [ 261.068856][ T5868] dump_stack_lvl+0x136/0x150 [ 261.088728][ T5869] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 261.091630][ T5868] sysfs_warn_dup+0x80/0xa0 [ 261.107403][ T5868] sysfs_create_dir_ns+0x237/0x290 [ 261.112568][ T5868] ? sysfs_create_mount_point+0xb0/0xb0 [ 261.118159][ T5868] ? spin_bug+0x1c0/0x1c0 [ 261.122524][ T5868] ? do_raw_spin_unlock+0x175/0x230 [ 261.127775][ T5868] kobject_add_internal+0x2c9/0x9c0 [ 261.133006][ T5868] ? kfree+0x11/0x150 [ 261.137009][ T5868] kobject_init_and_add+0x101/0x170 [ 261.142233][ T5868] ? kobject_create_and_add+0xf0/0xf0 [ 261.147631][ T5868] ? lockdep_init_map_type+0x21e/0x810 [ 261.153122][ T5868] ? lockdep_hardirqs_on+0x7d/0x100 [ 261.158351][ T5868] ? lockdep_init_map_type+0x21e/0x810 [ 261.163843][ T5868] gfs2_sys_fs_add+0x1d5/0x450 [ 261.168636][ T5868] ? recover_store+0x170/0x170 [ 261.173490][ T5868] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 261.179247][ T5868] gfs2_fill_super+0x1312/0x2aa0 [ 261.184215][ T5868] ? gfs2_reconfigure+0xf90/0xf90 [ 261.189268][ T5868] ? snprintf+0xbf/0x100 [ 261.193561][ T5868] ? vsprintf+0x30/0x30 [ 261.197750][ T5868] ? wait_for_completion_io_timeout+0x20/0x20 [ 261.203853][ T5868] ? set_blocksize+0x2d8/0x370 [ 261.208685][ T5868] get_tree_bdev+0x43e/0x7d0 [ 261.213308][ T5868] ? gfs2_reconfigure+0xf90/0xf90 [ 261.218360][ T5868] gfs2_get_tree+0x4e/0x270 [ 261.222895][ T5868] vfs_get_tree+0x8d/0x350 [ 261.227346][ T5868] path_mount+0x136e/0x1e70 [ 261.231889][ T5868] ? putname+0x102/0x140 [ 261.236154][ T5868] ? lockdep_hardirqs_on+0x7d/0x100 [ 261.241387][ T5868] ? finish_automount+0xa30/0xa30 [ 261.246444][ T5868] ? putname+0x102/0x140 [ 261.250713][ T5868] __x64_sys_mount+0x283/0x300 [ 261.255510][ T5868] ? copy_mnt_ns+0xb30/0xb30 [ 261.260132][ T5868] ? lockdep_hardirqs_on+0x7d/0x100 [ 261.265536][ T5868] ? _raw_spin_unlock_irq+0x2e/0x50 [ 261.270774][ T5868] ? ptrace_notify+0xfe/0x140 [ 261.275580][ T5868] do_syscall_64+0x39/0xb0 [ 261.280019][ T5868] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 261.285957][ T5868] RIP: 0033:0x7f4f6dd11c5a [ 261.290394][ T5868] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 261.310030][ T5868] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 261.318470][ T5868] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 261.326465][ T5868] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [pid 5031] restart_syscall(<... resuming interrupted clone ...> [pid 5871] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5869] <... mount resumed>) = -1 EEXIST (File exists) [pid 5867] <... ioctl resumed>) = 0 [pid 5031] <... restart_syscall resumed>) = 0 [ 261.334457][ T5868] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 261.342447][ T5868] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 261.350459][ T5868] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 261.358454][ T5868] [ 261.366241][ T5868] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [pid 5871] <... openat resumed>) = 4 [pid 5869] ioctl(4, LOOP_CLR_FD [pid 5867] close(3 [pid 5871] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5871] close(3) = 0 [pid 5871] mkdir("./file0", 0777) = 0 [ 261.380680][ T5865] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 261.381736][ T5868] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 261.391152][ T5865] CPU: 1 PID: 5865 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 261.405278][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 261.406255][ T5871] loop5: detected capacity change from 0 to 32768 [ 261.415351][ T5865] Call Trace: [ 261.415367][ T5865] [ 261.428035][ T5865] dump_stack_lvl+0x136/0x150 [ 261.432784][ T5865] sysfs_warn_dup+0x80/0xa0 [pid 5871] mount("/dev/loop5", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5867] <... close resumed>) = 0 [pid 5867] mkdir("./file0", 0777) = 0 [pid 5867] mount("/dev/loop2", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5031] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5031] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5031] umount2("./31/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5031] newfstatat(AT_FDCWD, "./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./31/cgroup.cpu") = 0 [pid 5031] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 261.437353][ T5865] sysfs_create_dir_ns+0x237/0x290 [ 261.442530][ T5865] ? sysfs_create_mount_point+0xb0/0xb0 [ 261.448135][ T5865] ? spin_bug+0x1c0/0x1c0 [ 261.452532][ T5865] ? do_raw_spin_unlock+0x175/0x230 [ 261.457792][ T5865] kobject_add_internal+0x2c9/0x9c0 [ 261.463053][ T5865] ? kfree+0x11/0x150 [ 261.467091][ T5865] kobject_init_and_add+0x101/0x170 [ 261.472351][ T5865] ? kobject_create_and_add+0xf0/0xf0 [ 261.477874][ T5865] ? lockdep_init_map_type+0x21e/0x810 [ 261.483394][ T5865] ? lockdep_hardirqs_on+0x7d/0x100 [ 261.484834][ T5871] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 261.488634][ T5865] ? lockdep_init_map_type+0x21e/0x810 [ 261.488684][ T5865] gfs2_sys_fs_add+0x1d5/0x450 [ 261.488718][ T5865] ? recover_store+0x170/0x170 [ 261.488751][ T5865] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 261.488799][ T5865] gfs2_fill_super+0x1312/0x2aa0 [ 261.521978][ T5865] ? gfs2_reconfigure+0xf90/0xf90 [ 261.527043][ T5865] ? snprintf+0xbf/0x100 [ 261.531319][ T5865] ? vsprintf+0x30/0x30 [ 261.535510][ T5865] ? wait_for_completion_io_timeout+0x20/0x20 [ 261.541616][ T5865] ? set_blocksize+0x2d8/0x370 [ 261.546417][ T5865] get_tree_bdev+0x43e/0x7d0 [ 261.551039][ T5865] ? gfs2_reconfigure+0xf90/0xf90 [ 261.556090][ T5865] gfs2_get_tree+0x4e/0x270 [ 261.560616][ T5865] vfs_get_tree+0x8d/0x350 [ 261.565058][ T5865] path_mount+0x136e/0x1e70 [ 261.569678][ T5865] ? putname+0x102/0x140 [ 261.573957][ T5865] ? lockdep_hardirqs_on+0x7d/0x100 [ 261.579194][ T5865] ? finish_automount+0xa30/0xa30 [ 261.584251][ T5865] ? putname+0x102/0x140 [ 261.588535][ T5865] __x64_sys_mount+0x283/0x300 [ 261.593346][ T5865] ? copy_mnt_ns+0xb30/0xb30 [ 261.598006][ T5865] ? lockdep_hardirqs_on+0x7d/0x100 [ 261.603254][ T5865] ? _raw_spin_unlock_irq+0x2e/0x50 [ 261.608495][ T5865] ? ptrace_notify+0xfe/0x140 [ 261.613233][ T5865] do_syscall_64+0x39/0xb0 [ 261.617688][ T5865] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 261.623644][ T5865] RIP: 0033:0x7f4f6dd11c5a [ 261.628088][ T5865] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 261.647727][ T5865] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 261.656167][ T5865] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 261.664164][ T5865] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 261.672155][ T5865] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [pid 5031] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] unlink("./31/binderfs") = 0 [pid 5031] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5868] <... mount resumed>) = -1 EEXIST (File exists) [ 261.681813][ T5865] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 261.689815][ T5865] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 261.697845][ T5865] [ 261.705646][ T5871] CPU: 1 PID: 5871 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 261.716220][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 261.724752][ T5867] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 261.726301][ T5871] Call Trace: [ 261.726314][ T5871] [ 261.726326][ T5871] dump_stack_lvl+0x136/0x150 [ 261.726386][ T5871] sysfs_warn_dup+0x80/0xa0 [ 261.726421][ T5871] sysfs_create_dir_ns+0x237/0x290 [ 261.726457][ T5871] ? sysfs_create_mount_point+0xb0/0xb0 [ 261.734011][ T5865] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 261.737117][ T5871] ? spin_bug+0x1c0/0x1c0 [ 261.737159][ T5871] ? do_raw_spin_unlock+0x175/0x230 [ 261.737201][ T5871] kobject_add_internal+0x2c9/0x9c0 [ 261.756883][ T5865] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 261.759976][ T5871] ? kfree+0x11/0x150 [ 261.760017][ T5871] kobject_init_and_add+0x101/0x170 [ 261.804463][ T5871] ? kobject_create_and_add+0xf0/0xf0 [ 261.809886][ T5871] ? lockdep_init_map_type+0x21e/0x810 [ 261.815394][ T5871] ? lockdep_hardirqs_on+0x7d/0x100 [ 261.820662][ T5871] ? lockdep_init_map_type+0x21e/0x810 [ 261.826177][ T5871] gfs2_sys_fs_add+0x1d5/0x450 [ 261.830978][ T5871] ? recover_store+0x170/0x170 [ 261.835786][ T5871] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 261.841562][ T5871] gfs2_fill_super+0x1312/0x2aa0 [ 261.846542][ T5871] ? gfs2_reconfigure+0xf90/0xf90 [ 261.851610][ T5871] ? snprintf+0xbf/0x100 [ 261.855909][ T5871] ? vsprintf+0x30/0x30 [ 261.860110][ T5871] ? wait_for_completion_io_timeout+0x20/0x20 [ 261.866208][ T5871] ? set_blocksize+0x2d8/0x370 [ 261.871007][ T5871] get_tree_bdev+0x43e/0x7d0 [ 261.875638][ T5871] ? gfs2_reconfigure+0xf90/0xf90 [ 261.880715][ T5871] gfs2_get_tree+0x4e/0x270 [ 261.885273][ T5871] vfs_get_tree+0x8d/0x350 [ 261.889733][ T5871] path_mount+0x136e/0x1e70 [ 261.894297][ T5871] ? putname+0x102/0x140 [ 261.898577][ T5871] ? lockdep_hardirqs_on+0x7d/0x100 [ 261.903817][ T5871] ? finish_automount+0xa30/0xa30 [ 261.908901][ T5871] ? putname+0x102/0x140 [ 261.913195][ T5871] __x64_sys_mount+0x283/0x300 [ 261.918001][ T5871] ? copy_mnt_ns+0xb30/0xb30 [ 261.922636][ T5871] ? lockdep_hardirqs_on+0x7d/0x100 [ 261.927892][ T5871] ? _raw_spin_unlock_irq+0x2e/0x50 [ 261.933149][ T5871] ? ptrace_notify+0xfe/0x140 [ 261.937883][ T5871] do_syscall_64+0x39/0xb0 [ 261.942356][ T5871] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 261.948316][ T5871] RIP: 0033:0x7f4f6dd11c5a [ 261.952779][ T5871] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 261.972446][ T5871] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 261.980923][ T5871] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 261.988978][ T5871] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 261.996994][ T5871] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 262.005006][ T5871] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 262.013028][ T5871] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 262.021046][ T5871] [ 262.049754][ T5871] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 262.076129][ T5871] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 262.088191][ T5867] CPU: 1 PID: 5867 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [pid 5868] ioctl(4, LOOP_CLR_FD [pid 5865] <... mount resumed>) = -1 EEXIST (File exists) [ 262.098686][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 262.108792][ T5867] Call Trace: [ 262.112150][ T5867] [ 262.115121][ T5867] dump_stack_lvl+0x136/0x150 [ 262.119879][ T5867] sysfs_warn_dup+0x80/0xa0 [ 262.124443][ T5867] sysfs_create_dir_ns+0x237/0x290 [ 262.129613][ T5867] ? sysfs_create_mount_point+0xb0/0xb0 [ 262.135212][ T5867] ? spin_bug+0x1c0/0x1c0 [ 262.139615][ T5867] ? do_raw_spin_unlock+0x175/0x230 [ 262.144881][ T5867] kobject_add_internal+0x2c9/0x9c0 [ 262.150149][ T5867] ? kfree+0x11/0x150 [ 262.154179][ T5867] kobject_init_and_add+0x101/0x170 [ 262.159432][ T5867] ? kobject_create_and_add+0xf0/0xf0 [ 262.164863][ T5867] ? lockdep_init_map_type+0x21e/0x810 [ 262.170483][ T5867] ? lockdep_hardirqs_on+0x7d/0x100 [ 262.175744][ T5867] ? lockdep_init_map_type+0x21e/0x810 [ 262.181263][ T5867] gfs2_sys_fs_add+0x1d5/0x450 [ 262.186080][ T5867] ? recover_store+0x170/0x170 [ 262.190903][ T5867] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 262.196696][ T5867] gfs2_fill_super+0x1312/0x2aa0 [ 262.201699][ T5867] ? gfs2_reconfigure+0xf90/0xf90 [ 262.206781][ T5867] ? snprintf+0xbf/0x100 [ 262.211085][ T5867] ? vsprintf+0x30/0x30 [ 262.215304][ T5867] ? wait_for_completion_io_timeout+0x20/0x20 [ 262.221441][ T5867] ? set_blocksize+0x2d8/0x370 [ 262.226272][ T5867] get_tree_bdev+0x43e/0x7d0 [ 262.230932][ T5867] ? gfs2_reconfigure+0xf90/0xf90 [ 262.236021][ T5867] gfs2_get_tree+0x4e/0x270 [ 262.240577][ T5867] vfs_get_tree+0x8d/0x350 [ 262.245045][ T5867] path_mount+0x136e/0x1e70 [ 262.249617][ T5867] ? putname+0x102/0x140 [ 262.253918][ T5867] ? lockdep_hardirqs_on+0x7d/0x100 [ 262.259187][ T5867] ? finish_automount+0xa30/0xa30 [ 262.264271][ T5867] ? putname+0x102/0x140 [ 262.268572][ T5867] __x64_sys_mount+0x283/0x300 [ 262.273400][ T5867] ? copy_mnt_ns+0xb30/0xb30 [ 262.278049][ T5867] ? lockdep_hardirqs_on+0x7d/0x100 [ 262.283318][ T5867] ? _raw_spin_unlock_irq+0x2e/0x50 [ 262.288615][ T5867] ? ptrace_notify+0xfe/0x140 [ 262.293379][ T5867] do_syscall_64+0x39/0xb0 [ 262.297850][ T5867] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 262.303819][ T5867] RIP: 0033:0x7f4f6dd11c5a [ 262.308282][ T5867] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 262.327956][ T5867] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 262.336433][ T5867] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [pid 5865] ioctl(4, LOOP_CLR_FD [pid 5871] <... mount resumed>) = -1 EEXIST (File exists) [ 262.344449][ T5867] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 262.352471][ T5867] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 262.360492][ T5867] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 262.368526][ T5867] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 262.376550][ T5867] [pid 5871] ioctl(4, LOOP_CLR_FD [ 262.416061][ T5867] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [pid 5862] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5862] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5864] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5863] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5863] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5866] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5866] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5866] <... futex resumed>) = 0 [pid 5864] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... mmap resumed>) = 0x7f4f6607f000 [pid 5862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5863] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5866] <... mmap resumed>) = 0x7f4f6607f000 [pid 5863] <... mprotect resumed>) = 0 [pid 5862] <... mmap resumed>) = 0x7f4f6607f000 [pid 5866] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5863] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5866] <... mprotect resumed>) = 0 [pid 5863] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5866] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0}./strace-static-x86_64: Process 5879 attached [pid 5866] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5879] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5866] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5863] <... clone3 resumed> => {parent_tid=[98]}, 88) = 98 ./strace-static-x86_64: Process 5880 attached [pid 5879] <... rseq resumed>) = 0 [pid 5864] <... futex resumed>) = 0 [pid 5863] rt_sigprocmask(SIG_SETMASK, [], [pid 5880] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5879] set_robust_list(0x7f4f6609f9a0, 24 [pid 5868] <... ioctl resumed>) = 0 [pid 5866] <... clone3 resumed> => {parent_tid=[90]}, 88) = 90 [pid 5863] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5880] <... rseq resumed>) = 0 [pid 5879] <... set_robust_list resumed>) = 0 [pid 5866] rt_sigprocmask(SIG_SETMASK, [], [pid 5863] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5880] set_robust_list(0x7f4f6609f9a0, 24 [pid 5879] rt_sigprocmask(SIG_SETMASK, [], [pid 5866] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5863] <... futex resumed>) = 0 [pid 5880] <... set_robust_list resumed>) = 0 [pid 5879] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5866] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] rt_sigprocmask(SIG_SETMASK, [], [pid 5879] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5866] <... futex resumed>) = 0 [pid 5880] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5879] <... openat resumed>) = 3 [pid 5866] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] <... mprotect resumed>) = 0 [pid 5880] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5879] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... openat resumed>) = 3 [pid 5879] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5862] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5880] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5868] close(4 [pid 5864] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5863] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5880] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5868] <... close resumed>) = 0 [pid 5866] <... futex resumed>) = 0 [pid 5864] <... mmap resumed>) = 0x7f4f6607f000 [pid 5863] <... futex resumed>) = 0 [pid 5880] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5868] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5863] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5868] <... futex resumed>) = 0 [pid 5866] <... futex resumed>) = 0 [pid 5864] <... mprotect resumed>) = 0 [pid 5880] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5879] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5868] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5866] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5880] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5879] <... futex resumed>) = 1 [pid 5864] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5863] <... futex resumed>) = 0 [pid 5880] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5864] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5863] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5881 attached [pid 5880] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5866] <... futex resumed>) = 0 [pid 5863] <... futex resumed>) = 0 [pid 5881] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5880] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5866] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... clone3 resumed> => {parent_tid=[102]}, 88) = 102 [pid 5863] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5881] <... rseq resumed>) = 0 [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5866] <... futex resumed>) = 0 [pid 5864] rt_sigprocmask(SIG_SETMASK, [], [pid 5881] set_robust_list(0x7f4f6609f9a0, 24 [pid 5880] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5879] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5881] <... set_robust_list resumed>) = 0 [pid 5880] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5879] <... futex resumed>) = 1 [pid 5864] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5863] <... futex resumed>) = 0 [pid 5881] rt_sigprocmask(SIG_SETMASK, [], [pid 5880] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5879] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5864] <... futex resumed>) = 0 [pid 5881] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5880] <... futex resumed>) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5864] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5881] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5880] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] <... openat resumed>) = 3 [pid 5862] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5881] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5882 attached ) = 1 [pid 5864] <... futex resumed>) = 0 [pid 5882] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5881] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5864] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... rseq resumed>) = 0 [pid 5868] <... futex resumed>) = 0 [pid 5864] <... futex resumed>) = 1 [pid 5882] set_robust_list(0x7f4f6609f9a0, 24 [pid 5868] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5864] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] <... clone3 resumed> => {parent_tid=[96]}, 88) = 96 [pid 5882] <... set_robust_list resumed>) = 0 [pid 5868] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5882] rt_sigprocmask(SIG_SETMASK, [], [pid 5868] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5868] <... futex resumed>) = 1 [pid 5864] <... futex resumed>) = 0 [pid 5882] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5868] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5864] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] rt_sigprocmask(SIG_SETMASK, [], [pid 5868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5864] <... futex resumed>) = 0 [pid 5868] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5864] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5868] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5862] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5868] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5868] <... futex resumed>) = 1 [pid 5864] <... futex resumed>) = 0 [pid 5868] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5864] close(3) = 0 [pid 5864] close(4) = -1 EBADF (Bad file descriptor) [pid 5864] close(5 [pid 5882] <... futex resumed>) = 0 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... futex resumed>) = 1 [pid 5882] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5864] close(6 [pid 5862] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] <... openat resumed>) = 3 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5882] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] close(7 [pid 5882] <... futex resumed>) = 1 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... futex resumed>) = 0 [pid 5882] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5864] close(8 [pid 5862] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... futex resumed>) = 0 [pid 5882] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5864] close(9 [pid 5862] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5882] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] close(10 [pid 5882] <... futex resumed>) = 1 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... futex resumed>) = 0 [pid 5882] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5864] close(11 [pid 5862] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... futex resumed>) = 0 [pid 5882] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5864] close(12 [pid 5862] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5882] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] close(13 [pid 5882] <... futex resumed>) = 1 [pid 5864] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... futex resumed>) = 0 [pid 5882] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5864] close(14) = -1 EBADF (Bad file descriptor) [pid 5864] close(15) = -1 EBADF (Bad file descriptor) [pid 5864] close(16) = -1 EBADF (Bad file descriptor) [pid 5864] close(17) = -1 EBADF (Bad file descriptor) [pid 5864] close(18) = -1 EBADF (Bad file descriptor) [pid 5864] close(19) = -1 EBADF (Bad file descriptor) [pid 5864] close(20) = -1 EBADF (Bad file descriptor) [pid 5864] close(21) = -1 EBADF (Bad file descriptor) [pid 5864] close(22) = -1 EBADF (Bad file descriptor) [pid 5864] close(23) = -1 EBADF (Bad file descriptor) [pid 5864] close(24write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory ) = -1 EBADF (Bad file descriptor) [pid 5864] close(25) = -1 EBADF (Bad file descriptor) [pid 5864] close(26) = -1 EBADF (Bad file descriptor) [pid 5864] close(27) = -1 EBADF (Bad file descriptor) [pid 5864] close(28) = -1 EBADF (Bad file descriptor) [pid 5864] close(29) = -1 EBADF (Bad file descriptor) [pid 5864] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5864] exit_group(0 [pid 5881] <... futex resumed>) = ? [pid 5868] <... futex resumed>) = ? [pid 5864] <... exit_group resumed>) = ? [pid 5881] +++ exited with 0 +++ [pid 5868] +++ exited with 0 +++ [pid 5864] +++ exited with 0 +++ [pid 5029] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=100, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=61 /* 0.61 s */} --- [pid 5029] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5029] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5029] umount2("./31/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./31/cgroup.cpu") = 0 [pid 5029] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5029] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5869] <... ioctl resumed>) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] unlink("./31/binderfs" [pid 5869] close(4 [pid 5029] <... unlink resumed>) = 0 [pid 5869] <... close resumed>) = 0 [pid 5869] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5869] <... futex resumed>) = 0 [pid 5869] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5866] close(3 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5866] <... close resumed>) = 0 [pid 5866] close(4 [pid 5029] newfstatat(AT_FDCWD, "./31/file0", [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(5 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5866] close(6) = -1 EBADF (Bad file descriptor) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5866] close(7 [pid 5029] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(8) = -1 EBADF (Bad file descriptor) [pid 5866] close(9 [pid 5029] <... openat resumed>) = 4 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(10) = -1 EBADF (Bad file descriptor) [pid 5866] close(11 [pid 5029] newfstatat(4, "", [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(12 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(13 [pid 5029] getdents64(4, [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(14 [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] getdents64(4, [pid 5866] close(15 [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] close(4 [pid 5866] close(16) = -1 EBADF (Bad file descriptor) [pid 5029] <... close resumed>) = 0 [pid 5866] close(17 [pid 5029] rmdir("./31/file0" [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(18 [pid 5029] <... rmdir resumed>) = 0 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(19 [pid 5029] umount2("./31/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] close(20 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5870] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 262.805912][ T5867] gfs2: fsid=syz:syz: error -17 adding sysfs files [pid 5029] newfstatat(AT_FDCWD, "./31/cgroup", [pid 5870] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] close(21 [pid 5870] <... futex resumed>) = 0 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5866] close(22 [pid 5029] unlink("./31/cgroup" [pid 5870] <... mmap resumed>) = 0x7f4f6607f000 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... umount2 resumed>) = 0 [pid 5870] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5866] close(23 [pid 5029] <... unlink resumed>) = 0 [pid 5870] <... mprotect resumed>) = 0 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] umount2("./31/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5870] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5866] close(24 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5870] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] newfstatat(AT_FDCWD, "./31/file0", [pid 5029] newfstatat(AT_FDCWD, "./31/cgroup.net", [pid 5870] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5866] close(25./strace-static-x86_64: Process 5883 attached [pid 5867] <... mount resumed>) = -1 EEXIST (File exists) [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5883] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5870] <... clone3 resumed> => {parent_tid=[99]}, 88) = 99 [pid 5867] ioctl(4, LOOP_CLR_FD [pid 5866] close(26 [pid 5031] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] unlink("./31/cgroup.net" [pid 5883] <... rseq resumed>) = 0 [pid 5870] rt_sigprocmask(SIG_SETMASK, [], [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5883] set_robust_list(0x7f4f6609f9a0, 24 [pid 5870] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5866] close(27 [pid 5031] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] <... unlink resumed>) = 0 [pid 5883] <... set_robust_list resumed>) = 0 [pid 5870] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5883] rt_sigprocmask(SIG_SETMASK, [], [pid 5870] <... futex resumed>) = 0 [pid 5866] close(28 [pid 5031] <... openat resumed>) = 4 [pid 5029] getdents64(3, [pid 5883] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5870] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] newfstatat(4, "", [pid 5883] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5866] close(29write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5029] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5883] <... openat resumed>) = 3 [pid 5866] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5883] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5031] getdents64(4, [pid 5029] close(3 [pid 5883] <... futex resumed>) = 1 [pid 5870] <... futex resumed>) = 0 [pid 5866] <... write resumed>) = 156 [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5029] <... close resumed>) = 0 [pid 5883] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5870] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] exit_group(0 [pid 5031] getdents64(4, [pid 5029] rmdir("./31" [pid 5883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5880] <... futex resumed>) = ? [pid 5870] <... futex resumed>) = 0 [pid 5869] <... futex resumed>) = ? [pid 5866] <... exit_group resumed>) = ? [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5883] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5880] +++ exited with 0 +++ [pid 5870] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5869] +++ exited with 0 +++ [pid 5866] +++ exited with 0 +++ [pid 5031] close(4 [pid 5029] <... rmdir resumed>) = 0 [pid 5883] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5031] <... close resumed>) = 0 [pid 5030] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=88, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=52 /* 0.52 s */} --- [pid 5029] mkdir("./32", 0777 [pid 5883] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] rmdir("./31/file0" [pid 5883] <... futex resumed>) = 1 [pid 5870] <... futex resumed>) = 0 [pid 5883] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5870] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... mkdir resumed>) = 0 [pid 5883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5870] <... futex resumed>) = 0 [pid 5031] <... rmdir resumed>) = 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5883] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5870] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] umount2("./31/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5883] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... openat resumed>) = 3 [pid 5883] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] newfstatat(AT_FDCWD, "./31/cgroup", [pid 5030] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] ioctl(3, LOOP_CLR_FD [pid 5883] <... futex resumed>) = 1 [pid 5870] <... futex resumed>) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5883] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] unlink("./31/cgroup" [pid 5030] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5030] <... openat resumed>) = 3 [pid 5031] <... unlink resumed>) = 0 [pid 5030] newfstatat(3, "", [pid 5029] close(3 [pid 5031] umount2("./31/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5871] <... ioctl resumed>) = 0 [pid 5865] <... ioctl resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] getdents64(3, [pid 5029] <... close resumed>) = 0 [pid 5871] close(4 [pid 5865] close(4 [pid 5031] newfstatat(AT_FDCWD, "./31/cgroup.net", [pid 5030] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5884 attached [pid 5871] <... close resumed>) = 0 [pid 5865] <... close resumed>) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] umount2("./31/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] set_robust_list(0x55555654e6a0, 24 [pid 5871] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] close(3 [pid 5865] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] close(3 [pid 5031] unlink("./31/cgroup.net" [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... clone resumed>, child_tidptr=0x55555654e690) = 103 [pid 5884] <... set_robust_list resumed>) = 0 [pid 5871] <... futex resumed>) = 0 [pid 5870] <... close resumed>) = 0 [pid 5865] <... futex resumed>) = 0 [pid 5862] <... close resumed>) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5030] newfstatat(AT_FDCWD, "./31/cgroup.cpu", [pid 5884] chdir("./32" [pid 5871] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5870] close(4 [pid 5865] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5862] close(4 [pid 5031] getdents64(3, [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5884] <... chdir resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5030] unlink("./31/cgroup.cpu" [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5870] close(5 [pid 5862] close(5 [pid 5031] close(3 [pid 5030] <... unlink resumed>) = 0 [pid 5884] <... prctl resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... close resumed>) = 0 [pid 5030] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] setpgid(0, 0 [pid 5870] close(6 [pid 5862] close(6 [pid 5031] rmdir("./31" [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5884] <... setpgid resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... rmdir resumed>) = 0 [pid 5030] newfstatat(AT_FDCWD, "./31/binderfs", [pid 5884] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5870] close(7 [pid 5862] close(7 [pid 5031] mkdir("./32", 0777 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5884] <... symlink resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... mkdir resumed>) = 0 [pid 5030] unlink("./31/binderfs" [pid 5884] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5870] close(8 [pid 5862] close(8 [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5884] <... symlink resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... openat resumed>) = 3 [pid 5030] <... unlink resumed>) = 0 [pid 5884] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5870] close(9 [pid 5862] close(9 [pid 5031] ioctl(3, LOOP_CLR_FD [pid 5030] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] <... symlink resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5870] close(10 [pid 5862] close(10 [pid 5031] close(3 [pid 5030] newfstatat(AT_FDCWD, "./31/file0", [pid 5884] <... openat resumed>) = 3 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... close resumed>) = 0 [pid 5884] write(3, "1000", 4 [pid 5870] close(11 [pid 5862] close(11 [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5885 attached [pid 5884] <... write resumed>) = 4 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5885] set_robust_list(0x55555654e6a0, 24 [pid 5884] close(3 [pid 5870] close(12 [pid 5862] close(12 [pid 5031] <... clone resumed>, child_tidptr=0x55555654e690) = 95 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5885] <... set_robust_list resumed>) = 0 [pid 5884] <... close resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5885] chdir("./32" [pid 5884] symlink("/dev/binderfs", "./binderfs" [pid 5870] close(13 [pid 5862] close(13 [pid 5885] <... chdir resumed>) = 0 [pid 5884] <... symlink resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] <... openat resumed>) = 4 [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5884] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] close(14 [pid 5862] close(14 [pid 5030] newfstatat(4, "", [pid 5885] <... prctl resumed>) = 0 [pid 5884] <... futex resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5885] setpgid(0, 0 [pid 5884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5870] close(15 [pid 5862] close(15 [pid 5030] getdents64(4, [pid 5885] <... setpgid resumed>) = 0 [pid 5884] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5885] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5884] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5870] close(16 [pid 5862] close(16 [pid 5030] getdents64(4, [pid 5885] <... symlink resumed>) = 0 [pid 5884] <... mprotect resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5885] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5884] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5870] close(17 [pid 5862] close(17 [pid 5030] close(4 [pid 5885] <... symlink resumed>) = 0 [pid 5884] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] <... close resumed>) = 0 [pid 5885] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5884] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5870] close(18 [pid 5862] close(18 [pid 5030] rmdir("./31/file0"./strace-static-x86_64: Process 5886 attached [pid 5885] <... symlink resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5884] <... clone3 resumed> => {parent_tid=[104]}, 88) = 104 [pid 5870] close(19 [pid 5862] close(19 [pid 5030] <... rmdir resumed>) = 0 [pid 5886] <... rseq resumed>) = 0 [pid 5885] <... openat resumed>) = 3 [pid 5884] rt_sigprocmask(SIG_SETMASK, [], [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] umount2("./31/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5886] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5885] write(3, "1000", 4 [pid 5884] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5870] close(20 [pid 5862] close(20 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5886] <... set_robust_list resumed>) = 0 [pid 5885] <... write resumed>) = 4 [pid 5884] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] newfstatat(AT_FDCWD, "./31/cgroup", [pid 5886] rt_sigprocmask(SIG_SETMASK, [], [pid 5885] close(3 [pid 5884] <... futex resumed>) = 0 [pid 5870] close(21 [pid 5862] close(21 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5886] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5885] <... close resumed>) = 0 [pid 5884] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] unlink("./31/cgroup" [pid 5886] memfd_create("syzkaller", 0 [pid 5885] symlink("/dev/binderfs", "./binderfs" [pid 5870] close(22 [pid 5862] close(22 [pid 5030] <... unlink resumed>) = 0 [pid 5886] <... memfd_create resumed>) = 3 [pid 5885] <... symlink resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] umount2("./31/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5885] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] close(23 [pid 5862] close(23 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5886] <... mmap resumed>) = 0x7f4f650a0000 [pid 5885] <... futex resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] newfstatat(AT_FDCWD, "./31/cgroup.net", [pid 5885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5885] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5870] close(24 [pid 5862] close(24 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5885] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] unlink("./31/cgroup.net" [pid 5885] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5870] close(25 [pid 5862] close(25 [pid 5030] <... unlink resumed>) = 0 [pid 5885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] getdents64(3, ./strace-static-x86_64: Process 5887 attached [pid 5887] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5885] <... clone3 resumed> => {parent_tid=[96]}, 88) = 96 [pid 5887] <... rseq resumed>) = 0 [pid 5885] rt_sigprocmask(SIG_SETMASK, [], [pid 5887] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5887] <... set_robust_list resumed>) = 0 [pid 5885] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] rt_sigprocmask(SIG_SETMASK, [], [pid 5885] <... futex resumed>) = 0 [pid 5887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5885] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5887] memfd_create("syzkaller", 0 [pid 5870] close(26 [pid 5862] close(26 [pid 5030] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5887] <... memfd_create resumed>) = 3 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] close(3 [pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5870] close(27 [pid 5862] close(27 [pid 5030] <... close resumed>) = 0 [pid 5887] <... mmap resumed>) = 0x7f4f650a0000 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] rmdir("./31" [pid 5870] close(28 [pid 5862] close(28 [pid 5030] <... rmdir resumed>) = 0 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5870] close(29 [pid 5030] mkdir("./32", 0777 [pid 5870] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] close(29) = -1 EBADF (Bad file descriptor) [pid 5030] <... mkdir resumed>) = 0 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5870] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5862] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5870] <... write resumed>) = 156 [pid 5862] <... write resumed>) = 156 [pid 5030] <... openat resumed>) = 3 [pid 5870] exit_group(0 [pid 5862] exit_group(0 [pid 5030] ioctl(3, LOOP_CLR_FD [pid 5883] <... futex resumed>) = ? [pid 5882] <... futex resumed>) = ? [pid 5871] <... futex resumed>) = ? [pid 5870] <... exit_group resumed>) = ? [pid 5865] <... futex resumed>) = ? [pid 5862] <... exit_group resumed>) = ? [pid 5030] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5883] +++ exited with 0 +++ [pid 5882] +++ exited with 0 +++ [pid 5865] +++ exited with 0 +++ [pid 5862] +++ exited with 0 +++ [pid 5871] +++ exited with 0 +++ [pid 5870] +++ exited with 0 +++ [pid 5030] close(3 [pid 5032] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=94, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=54 /* 0.54 s */} --- [pid 5030] <... close resumed>) = 0 [pid 5034] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=97, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=65 /* 0.65 s */} --- [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5034] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5888 attached ) = -1 EINVAL (Invalid argument) [pid 5032] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5888] set_robust_list(0x55555654e6a0, 24 [pid 5034] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... clone resumed>, child_tidptr=0x55555654e690) = 91 [pid 5888] <... set_robust_list resumed>) = 0 [pid 5034] <... openat resumed>) = 3 [pid 5032] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5888] chdir("./32" [pid 5034] newfstatat(3, "", [pid 5032] <... openat resumed>) = 3 [pid 5888] <... chdir resumed>) = 0 [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] newfstatat(3, "", [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5034] getdents64(3, [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5032] getdents64(3, [pid 5888] setpgid(0, 0 [pid 5034] umount2("./32/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5888] <... setpgid resumed>) = 0 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] umount2("./32/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5888] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5034] newfstatat(AT_FDCWD, "./32/cgroup.cpu", [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] <... symlink resumed>) = 0 [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] newfstatat(AT_FDCWD, "./32/cgroup.cpu", [pid 5888] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5034] unlink("./32/cgroup.cpu" [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5888] <... symlink resumed>) = 0 [pid 5888] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5034] <... unlink resumed>) = 0 [pid 5032] unlink("./32/cgroup.cpu") = 0 [pid 5888] <... symlink resumed>) = 0 [pid 5034] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] <... openat resumed>) = 3 [pid 5034] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5032] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5888] write(3, "1000", 4 [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5888] <... write resumed>) = 4 [pid 5034] unlink("./32/binderfs" [pid 5032] unlink("./32/binderfs" [pid 5888] close(3 [pid 5034] <... unlink resumed>) = 0 [pid 5032] <... unlink resumed>) = 0 [pid 5034] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5888] <... close resumed>) = 0 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] symlink("/dev/binderfs", "./binderfs" [pid 5034] newfstatat(AT_FDCWD, "./32/file0", [pid 5032] newfstatat(AT_FDCWD, "./32/file0", [pid 5888] <... symlink resumed>) = 0 [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5888] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5888] <... futex resumed>) = 0 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5034] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5032] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5888] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5034] <... openat resumed>) = 4 [pid 5034] newfstatat(4, "", [pid 5032] <... openat resumed>) = 4 [pid 5888] <... mprotect resumed>) = 0 [pid 5032] newfstatat(4, "", [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(4, [pid 5888] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5032] getdents64(4, [pid 5888] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5888] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5034] getdents64(4, [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5889 attached [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5032] getdents64(4, [pid 5889] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5888] <... clone3 resumed> => {parent_tid=[92]}, 88) = 92 [pid 5034] close(4 [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5889] <... rseq resumed>) = 0 [pid 5888] rt_sigprocmask(SIG_SETMASK, [], [pid 5034] <... close resumed>) = 0 [pid 5032] close(4 [pid 5889] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5888] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5034] rmdir("./32/file0" [pid 5889] <... set_robust_list resumed>) = 0 [pid 5888] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... close resumed>) = 0 [pid 5889] rt_sigprocmask(SIG_SETMASK, [], [pid 5888] <... futex resumed>) = 0 [pid 5034] <... rmdir resumed>) = 0 [pid 5032] rmdir("./32/file0" [pid 5034] umount2("./32/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] <... rmdir resumed>) = 0 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5889] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5888] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5034] newfstatat(AT_FDCWD, "./32/cgroup", [pid 5889] memfd_create("syzkaller", 0 [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5889] <... memfd_create resumed>) = 3 [pid 5032] umount2("./32/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5034] unlink("./32/cgroup" [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] <... unlink resumed>) = 0 [pid 5889] <... mmap resumed>) = 0x7f4f650a0000 [pid 5034] umount2("./32/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] newfstatat(AT_FDCWD, "./32/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] unlink("./32/cgroup" [pid 5034] newfstatat(AT_FDCWD, "./32/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] <... unlink resumed>) = 0 [pid 5034] unlink("./32/cgroup.net" [pid 5032] umount2("./32/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... unlink resumed>) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] getdents64(3, [pid 5032] newfstatat(AT_FDCWD, "./32/cgroup.net", [pid 5034] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5034] close(3 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] <... close resumed>) = 0 [pid 5032] unlink("./32/cgroup.net" [pid 5034] rmdir("./32" [pid 5032] <... unlink resumed>) = 0 [pid 5034] <... rmdir resumed>) = 0 [pid 5032] getdents64(3, [pid 5034] mkdir("./33", 0777 [pid 5032] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5034] <... mkdir resumed>) = 0 [pid 5032] close(3 [pid 5034] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5032] <... close resumed>) = 0 [pid 5034] <... openat resumed>) = 3 [pid 5032] rmdir("./32" [pid 5034] ioctl(3, LOOP_CLR_FD [pid 5032] <... rmdir resumed>) = 0 [pid 5034] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5032] mkdir("./33", 0777 [pid 5034] close(3 [pid 5032] <... mkdir resumed>) = 0 [pid 5034] <... close resumed>) = 0 [pid 5034] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5032] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5890 attached [pid 5034] <... clone resumed>, child_tidptr=0x55555654e690) = 100 [pid 5033] kill(-96, SIGKILL [pid 5032] <... openat resumed>) = 3 [pid 5879] <... futex resumed>) = ? [pid 5033] <... kill resumed>) = 0 [pid 5032] ioctl(3, LOOP_CLR_FD [pid 5890] set_robust_list(0x55555654e6a0, 24 [pid 5879] +++ killed by SIGKILL +++ [pid 5033] kill(96, SIGKILL [pid 5032] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5890] <... set_robust_list resumed>) = 0 [pid 5033] <... kill resumed>) = 0 [pid 5032] close(3) = 0 [pid 5890] chdir("./33" [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5891 attached [pid 5890] <... chdir resumed>) = 0 [pid 5891] set_robust_list(0x55555654e6a0, 24 [pid 5032] <... clone resumed>, child_tidptr=0x55555654e690) = 97 [pid 5891] <... set_robust_list resumed>) = 0 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5891] chdir("./33" [pid 5890] <... prctl resumed>) = 0 [pid 5891] <... chdir resumed>) = 0 [pid 5891] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5890] setpgid(0, 0 [pid 5891] <... prctl resumed>) = 0 [pid 5890] <... setpgid resumed>) = 0 [pid 5891] setpgid(0, 0) = 0 [pid 5891] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5890] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5891] <... symlink resumed>) = 0 [pid 5891] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5890] <... symlink resumed>) = 0 [pid 5891] <... symlink resumed>) = 0 [pid 5890] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5891] symlink("/syzcgroup/net/syz1", "./cgroup.net") = 0 [pid 5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5890] <... symlink resumed>) = 0 [pid 5891] <... openat resumed>) = 3 [pid 5890] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5891] write(3, "1000", 4) = 4 [pid 5890] <... symlink resumed>) = 0 [pid 5891] close(3 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5891] <... close resumed>) = 0 [pid 5891] symlink("/dev/binderfs", "./binderfs" [pid 5890] <... openat resumed>) = 3 [pid 5891] <... symlink resumed>) = 0 [pid 5890] write(3, "1000", 4 [pid 5891] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... write resumed>) = 4 [pid 5891] <... futex resumed>) = 0 [pid 5890] close(3 [pid 5891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5890] <... close resumed>) = 0 [pid 5891] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5890] symlink("/dev/binderfs", "./binderfs" [pid 5891] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5890] <... symlink resumed>) = 0 [pid 5891] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5890] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5890] <... futex resumed>) = 0 [pid 5891] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5892 attached ) = 0x7f4f6d4a0000 [pid 5892] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053) = 0 [pid 5890] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5892] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5891] <... clone3 resumed> => {parent_tid=[98]}, 88) = 98 [pid 5892] <... set_robust_list resumed>) = 0 [pid 5891] rt_sigprocmask(SIG_SETMASK, [], [pid 5890] <... mprotect resumed>) = 0 [pid 5892] rt_sigprocmask(SIG_SETMASK, [], [pid 5891] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5892] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5891] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5892] memfd_create("syzkaller", 0 [pid 5891] <... futex resumed>) = 0 [pid 5890] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5892] <... memfd_create resumed>) = 3 [pid 5891] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5890] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5893 attached ) = 0x7f4f650a0000 [pid 5893] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5890] <... clone3 resumed> => {parent_tid=[101]}, 88) = 101 [pid 5890] rt_sigprocmask(SIG_SETMASK, [], [pid 5893] <... rseq resumed>) = 0 [pid 5890] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5893] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5890] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... set_robust_list resumed>) = 0 [pid 5890] <... futex resumed>) = 0 [pid 5893] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5890] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5893] memfd_create("syzkaller", 0) = 3 [pid 5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5867] <... ioctl resumed>) = ? [pid 5867] +++ killed by SIGKILL +++ [pid 5863] +++ killed by SIGKILL +++ [pid 5033] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=96, si_uid=0, si_status=SIGKILL, si_utime=2 /* 0.02 s */, si_stime=75 /* 0.75 s */} --- [pid 5033] restart_syscall(<... resuming interrupted kill ...>) = 0 [pid 5033] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5033] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5033] umount2("./33/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./33/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./33/cgroup.cpu") = 0 [pid 5033] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./33/binderfs") = 0 [pid 5033] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5033] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5033] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5033] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5033] getdents64(4, 0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5033] close(4) = 0 [pid 5033] rmdir("./33/file0") = 0 [pid 5033] umount2("./33/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./33/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./33/cgroup") = 0 [pid 5033] umount2("./33/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5033] newfstatat(AT_FDCWD, "./33/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] unlink("./33/cgroup.net") = 0 [pid 5033] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5033] close(3) = 0 [pid 5033] rmdir("./33") = 0 [pid 5033] mkdir("./34", 0777) = 0 [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5033] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5033] close(3) = 0 [pid 5033] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5894 attached , child_tidptr=0x55555654e690) = 99 [pid 5894] set_robust_list(0x55555654e6a0, 24) = 0 [pid 5894] chdir("./34") = 0 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5894] setpgid(0, 0) = 0 [pid 5894] symlink("/syzcgroup/unified/syz2", "./cgroup") = 0 [pid 5894] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 5894] symlink("/syzcgroup/net/syz2", "./cgroup.net") = 0 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5894] write(3, "1000", 4) = 4 [pid 5894] close(3) = 0 [pid 5894] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5894] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5894] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5894] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5894] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5895 attached => {parent_tid=[100]}, 88) = 100 [pid 5895] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053) = 0 [pid 5894] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5895] set_robust_list(0x7f4f6d4c09a0, 24) = 0 [pid 5894] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5895] rt_sigprocmask(SIG_SETMASK, [], [pid 5894] <... futex resumed>) = 0 [pid 5895] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5894] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5895] memfd_create("syzkaller", 0) = 3 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f650a0000 [pid 5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5886] <... write resumed>) = 16777216 [pid 5886] munmap(0x7f4f650a0000, 16777216 [pid 5887] <... write resumed>) = 16777216 [pid 5887] munmap(0x7f4f650a0000, 16777216 [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5886] <... munmap resumed>) = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5886] ioctl(4, LOOP_SET_FD, 3 [pid 5887] <... munmap resumed>) = 0 [pid 5886] <... ioctl resumed>) = 0 [pid 5886] close(3) = 0 [pid 5886] mkdir("./file0", 0777 [pid 5887] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5886] <... mkdir resumed>) = 0 [pid 5887] <... openat resumed>) = 4 [pid 5886] mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5887] ioctl(4, LOOP_SET_FD, 3) = 0 [ 264.910136][ T5886] loop0: detected capacity change from 0 to 32768 [ 264.946720][ T5887] loop4: detected capacity change from 0 to 32768 [pid 5887] close(3) = 0 [pid 5887] mkdir("./file0", 0777) = 0 [ 264.960766][ T5886] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 265.007690][ T5886] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 265.016389][ T5887] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 265.025388][ T5887] CPU: 1 PID: 5887 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 265.035872][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 265.045969][ T5887] Call Trace: [ 265.049279][ T5887] [ 265.052248][ T5887] dump_stack_lvl+0x136/0x150 [pid 5887] mount("/dev/loop4", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5889] <... write resumed>) = 16777216 [ 265.057002][ T5887] sysfs_warn_dup+0x80/0xa0 [ 265.061560][ T5887] sysfs_create_dir_ns+0x237/0x290 [ 265.066730][ T5887] ? sysfs_create_mount_point+0xb0/0xb0 [ 265.072418][ T5887] ? spin_bug+0x1c0/0x1c0 [ 265.076810][ T5887] ? do_raw_spin_unlock+0x175/0x230 [ 265.081612][ T5886] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 265.082049][ T5887] kobject_add_internal+0x2c9/0x9c0 [ 265.095111][ T5887] ? kfree+0x11/0x150 [ 265.099145][ T5887] kobject_init_and_add+0x101/0x170 [ 265.104404][ T5887] ? kobject_create_and_add+0xf0/0xf0 [ 265.109838][ T5887] ? lockdep_init_map_type+0x21e/0x810 [ 265.115448][ T5887] ? lockdep_hardirqs_on+0x7d/0x100 [ 265.120710][ T5887] ? lockdep_init_map_type+0x21e/0x810 [ 265.126260][ T5887] gfs2_sys_fs_add+0x1d5/0x450 [ 265.131080][ T917] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 265.131086][ T5887] ? recover_store+0x170/0x170 [ 265.142672][ T5887] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 265.146449][ T917] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 265.148439][ T5887] gfs2_fill_super+0x1312/0x2aa0 [ 265.160131][ T5887] ? gfs2_reconfigure+0xf90/0xf90 [ 265.165213][ T5887] ? snprintf+0xbf/0x100 [ 265.169516][ T5887] ? vsprintf+0x30/0x30 [ 265.173733][ T5887] ? wait_for_completion_io_timeout+0x20/0x20 [ 265.179864][ T5887] ? set_blocksize+0x2d8/0x370 [ 265.184688][ T5887] get_tree_bdev+0x43e/0x7d0 [ 265.189344][ T5887] ? gfs2_reconfigure+0xf90/0xf90 [ 265.194431][ T5887] gfs2_get_tree+0x4e/0x270 [ 265.198998][ T5887] vfs_get_tree+0x8d/0x350 [ 265.203730][ T5887] path_mount+0x136e/0x1e70 [ 265.208293][ T5887] ? putname+0x102/0x140 [ 265.212588][ T5887] ? lockdep_hardirqs_on+0x7d/0x100 [ 265.217850][ T5887] ? finish_automount+0xa30/0xa30 [ 265.222941][ T5887] ? putname+0x102/0x140 [ 265.227240][ T5887] __x64_sys_mount+0x283/0x300 [ 265.232069][ T5887] ? copy_mnt_ns+0xb30/0xb30 [ 265.236722][ T5887] ? lockdep_hardirqs_on+0x7d/0x100 [ 265.241995][ T5887] ? _raw_spin_unlock_irq+0x2e/0x50 [ 265.247264][ T5887] ? ptrace_notify+0xfe/0x140 [ 265.252018][ T5887] do_syscall_64+0x39/0xb0 [pid 5889] munmap(0x7f4f650a0000, 16777216 [pid 5893] <... write resumed>) = 16777216 [ 265.256486][ T5887] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 265.262457][ T5887] RIP: 0033:0x7f4f6dd11c5a [ 265.266915][ T5887] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 265.286672][ T5887] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 265.295151][ T5887] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 265.303186][ T5887] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 265.311227][ T5887] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 265.319262][ T5887] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 265.327296][ T5887] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 265.335326][ T5887] [pid 5893] munmap(0x7f4f650a0000, 16777216 [pid 5892] <... write resumed>) = 16777216 [pid 5889] <... munmap resumed>) = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5889] ioctl(4, LOOP_SET_FD, 3 [ 265.385875][ T5887] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 265.423910][ T5887] gfs2: fsid=syz:syz: error -17 adding sysfs files [pid 5892] munmap(0x7f4f650a0000, 16777216 [pid 5889] <... ioctl resumed>) = 0 [pid 5889] close(3) = 0 [pid 5889] mkdir("./file0", 0777) = 0 [ 265.430850][ T5889] loop3: detected capacity change from 0 to 32768 [ 265.443386][ T917] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 296ms [ 265.465628][ T5889] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 265.476125][ T5889] CPU: 0 PID: 5889 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 265.486625][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 265.496733][ T5889] Call Trace: [ 265.500053][ T5889] [ 265.503024][ T5889] dump_stack_lvl+0x136/0x150 [ 265.507784][ T5889] sysfs_warn_dup+0x80/0xa0 [ 265.512340][ T5889] sysfs_create_dir_ns+0x237/0x290 [ 265.517509][ T5889] ? sysfs_create_mount_point+0xb0/0xb0 [ 265.523200][ T5889] ? spin_bug+0x1c0/0x1c0 [ 265.527591][ T5889] ? do_raw_spin_unlock+0x175/0x230 [ 265.532846][ T5889] kobject_add_internal+0x2c9/0x9c0 [ 265.538104][ T5889] ? kfree+0x11/0x150 [ 265.542134][ T5889] kobject_init_and_add+0x101/0x170 [ 265.547387][ T5889] ? kobject_create_and_add+0xf0/0xf0 [ 265.552812][ T5889] ? lockdep_init_map_type+0x21e/0x810 [ 265.558327][ T5889] ? lockdep_hardirqs_on+0x7d/0x100 [ 265.563579][ T5889] ? lockdep_init_map_type+0x21e/0x810 [ 265.569109][ T5889] gfs2_sys_fs_add+0x1d5/0x450 [ 265.573925][ T5889] ? recover_store+0x170/0x170 [ 265.578739][ T5889] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 265.584520][ T5889] gfs2_fill_super+0x1312/0x2aa0 [ 265.589603][ T5889] ? gfs2_reconfigure+0xf90/0xf90 [ 265.594687][ T5889] ? snprintf+0xbf/0x100 [ 265.598984][ T5889] ? vsprintf+0x30/0x30 [ 265.603196][ T5889] ? wait_for_completion_io_timeout+0x20/0x20 [ 265.609325][ T5889] ? set_blocksize+0x2d8/0x370 [ 265.614145][ T5889] get_tree_bdev+0x43e/0x7d0 [ 265.618797][ T5889] ? gfs2_reconfigure+0xf90/0xf90 [ 265.623927][ T5889] gfs2_get_tree+0x4e/0x270 [ 265.628485][ T5889] vfs_get_tree+0x8d/0x350 [ 265.632962][ T5889] path_mount+0x136e/0x1e70 [ 265.637525][ T5889] ? putname+0x102/0x140 [ 265.641814][ T5889] ? lockdep_hardirqs_on+0x7d/0x100 [ 265.647068][ T5889] ? finish_automount+0xa30/0xa30 [ 265.652165][ T5889] ? putname+0x102/0x140 [ 265.656474][ T5889] __x64_sys_mount+0x283/0x300 [ 265.657491][ T5893] loop5: detected capacity change from 0 to 32768 [ 265.661274][ T5889] ? copy_mnt_ns+0xb30/0xb30 [ 265.668074][ T5892] loop1: detected capacity change from 0 to 32768 [ 265.672266][ T5889] ? lockdep_hardirqs_on+0x7d/0x100 [ 265.683948][ T5889] ? _raw_spin_unlock_irq+0x2e/0x50 [ 265.689304][ T5889] ? ptrace_notify+0xfe/0x140 [ 265.694048][ T5889] do_syscall_64+0x39/0xb0 [ 265.698520][ T5889] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 265.704503][ T5889] RIP: 0033:0x7f4f6dd11c5a [ 265.708966][ T5889] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 265.728640][ T5889] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [pid 5889] mount("/dev/loop3", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5895] <... write resumed>) = 16777216 [pid 5893] <... munmap resumed>) = 0 [pid 5892] <... munmap resumed>) = 0 [pid 5887] <... mount resumed>) = -1 EEXIST (File exists) [pid 5895] munmap(0x7f4f650a0000, 16777216 [pid 5893] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5892] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5887] ioctl(4, LOOP_CLR_FD [pid 5893] <... openat resumed>) = 4 [pid 5892] <... openat resumed>) = 4 [pid 5893] ioctl(4, LOOP_SET_FD, 3 [pid 5892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5892] close(3) = 0 [pid 5892] mkdir("./file0", 0777) = 0 [pid 5893] <... ioctl resumed>) = 0 [pid 5893] close(3) = 0 [pid 5893] mkdir("./file0", 0777) = 0 [pid 5892] mount("/dev/loop1", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [ 265.737121][ T5889] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 265.745155][ T5889] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 265.753179][ T5889] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 265.761203][ T5889] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 265.769227][ T5889] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 265.777254][ T5889] [pid 5893] mount("/dev/loop5", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5895] <... munmap resumed>) = 0 [pid 5886] <... mount resumed>) = 0 [pid 5895] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5895] <... openat resumed>) = 4 [pid 5886] <... openat resumed>) = 3 [ 265.788795][ T917] gfs2: fsid=syz:syz.0: jid=0: Done [ 265.794106][ T5886] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 265.795969][ T5889] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 265.816539][ T5892] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 265.823978][ T5892] CPU: 1 PID: 5892 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 5886] chdir("./file0") = 0 [pid 5886] ioctl(4, LOOP_CLR_FD) = 0 [pid 5886] close(4) = 0 [ 265.828044][ T5895] loop2: detected capacity change from 0 to 32768 [ 265.834424][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 265.834448][ T5892] Call Trace: [ 265.834459][ T5892] [ 265.834470][ T5892] dump_stack_lvl+0x136/0x150 [ 265.860675][ T5886] gfs2: fsid=syz:syz.0: gfs2_dirent_offset: wrong block type 1577058308 [ 265.861892][ T5892] sysfs_warn_dup+0x80/0xa0 [ 265.874805][ T5892] sysfs_create_dir_ns+0x237/0x290 [ 265.879976][ T5892] ? sysfs_create_mount_point+0xb0/0xb0 [pid 5886] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5884] <... futex resumed>) = 0 [pid 5886] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5884] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] <... futex resumed>) = 0 [pid 5886] openat(AT_FDCWD, "./file0", O_RDONLY [ 265.884251][ T5886] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 265.884251][ T5886] inode = 12 2341 [ 265.884251][ T5886] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 265.885558][ T5892] ? spin_bug+0x1c0/0x1c0 [ 265.885611][ T5892] ? do_raw_spin_unlock+0x175/0x230 [ 265.913746][ T5892] kobject_add_internal+0x2c9/0x9c0 [ 265.918997][ T5892] ? kfree+0x11/0x150 [ 265.923005][ T5892] kobject_init_and_add+0x101/0x170 [ 265.928235][ T5892] ? kobject_create_and_add+0xf0/0xf0 [ 265.933635][ T5892] ? lockdep_init_map_type+0x21e/0x810 [ 265.939217][ T5892] ? lockdep_hardirqs_on+0x7d/0x100 [ 265.944447][ T5892] ? lockdep_init_map_type+0x21e/0x810 [ 265.949943][ T5892] gfs2_sys_fs_add+0x1d5/0x450 [ 265.954745][ T5892] ? recover_store+0x170/0x170 [ 265.959533][ T5892] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 265.965300][ T5892] gfs2_fill_super+0x1312/0x2aa0 [ 265.970274][ T5892] ? gfs2_reconfigure+0xf90/0xf90 [ 265.975327][ T5892] ? snprintf+0xbf/0x100 [ 265.979688][ T5892] ? vsprintf+0x30/0x30 [ 265.983873][ T5892] ? wait_for_completion_io_timeout+0x20/0x20 [ 265.990064][ T5892] ? set_blocksize+0x2d8/0x370 [ 265.994864][ T5892] get_tree_bdev+0x43e/0x7d0 [ 265.999490][ T5892] ? gfs2_reconfigure+0xf90/0xf90 [ 266.005414][ T5892] gfs2_get_tree+0x4e/0x270 [ 266.009946][ T5892] vfs_get_tree+0x8d/0x350 [ 266.014395][ T5892] path_mount+0x136e/0x1e70 [ 266.018931][ T5892] ? putname+0x102/0x140 [ 266.023212][ T5892] ? lockdep_hardirqs_on+0x7d/0x100 [ 266.028535][ T5892] ? finish_automount+0xa30/0xa30 [ 266.033597][ T5892] ? putname+0x102/0x140 [ 266.037871][ T5892] __x64_sys_mount+0x283/0x300 [ 266.042670][ T5892] ? copy_mnt_ns+0xb30/0xb30 [ 266.047292][ T5892] ? lockdep_hardirqs_on+0x7d/0x100 [ 266.052522][ T5892] ? _raw_spin_unlock_irq+0x2e/0x50 [ 266.057764][ T5892] ? ptrace_notify+0xfe/0x140 [ 266.062482][ T5892] do_syscall_64+0x39/0xb0 [ 266.066924][ T5892] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 266.072861][ T5892] RIP: 0033:0x7f4f6dd11c5a [ 266.077301][ T5892] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 266.096938][ T5892] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 266.105377][ T5892] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 266.113379][ T5892] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [ 266.121403][ T5892] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 266.129401][ T5892] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [pid 5884] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5895] <... ioctl resumed>) = 0 [ 266.137398][ T5892] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 266.145396][ T5892] [ 266.150737][ T5889] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 266.155070][ T5886] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 266.169159][ T5893] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 266.179989][ T5886] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5886 [syz-executor676] __gfs2_lookup+0x83/0x280 [ 266.186418][ T5893] CPU: 1 PID: 5893 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 266.190763][ T5886] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 266.200484][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 266.200505][ T5893] Call Trace: [ 266.200514][ T5893] [ 266.200526][ T5893] dump_stack_lvl+0x136/0x150 [ 266.200587][ T5893] sysfs_warn_dup+0x80/0xa0 [ 266.200623][ T5893] sysfs_create_dir_ns+0x237/0x290 [ 266.200659][ T5893] ? sysfs_create_mount_point+0xb0/0xb0 [ 266.200697][ T5893] ? spin_bug+0x1c0/0x1c0 [ 266.200738][ T5893] ? do_raw_spin_unlock+0x175/0x230 [ 266.200783][ T5893] kobject_add_internal+0x2c9/0x9c0 [ 266.200816][ T5893] ? kfree+0x11/0x150 [ 266.200849][ T5893] kobject_init_and_add+0x101/0x170 [ 266.200886][ T5893] ? kobject_create_and_add+0xf0/0xf0 [ 266.200923][ T5893] ? lockdep_init_map_type+0x21e/0x810 [ 266.210393][ T5886] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 266.219575][ T5893] ? lockdep_hardirqs_on+0x7d/0x100 [ 266.219620][ T5893] ? lockdep_init_map_type+0x21e/0x810 [ 266.219663][ T5893] gfs2_sys_fs_add+0x1d5/0x450 [ 266.222936][ T5886] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 266.225869][ T5893] ? recover_store+0x170/0x170 [ 266.225905][ T5893] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 266.225954][ T5893] gfs2_fill_super+0x1312/0x2aa0 [ 266.230621][ T5886] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 266.235116][ T5893] ? gfs2_reconfigure+0xf90/0xf90 [ 266.240463][ T5886] gfs2: fsid=syz:syz.0: File system withdrawn [ 266.245748][ T5893] ? snprintf+0xbf/0x100 [ 266.349113][ T5893] ? vsprintf+0x30/0x30 [ 266.353326][ T5893] ? wait_for_completion_io_timeout+0x20/0x20 [ 266.359435][ T5893] ? set_blocksize+0x2d8/0x370 [ 266.364234][ T5893] get_tree_bdev+0x43e/0x7d0 [ 266.368860][ T5893] ? gfs2_reconfigure+0xf90/0xf90 [ 266.373929][ T5893] gfs2_get_tree+0x4e/0x270 [ 266.378456][ T5893] vfs_get_tree+0x8d/0x350 [ 266.382902][ T5893] path_mount+0x136e/0x1e70 [ 266.387456][ T5893] ? putname+0x102/0x140 [ 266.391769][ T5893] ? lockdep_hardirqs_on+0x7d/0x100 [ 266.397014][ T5893] ? finish_automount+0xa30/0xa30 [ 266.402127][ T5893] ? putname+0x102/0x140 [ 266.406406][ T5893] __x64_sys_mount+0x283/0x300 [ 266.411208][ T5893] ? copy_mnt_ns+0xb30/0xb30 [ 266.416024][ T5893] ? lockdep_hardirqs_on+0x7d/0x100 [ 266.421294][ T5893] ? _raw_spin_unlock_irq+0x2e/0x50 [ 266.426546][ T5893] ? ptrace_notify+0xfe/0x140 [ 266.431294][ T5893] do_syscall_64+0x39/0xb0 [ 266.435737][ T5893] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 266.441685][ T5893] RIP: 0033:0x7f4f6dd11c5a [ 266.446121][ T5893] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 266.465761][ T5893] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 266.474211][ T5893] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 266.482222][ T5893] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [pid 5895] close(3 [pid 5889] <... mount resumed>) = -1 EEXIST (File exists) [pid 5889] ioctl(4, LOOP_CLR_FD [pid 5895] <... close resumed>) = 0 [pid 5895] mkdir("./file0", 0777 [pid 5884] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5884] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6607f000 [pid 5884] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5895] <... mkdir resumed>) = 0 [ 266.490324][ T5893] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 266.498327][ T5893] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 266.506333][ T5893] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 266.514420][ T5893] [ 266.517511][ T5892] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [pid 5895] mount("/dev/loop2", "./file0", "gfs2", MS_RDONLY|MS_SYNCHRONOUS|MS_POSIXACL, "" [pid 5884] <... mprotect resumed>) = 0 [pid 5884] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5884] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} => {parent_tid=[105]}, 88) = 105 [pid 5884] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5884] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 266.565355][ T5895] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 266.598002][ T5886] CPU: 1 PID: 5886 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 266.608556][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 266.618756][ T5886] Call Trace: [ 266.622070][ T5886] [ 266.625053][ T5886] dump_stack_lvl+0x136/0x150 [ 266.629807][ T5886] gfs2_withdraw+0xb33/0x1060 [ 266.634549][ T5886] ? gfs2_consist_inode_i+0x104/0x150 [ 266.639997][ T5886] gfs2_dirent_scan+0x32a/0x3d0 [ 266.644918][ T5886] ? gfs2_dirent_prev+0x210/0x210 [ 266.646679][ T5892] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 266.649998][ T5886] ? gfs2_dirent_prev+0x210/0x210 [ 266.661581][ T5886] gfs2_dirent_search+0x47d/0x580 [ 266.666671][ T5886] ? get_first_leaf+0x190/0x190 [ 266.671588][ T5886] ? gfs2_permission+0x256/0x3e0 [ 266.676589][ T5886] gfs2_dir_search+0x8d/0x2d0 [ 266.681339][ T5886] ? gfs2_dir_read+0x14e0/0x14e0 [ 266.686355][ T5886] gfs2_lookupi+0x481/0x640 [ 266.690918][ T5886] ? gfs2_lookup_by_inum+0x100/0x100 [ 266.696259][ T5886] ? __gfs2_lookup+0x83/0x280 [ 266.701083][ T5886] ? d_alloc_parallel+0x693/0x1530 [ 266.706250][ T5886] __gfs2_lookup+0x83/0x280 [ 266.710812][ T5886] ? gfs2_lookupi+0x640/0x640 [ 266.715557][ T5886] ? __d_lookup_rcu+0x4e0/0x4e0 [ 266.720484][ T5886] ? __d_lookup+0x289/0x4c0 [ 266.725050][ T5886] gfs2_atomic_open+0xde/0x250 [ 266.729878][ T5886] ? __gfs2_lookup+0x280/0x280 [ 266.734720][ T5886] lookup_open.isra.0+0xce2/0x1400 [ 266.739896][ T5886] ? link_path_walk.part.0+0xd60/0xd60 [ 266.745435][ T5886] ? lookup_fast+0x14e/0x520 [ 266.750087][ T5886] path_openat+0x969/0x2710 [ 266.754669][ T5886] ? path_lookupat+0x840/0x840 [ 266.759497][ T5886] ? find_held_lock+0x2d/0x110 [ 266.764314][ T5886] do_filp_open+0x1ba/0x410 [ 266.768971][ T5886] ? may_open_dev+0xf0/0xf0 [ 266.773534][ T5886] ? find_held_lock+0x2d/0x110 [ 266.778355][ T5886] ? do_raw_spin_lock+0x124/0x2b0 [ 266.783530][ T5886] ? spin_bug+0x1c0/0x1c0 [ 266.787920][ T5886] ? _raw_spin_unlock+0x28/0x40 [ 266.792835][ T5886] ? alloc_fd+0x2e4/0x750 [ 266.797255][ T5886] do_sys_openat2+0x160/0x1c0 [ 266.801993][ T5886] ? build_open_flags+0x720/0x720 [ 266.807061][ T5886] ? ptrace_notify+0xfe/0x140 [ 266.811781][ T5886] ? lock_downgrade+0x690/0x690 [ 266.816671][ T5886] __x64_sys_openat+0x143/0x1f0 [ 266.821564][ T5886] ? __ia32_sys_open+0x1c0/0x1c0 [ 266.826553][ T5886] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.831809][ T5886] ? lockdep_hardirqs_on+0x7d/0x100 [ 266.837061][ T5886] ? _raw_spin_unlock_irq+0x2e/0x50 [ 266.842319][ T5886] ? ptrace_notify+0xfe/0x140 [ 266.847048][ T5886] do_syscall_64+0x39/0xb0 [ 266.851506][ T5886] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 266.857467][ T5886] RIP: 0033:0x7f4f6dd107f9 [ 266.861909][ T5886] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 266.881553][ T5886] RSP: 002b:00007f4f6d4c0228 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.890086][ T5886] RAX: ffffffffffffffda RBX: 00007f4f6dda46e8 RCX: 00007f4f6dd107f9 [ 266.898094][ T5886] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000ffffff9c [ 266.906103][ T5886] RBP: 00007f4f6dda46e0 R08: 00007f4f6d4c06c0 R09: 00007f4f6d4c06c0 [pid 5884] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5902 attached [pid 5889] <... ioctl resumed>) = 0 [pid 5887] <... ioctl resumed>) = 0 [pid 5884] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 266.914103][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f6dda46ec [ 266.922099][ T5886] R13: 0030656c69662f2e R14: 00007f4f6dd5d740 R15: 00007fffaa0db528 [ 266.930099][ T5886] [ 266.933848][ T5895] CPU: 0 PID: 5895 Comm: syz-executor676 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 266.944349][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 266.954460][ T5895] Call Trace: [ 266.957776][ T5895] [ 266.960738][ T5895] dump_stack_lvl+0x136/0x150 [pid 5886] <... openat resumed>) = -1 EIO (Input/output error) [pid 5886] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5886] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5902] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5889] close(4 [pid 5884] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] <... rseq resumed>) = 0 [pid 5889] <... close resumed>) = 0 [pid 5886] <... futex resumed>) = 0 [pid 5884] <... futex resumed>) = 1 [pid 5902] set_robust_list(0x7f4f6609f9a0, 24 [pid 5889] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5884] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5902] <... set_robust_list resumed>) = 0 [pid 5889] <... futex resumed>) = 1 [pid 5886] <... openat resumed>) = -1 EIO (Input/output error) [pid 5902] rt_sigprocmask(SIG_SETMASK, [], [pid 5889] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5886] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5886] <... futex resumed>) = 1 [pid 5884] <... futex resumed>) = 0 [pid 5902] ioctl(0, VFAT_IOCTL_READDIR_SHORT [pid 5886] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5902] <... ioctl resumed>, 0) = -1 ENOTTY (Inappropriate ioctl for device) [pid 5902] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5902] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [ 266.965480][ T5895] sysfs_warn_dup+0x80/0xa0 [ 266.970057][ T5895] sysfs_create_dir_ns+0x237/0x290 [ 266.975227][ T5895] ? sysfs_create_mount_point+0xb0/0xb0 [ 266.980840][ T5895] ? spin_bug+0x1c0/0x1c0 [ 266.984711][ T5893] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 266.985213][ T5895] ? do_raw_spin_unlock+0x175/0x230 [ 267.004521][ T5895] kobject_add_internal+0x2c9/0x9c0 [ 267.009817][ T5895] ? kfree+0x11/0x150 [pid 5884] close(3) = 0 [pid 5884] close(4) = -1 EBADF (Bad file descriptor) [pid 5884] close(5) = -1 EBADF (Bad file descriptor) [ 267.013876][ T5895] kobject_init_and_add+0x101/0x170 [ 267.019141][ T5895] ? kobject_create_and_add+0xf0/0xf0 [ 267.024576][ T5895] ? lockdep_init_map_type+0x21e/0x810 [ 267.030074][ T5895] ? lockdep_hardirqs_on+0x7d/0x100 [ 267.035307][ T5895] ? lockdep_init_map_type+0x21e/0x810 [ 267.040805][ T5895] gfs2_sys_fs_add+0x1d5/0x450 [ 267.045596][ T5895] ? recover_store+0x170/0x170 [ 267.050388][ T5895] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 267.056149][ T5895] gfs2_fill_super+0x1312/0x2aa0 [ 267.061122][ T5895] ? gfs2_reconfigure+0xf90/0xf90 [ 267.066174][ T5895] ? snprintf+0xbf/0x100 [ 267.070448][ T5895] ? vsprintf+0x30/0x30 [ 267.074634][ T5895] ? wait_for_completion_io_timeout+0x20/0x20 [ 267.080734][ T5895] ? set_blocksize+0x2d8/0x370 [ 267.085534][ T5895] get_tree_bdev+0x43e/0x7d0 [ 267.090158][ T5895] ? gfs2_reconfigure+0xf90/0xf90 [ 267.095218][ T5895] gfs2_get_tree+0x4e/0x270 [ 267.099751][ T5895] vfs_get_tree+0x8d/0x350 [ 267.104198][ T5895] path_mount+0x136e/0x1e70 [ 267.108733][ T5895] ? putname+0x102/0x140 [ 267.113002][ T5895] ? lockdep_hardirqs_on+0x7d/0x100 [ 267.118238][ T5895] ? finish_automount+0xa30/0xa30 [ 267.123298][ T5895] ? putname+0x102/0x140 [ 267.127568][ T5895] __x64_sys_mount+0x283/0x300 [ 267.132368][ T5895] ? copy_mnt_ns+0xb30/0xb30 [ 267.137011][ T5895] ? lockdep_hardirqs_on+0x7d/0x100 [ 267.142242][ T5895] ? _raw_spin_unlock_irq+0x2e/0x50 [ 267.147481][ T5895] ? ptrace_notify+0xfe/0x140 [ 267.152207][ T5895] do_syscall_64+0x39/0xb0 [ 267.156663][ T5895] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 267.162604][ T5895] RIP: 0033:0x7f4f6dd11c5a [ 267.167041][ T5895] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 267.186677][ T5895] RSP: 002b:00007f4f6d4c00a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 267.195117][ T5895] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4f6dd11c5a [ 267.203111][ T5895] RDX: 00000000200124c0 RSI: 0000000020000080 RDI: 00007f4f6d4c00b0 [pid 5892] <... mount resumed>) = -1 EEXIST (File exists) [pid 5888] <... futex resumed>) = 0 [pid 5887] close(4 [pid 5885] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5884] close(6 [pid 5892] ioctl(4, LOOP_CLR_FD [pid 5888] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] <... close resumed>) = 0 [pid 5885] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5889] <... futex resumed>) = 0 [pid 5888] <... futex resumed>) = 1 [pid 5887] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... futex resumed>) = 0 [pid 5884] close(7 [pid 5889] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5888] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5887] <... futex resumed>) = 0 [pid 5885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 267.211108][ T5895] RBP: 00007f4f6d4c00b0 R08: 00007f4f6d4c00f0 R09: 0000000000012557 [ 267.219103][ T5895] R10: 0000000000010011 R11: 0000000000000282 R12: 00007f4f6d4c00f0 [ 267.227097][ T5895] R13: 0000000000000003 R14: 0000000001000000 R15: 00007fffaa0db528 [ 267.235094][ T5895] [ 267.240771][ T5895] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [pid 5889] <... openat resumed>) = 3 [pid 5887] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] <... mmap resumed>) = 0x7f4f6607f000 [pid 5884] close(8 [pid 5889] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5889] <... futex resumed>) = 1 [pid 5885] <... mprotect resumed>) = 0 [pid 5884] close(9 [pid 5889] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5884] close(10 [pid 5885] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5903 attached [pid 5895] <... mount resumed>) = -1 EEXIST (File exists) [pid 5888] <... futex resumed>) = 0 [pid 5884] close(11 [pid 5903] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5885] <... clone3 resumed> => {parent_tid=[97]}, 88) = 97 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5903] <... rseq resumed>) = 0 [pid 5885] rt_sigprocmask(SIG_SETMASK, [], [pid 5884] close(12 [pid 5903] set_robust_list(0x7f4f6609f9a0, 24 [pid 5895] ioctl(4, LOOP_CLR_FD [pid 5888] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5903] <... set_robust_list resumed>) = 0 [pid 5889] <... futex resumed>) = 0 [pid 5888] <... futex resumed>) = 1 [pid 5885] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] close(13 [pid 5903] rt_sigprocmask(SIG_SETMASK, [], [pid 5893] <... mount resumed>) = -1 EEXIST (File exists) [pid 5889] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5885] <... futex resumed>) = 0 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5903] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5893] ioctl(4, LOOP_CLR_FD [pid 5889] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5888] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5885] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5884] close(14 [pid 5903] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5889] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5903] <... openat resumed>) = 3 [pid 5889] <... futex resumed>) = 0 [pid 5888] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] close(15 [pid 5903] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5889] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5888] <... futex resumed>) = 0 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5903] <... futex resumed>) = 1 [pid 5889] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5888] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5885] <... futex resumed>) = 0 [pid 5884] close(16 [pid 5903] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5889] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5885] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5889] <... futex resumed>) = 0 [pid 5888] close(3 [pid 5887] <... futex resumed>) = 0 [pid 5885] <... futex resumed>) = 1 [pid 5884] close(17 [pid 5889] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] <... close resumed>) = 0 [pid 5887] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5885] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 267.267386][ T5895] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 267.287669][ T5893] gfs2: fsid=syz:syz: error -17 adding sysfs files [pid 5888] close(4 [pid 5887] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5884] close(18 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(5 [pid 5887] <... futex resumed>) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5884] close(19 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(6 [pid 5887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5885] <... futex resumed>) = 0 [pid 5884] close(20 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5885] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(7 [pid 5887] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5884] close(21 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(8 [pid 5884] close(22 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] <... futex resumed>) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(9 [pid 5887] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] close(3 [pid 5884] close(23 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = 0 [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(10 [pid 5885] close(4 [pid 5884] close(24 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(11 [pid 5885] close(5 [pid 5884] close(25 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(12 [pid 5885] close(6 [pid 5884] close(26 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(13 [pid 5885] close(7 [pid 5884] close(27 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(14 [pid 5885] close(8 [pid 5884] close(28 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(15 [pid 5885] close(9 [pid 5884] close(29 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5884] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(16write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5885] close(10 [pid 5884] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5884] <... write resumed>) = 156 [pid 5888] close(17 [pid 5885] close(11 [pid 5884] exit_group(0 [pid 5902] <... futex resumed>) = ? [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] <... futex resumed>) = ? [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5884] <... exit_group resumed>) = ? [pid 5902] +++ exited with 0 +++ [pid 5888] close(18 [pid 5886] +++ exited with 0 +++ [pid 5885] close(12 [pid 5884] +++ exited with 0 +++ [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(19 [pid 5885] close(13 [pid 5029] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=103, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=65 /* 0.65 s */} --- [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] restart_syscall(<... resuming interrupted clone ...> [pid 5888] close(20 [pid 5885] close(14 [pid 5029] <... restart_syscall resumed>) = 0 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5888] close(21 [pid 5885] close(15 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5888] close(22 [pid 5885] close(16 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5888] close(23 [pid 5885] close(17 [pid 5029] <... openat resumed>) = 3 [pid 5890] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] newfstatat(3, "", [pid 5890] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] close(24 [pid 5885] close(18 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5890] <... futex resumed>) = 0 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] getdents64(3, [pid 5890] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5888] close(25 [pid 5885] close(19 [pid 5029] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5891] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5890] <... mmap resumed>) = 0x7f4f6607f000 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] umount2("./32/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5888] close(26 [pid 5885] close(20 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5890] <... mprotect resumed>) = 0 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] newfstatat(AT_FDCWD, "./32/cgroup.cpu", [pid 5890] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5888] close(27 [pid 5885] close(21 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5890] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] unlink("./32/cgroup.cpu" [pid 5890] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5888] close(28 [pid 5885] close(22 [pid 5029] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5904 attached [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5891] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... clone3 resumed> => {parent_tid=[102]}, 88) = 102 [pid 5888] close(29 [pid 5885] close(23 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] <... rseq resumed>) = 0 [pid 5890] rt_sigprocmask(SIG_SETMASK, [], [pid 5888] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5904] set_robust_list(0x7f4f6609f9a0, 24 [pid 5890] <... rt_sigprocmask resumed>NULL, 8) = 0 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5888] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5885] close(24 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5904] <... set_robust_list resumed>) = 0 [pid 5890] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... write resumed>) = 156 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] unlink("./32/binderfs" [pid 5904] rt_sigprocmask(SIG_SETMASK, [], [pid 5891] <... futex resumed>) = 0 [pid 5890] <... futex resumed>) = 0 [pid 5888] exit_group(0 [pid 5885] close(25 [pid 5029] <... unlink resumed>) = 0 [pid 5904] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5891] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5890] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5889] <... futex resumed>) = ? [pid 5888] <... exit_group resumed>) = ? [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5029] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5891] <... mmap resumed>) = 0x7f4f6607f000 [pid 5889] +++ exited with 0 +++ [pid 5888] +++ exited with 0 +++ [pid 5885] close(26 [pid 5904] <... openat resumed>) = 3 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=91, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=59 /* 0.59 s */} --- [pid 5904] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] close(27 [pid 5904] <... futex resumed>) = 1 [pid 5890] <... futex resumed>) = 0 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5904] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5890] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] close(28 [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5890] <... futex resumed>) = 0 [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5904] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5890] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5885] close(29 [pid 5904] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5891] mprotect(0x7f4f66080000, 131072, PROT_READ|PROT_WRITE [pid 5885] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5030] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5891] <... mprotect resumed>) = 0 [pid 5885] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] <... futex resumed>) = 1 [pid 5891] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5890] <... futex resumed>) = 0 [pid 5885] <... write resumed>) = 156 [pid 5030] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5904] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5891] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5890] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] exit_group(0 [pid 5030] <... openat resumed>) = 3 [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5903] <... futex resumed>) = ? [pid 5891] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6609f990, parent_tid=0x7f4f6609f990, exit_signal=0, stack=0x7f4f6607f000, stack_size=0x20300, tls=0x7f4f6609f6c0} [pid 5890] <... futex resumed>) = 0 [pid 5887] <... futex resumed>) = ? [pid 5885] <... exit_group resumed>) = ? [pid 5030] newfstatat(3, "", ./strace-static-x86_64: Process 5905 attached [pid 5904] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5903] +++ exited with 0 +++ [pid 5890] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5905] rseq(0x7f4f6609ffe0, 0x20, 0, 0x53053053 [pid 5904] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5891] <... clone3 resumed> => {parent_tid=[99]}, 88) = 99 [pid 5887] +++ exited with 0 +++ [pid 5885] +++ exited with 0 +++ [pid 5030] getdents64(3, [pid 5905] <... rseq resumed>) = 0 [pid 5904] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] rt_sigprocmask(SIG_SETMASK, [], [pid 5030] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5905] set_robust_list(0x7f4f6609f9a0, 24 [pid 5904] <... futex resumed>) = 1 [pid 5891] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5890] <... futex resumed>) = 0 [pid 5031] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=95, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=52 /* 0.52 s */} --- [pid 5030] umount2("./32/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5905] <... set_robust_list resumed>) = 0 [pid 5904] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5891] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5905] rt_sigprocmask(SIG_SETMASK, [], [pid 5891] <... futex resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./32/cgroup.cpu", [pid 5905] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5891] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5905] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5031] <... openat resumed>) = 3 [pid 5030] unlink("./32/cgroup.cpu" [pid 5031] newfstatat(3, "", [pid 5030] <... unlink resumed>) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] getdents64(3, [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5030] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5031] umount2("./32/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5905] <... openat resumed>) = 3 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] unlink("./32/binderfs" [pid 5905] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] newfstatat(AT_FDCWD, "./32/cgroup.cpu", [pid 5030] <... unlink resumed>) = 0 [pid 5905] <... futex resumed>) = 1 [pid 5891] <... futex resumed>) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5905] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5891] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] unlink("./32/cgroup.cpu" [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5891] <... futex resumed>) = 0 [pid 5031] <... unlink resumed>) = 0 [pid 5030] newfstatat(AT_FDCWD, "./32/file0", [pid 5905] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5891] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5905] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5905] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5891] <... futex resumed>) = 0 [pid 5905] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5891] futex(0x7f4f6dda46f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5891] <... futex resumed>) = 0 [pid 5905] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5891] futex(0x7f4f6dda46fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5905] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5905] futex(0x7f4f6dda46fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5891] <... futex resumed>) = 0 [pid 5905] futex(0x7f4f6dda46f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] newfstatat(AT_FDCWD, "./32/binderfs", [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5030] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] unlink("./32/binderfs" [pid 5030] getdents64(4, 0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5031] <... unlink resumed>) = 0 [pid 5030] getdents64(4, [pid 5031] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5895] <... ioctl resumed>) = 0 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] close(4 [pid 5895] close(4 [pid 5031] newfstatat(AT_FDCWD, "./32/file0", [pid 5030] <... close resumed>) = 0 [pid 5030] rmdir("./32/file0" [pid 5895] <... close resumed>) = 0 [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... rmdir resumed>) = 0 [pid 5895] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] umount2("./32/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... futex resumed>) = 1 [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5030] newfstatat(AT_FDCWD, "./32/cgroup", [pid 5031] <... openat resumed>) = 4 [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] newfstatat(4, "", [pid 5030] unlink("./32/cgroup" [pid 5031] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5030] <... unlink resumed>) = 0 [pid 5031] getdents64(4, [pid 5030] umount2("./32/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5030] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5030] newfstatat(AT_FDCWD, "./32/cgroup.net", [pid 5031] getdents64(4, [pid 5030] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5030] unlink("./32/cgroup.net" [pid 5893] <... ioctl resumed>) = 0 [pid 5031] close(4 [pid 5894] <... futex resumed>) = 0 [pid 5893] close(4 [pid 5031] <... close resumed>) = 0 [pid 5030] <... unlink resumed>) = 0 [pid 5894] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5893] <... close resumed>) = 0 [pid 5031] rmdir("./32/file0" [pid 5030] getdents64(3, [pid 5895] <... futex resumed>) = 0 [pid 5894] <... futex resumed>) = 1 [pid 5893] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... rmdir resumed>) = 0 [pid 5030] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5895] openat(AT_FDCWD, "./file0", O_RDONLY [pid 5894] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5893] <... futex resumed>) = 0 [pid 5890] close(3 [pid 5031] umount2("./32/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5030] close(3) = 0 [pid 5030] rmdir("./32") = 0 [pid 5030] mkdir("./33", 0777 [pid 5895] <... openat resumed>) = 3 [pid 5890] <... close resumed>) = 0 [pid 5893] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5890] close(4 [pid 5895] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] newfstatat(AT_FDCWD, "./32/cgroup", [pid 5895] <... futex resumed>) = 1 [pid 5894] <... futex resumed>) = 0 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5030] <... mkdir resumed>) = 0 [pid 5895] ioctl(-1, VFAT_IOCTL_READDIR_SHORT [pid 5894] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] close(5 [pid 5894] <... futex resumed>) = 0 [pid 5030] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5894] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... openat resumed>) = 3 [pid 5895] <... ioctl resumed>, 0) = -1 EBADF (Bad file descriptor) [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] unlink("./32/cgroup" [pid 5030] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5030] close(3) = 0 [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5906 attached [pid 5895] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] close(6 [pid 5031] <... unlink resumed>) = 0 [pid 5895] <... futex resumed>) = 1 [pid 5894] <... futex resumed>) = 0 [pid 5030] <... clone resumed>, child_tidptr=0x55555654e690) = 93 [pid 5895] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5894] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] umount2("./32/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5906] set_robust_list(0x55555654e6a0, 24 [pid 5895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5894] <... futex resumed>) = 0 [pid 5894] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] close(7) = -1 EBADF (Bad file descriptor) [pid 5031] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5906] <... set_robust_list resumed>) = 0 [pid 5895] openat(AT_FDCWD, "./cgroup.cpu/syz1", O_RDWR|O_PATH [pid 5906] chdir("./33" [pid 5895] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 5031] newfstatat(AT_FDCWD, "./32/cgroup.net", [pid 5895] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] close(8 [pid 5906] <... chdir resumed>) = 0 [pid 5895] <... futex resumed>) = 1 [pid 5894] <... futex resumed>) = 0 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5031] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5894] close(3) = 0 [pid 5894] close(4) = -1 EBADF (Bad file descriptor) [pid 5894] close(5) = -1 EBADF (Bad file descriptor) [pid 5890] close(9 [pid 5031] unlink("./32/cgroup.net" [pid 5906] <... prctl resumed>) = 0 [pid 5895] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5894] close(6 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5906] setpgid(0, 0 [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(10 [pid 5031] <... unlink resumed>) = 0 [pid 5906] <... setpgid resumed>) = 0 [pid 5894] close(7 [pid 5892] <... ioctl resumed>) = 0 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] getdents64(3, [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(11 [pid 5894] close(8 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(12 [pid 5894] close(9 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(13 [pid 5894] close(10 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(14 [pid 5894] close(11 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(15 [pid 5894] close(12 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(16 [pid 5894] close(13 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(17 [pid 5894] close(14 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(18 [pid 5894] close(15 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5906] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5892] close(4 [pid 5890] close(19 [pid 5031] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5894] close(16 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(20 [pid 5894] close(17 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(21 [pid 5894] close(18 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(22 [pid 5894] close(19 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(23 [pid 5906] <... symlink resumed>) = 0 [pid 5894] close(20 [pid 5892] <... close resumed>) = 0 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] close(3 [pid 5906] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5892] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] close(24 [pid 5894] close(21 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(25 [pid 5894] close(22 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... close resumed>) = 0 [pid 5906] <... symlink resumed>) = 0 [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5892] <... futex resumed>) = 0 [pid 5890] close(26 [pid 5906] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 5894] close(23 [pid 5892] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] rmdir("./32" [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(27 [pid 5894] close(24 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(28 [pid 5894] close(25 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] close(29 [pid 5894] close(26 [pid 5890] <... close resumed>) = -1 EBADF (Bad file descriptor) write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156 [pid 5894] close(27 [pid 5890] <... write resumed>) = 156 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5890] exit_group(0 [pid 5904] <... futex resumed>) = ? [pid 5894] close(28 [pid 5893] <... futex resumed>) = ? [pid 5890] <... exit_group resumed>) = ? [pid 5906] <... symlink resumed>) = 0 [pid 5904] +++ exited with 0 +++ [pid 5894] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5891] close(3 [pid 5894] close(29) = -1 EBADF (Bad file descriptor) [pid 5031] <... rmdir resumed>) = 0 [pid 5894] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156) = 156 [pid 5894] exit_group(0) = ? [pid 5893] +++ exited with 0 +++ [pid 5890] +++ exited with 0 +++ [pid 5895] <... futex resumed>) = ? [pid 5034] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=100, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=59 /* 0.59 s */} --- [pid 5891] <... close resumed>) = 0 [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5895] +++ exited with 0 +++ [pid 5894] +++ exited with 0 +++ [pid 5031] mkdir("./33", 0777 [pid 5891] close(4 [pid 5906] <... openat resumed>) = 3 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5031] <... mkdir resumed>) = 0 [pid 5906] write(3, "1000", 4 [pid 5891] close(5 [pid 5033] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=99, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=66 /* 0.66 s */} --- [pid 5034] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5906] <... write resumed>) = 4 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5906] close(3 [pid 5891] close(6 [pid 5034] <... openat resumed>) = 3 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... openat resumed>) = 3 [pid 5034] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5034] getdents64(3, 0x555556550860 /* 7 entries */, 32768) = 208 [pid 5034] umount2("./33/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./33/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] unlink("./33/cgroup.cpu" [pid 5906] <... close resumed>) = 0 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... unlink resumed>) = 0 [pid 5033] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5031] ioctl(3, LOOP_CLR_FD [pid 5906] symlink("/dev/binderfs", "./binderfs" [pid 5891] close(7 [pid 5034] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] <... openat resumed>) = 3 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5906] <... symlink resumed>) = 0 [pid 5891] close(8 [pid 5034] newfstatat(AT_FDCWD, "./33/binderfs", [pid 5031] close(3 [pid 5033] newfstatat(3, "", [pid 5906] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5031] <... close resumed>) = 0 [pid 5906] <... futex resumed>) = 0 [pid 5891] close(9 [pid 5034] unlink("./33/binderfs" [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5906] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5907 attached [pid 5906] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5891] close(10 [pid 5034] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] getdents64(3, [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5034] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5034] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5907] set_robust_list(0x55555654e6a0, 24 [pid 5906] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] newfstatat(4, "", [pid 5033] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5031] <... clone resumed>, child_tidptr=0x55555654e690) = 98 [pid 5029] <... umount2 resumed>) = 0 [pid 5907] <... set_robust_list resumed>) = 0 [pid 5906] <... mprotect resumed>) = 0 [pid 5891] close(11 [pid 5034] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] umount2("./34/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] chdir("./33" [pid 5906] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] getdents64(4, [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... chdir resumed>) = 0 [pid 5906] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5891] close(12 [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5033] newfstatat(AT_FDCWD, "./34/cgroup.cpu", [pid 5029] newfstatat(AT_FDCWD, "./32/file0", [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5906] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] getdents64(4, [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5908 attached [pid 5907] <... prctl resumed>) = 0 [pid 5891] close(13 [pid 5034] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5033] unlink("./34/cgroup.cpu" [pid 5029] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5908] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5907] setpgid(0, 0 [pid 5906] <... clone3 resumed> => {parent_tid=[94]}, 88) = 94 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] close(4 [pid 5033] <... unlink resumed>) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5908] <... rseq resumed>) = 0 [pid 5907] <... setpgid resumed>) = 0 [pid 5906] rt_sigprocmask(SIG_SETMASK, [], [pid 5891] close(14 [pid 5034] <... close resumed>) = 0 [pid 5033] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5908] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5907] symlink("/syzcgroup/unified/syz4", "./cgroup" [pid 5906] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] rmdir("./33/file0" [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... openat resumed>) = 4 [pid 5908] <... set_robust_list resumed>) = 0 [pid 5907] <... symlink resumed>) = 0 [pid 5906] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] close(15 [pid 5033] newfstatat(AT_FDCWD, "./34/binderfs", [pid 5029] newfstatat(4, "", [pid 5908] rt_sigprocmask(SIG_SETMASK, [], [pid 5907] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu" [pid 5906] <... futex resumed>) = 0 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... rmdir resumed>) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5908] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5907] <... symlink resumed>) = 0 [pid 5906] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5891] close(16 [pid 5034] umount2("./33/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] unlink("./34/binderfs" [pid 5029] getdents64(4, [pid 5908] memfd_create("syzkaller", 0 [pid 5907] symlink("/syzcgroup/net/syz4", "./cgroup.net" [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... unlink resumed>) = 0 [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5908] <... memfd_create resumed>) = 3 [pid 5907] <... symlink resumed>) = 0 [pid 5891] close(17 [pid 5034] newfstatat(AT_FDCWD, "./33/cgroup", [pid 5033] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] getdents64(4, [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5907] <... openat resumed>) = 3 [pid 5891] close(18 [pid 5033] newfstatat(AT_FDCWD, "./34/file0", [pid 5029] close(4 [pid 5907] write(3, "1000", 4 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... close resumed>) = 0 [pid 5907] <... write resumed>) = 4 [pid 5891] close(19 [pid 5034] unlink("./33/cgroup" [pid 5033] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] rmdir("./32/file0" [pid 5908] <... mmap resumed>) = 0x7f4f650a0000 [pid 5907] close(3 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... unlink resumed>) = 0 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... rmdir resumed>) = 0 [pid 5907] <... close resumed>) = 0 [pid 5891] close(20 [pid 5034] umount2("./33/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] umount2("./32/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] symlink("/dev/binderfs", "./binderfs" [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] <... openat resumed>) = 4 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... symlink resumed>) = 0 [pid 5891] close(21 [pid 5034] newfstatat(AT_FDCWD, "./33/cgroup.net", [pid 5033] newfstatat(4, "", [pid 5029] newfstatat(AT_FDCWD, "./32/cgroup", [pid 5907] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5033] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5907] <... futex resumed>) = 0 [pid 5891] close(22 [pid 5034] unlink("./33/cgroup.net" [pid 5033] getdents64(4, [pid 5029] unlink("./32/cgroup" [pid 5907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... unlink resumed>) = 0 [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5029] <... unlink resumed>) = 0 [pid 5907] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5891] close(23 [pid 5034] getdents64(3, [pid 5033] getdents64(4, [pid 5029] umount2("./32/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5033] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5029] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] <... mprotect resumed>) = 0 [pid 5891] close(24 [pid 5034] close(3 [pid 5033] close(4 [pid 5029] newfstatat(AT_FDCWD, "./32/cgroup.net", [pid 5907] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... close resumed>) = 0 [pid 5033] <... close resumed>) = 0 [pid 5029] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5907] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5891] close(25 [pid 5034] rmdir("./33" [pid 5033] rmdir("./34/file0" [pid 5029] unlink("./32/cgroup.net" [pid 5907] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] <... rmdir resumed>) = 0 [pid 5033] <... rmdir resumed>) = 0 [pid 5029] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5909 attached [pid 5891] close(26 [pid 5034] mkdir("./34", 0777 [pid 5033] umount2("./34/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] getdents64(3, [pid 5909] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5907] <... clone3 resumed> => {parent_tid=[99]}, 88) = 99 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5909] <... rseq resumed>) = 0 [pid 5907] rt_sigprocmask(SIG_SETMASK, [], [pid 5891] close(27 [pid 5034] <... mkdir resumed>) = 0 [pid 5033] newfstatat(AT_FDCWD, "./34/cgroup", [pid 5029] close(3 [pid 5909] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5907] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... close resumed>) = 0 [pid 5909] <... set_robust_list resumed>) = 0 [pid 5907] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] close(28 [pid 5034] <... openat resumed>) = 3 [pid 5033] unlink("./34/cgroup" [pid 5029] rmdir("./32" [pid 5909] rt_sigprocmask(SIG_SETMASK, [], [pid 5907] <... futex resumed>) = 0 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] ioctl(3, LOOP_CLR_FD [pid 5033] <... unlink resumed>) = 0 [pid 5029] <... rmdir resumed>) = 0 [pid 5909] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5907] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5891] close(29 [pid 5034] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5033] umount2("./34/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] mkdir("./33", 0777 [pid 5909] memfd_create("syzkaller", 0 [pid 5891] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] close(3 [pid 5033] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5029] <... mkdir resumed>) = 0 [pid 5909] <... memfd_create resumed>) = 3 [pid 5891] write(1, "write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory\nwrite to /proc/sys/ne"..., 156write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [pid 5034] <... close resumed>) = 0 [pid 5033] newfstatat(AT_FDCWD, "./34/cgroup.net", [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5891] <... write resumed>) = 156 [pid 5034] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5033] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5029] <... openat resumed>) = 3 [pid 5909] <... mmap resumed>) = 0x7f4f650a0000 [pid 5891] exit_group(0 [pid 5033] unlink("./34/cgroup.net" [pid 5029] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5910 attached [pid 5905] <... futex resumed>) = ? [pid 5892] <... futex resumed>) = ? [pid 5891] <... exit_group resumed>) = ? [pid 5033] <... unlink resumed>) = 0 [pid 5029] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5910] set_robust_list(0x55555654e6a0, 24 [pid 5905] +++ exited with 0 +++ [pid 5892] +++ exited with 0 +++ [pid 5891] +++ exited with 0 +++ [pid 5034] <... clone resumed>, child_tidptr=0x55555654e690) = 103 [pid 5033] getdents64(3, [pid 5029] close(3 [pid 5910] <... set_robust_list resumed>) = 0 [pid 5033] <... getdents64 resumed>0x555556550860 /* 0 entries */, 32768) = 0 [pid 5032] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=97, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=60 /* 0.60 s */} --- [pid 5029] <... close resumed>) = 0 [pid 5033] close(3 [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5911 attached [pid 5910] chdir("./34" [pid 5033] <... close resumed>) = 0 [pid 5911] set_robust_list(0x55555654e6a0, 24 [pid 5910] <... chdir resumed>) = 0 [pid 5033] rmdir("./34" [pid 5032] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5029] <... clone resumed>, child_tidptr=0x55555654e690) = 106 [pid 5033] <... rmdir resumed>) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5033] mkdir("./35", 0777 [pid 5032] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5033] <... mkdir resumed>) = 0 [pid 5032] <... openat resumed>) = 3 [pid 5033] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5032] newfstatat(3, "", [pid 5033] <... openat resumed>) = 3 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5033] ioctl(3, LOOP_CLR_FD [pid 5032] getdents64(3, [pid 5033] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5032] <... getdents64 resumed>0x555556550860 /* 7 entries */, 32768) = 208 [pid 5033] close(3 [pid 5032] umount2("./33/cgroup.cpu", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5033] <... close resumed>) = 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5911] <... set_robust_list resumed>) = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5033] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5032] newfstatat(AT_FDCWD, "./33/cgroup.cpu", ./strace-static-x86_64: Process 5912 attached [pid 5911] chdir("./33" [pid 5910] <... prctl resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5912] set_robust_list(0x55555654e6a0, 24 [pid 5033] <... clone resumed>, child_tidptr=0x55555654e690) = 101 [pid 5032] unlink("./33/cgroup.cpu" [pid 5912] <... set_robust_list resumed>) = 0 [pid 5911] <... chdir resumed>) = 0 [pid 5910] setpgid(0, 0 [pid 5032] <... unlink resumed>) = 0 [pid 5032] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5912] chdir("./35" [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5910] <... setpgid resumed>) = 0 [pid 5032] newfstatat(AT_FDCWD, "./33/binderfs", [pid 5912] <... chdir resumed>) = 0 [pid 5911] <... prctl resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5911] setpgid(0, 0 [pid 5910] symlink("/syzcgroup/unified/syz5", "./cgroup" [pid 5032] unlink("./33/binderfs" [pid 5912] <... prctl resumed>) = 0 [pid 5911] <... setpgid resumed>) = 0 [pid 5910] <... symlink resumed>) = 0 [pid 5032] <... unlink resumed>) = 0 [pid 5032] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5912] setpgid(0, 0 [pid 5032] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5911] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 5032] newfstatat(AT_FDCWD, "./33/file0", [pid 5910] symlink("/syzcgroup/cpu/syz5", "./cgroup.cpu" [pid 5912] <... setpgid resumed>) = 0 [pid 5911] <... symlink resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5912] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 5911] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5910] <... symlink resumed>) = 0 [pid 5032] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5912] <... symlink resumed>) = 0 [pid 5032] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5912] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu" [pid 5911] <... symlink resumed>) = 0 [pid 5910] symlink("/syzcgroup/net/syz5", "./cgroup.net" [pid 5032] <... openat resumed>) = 4 [pid 5912] <... symlink resumed>) = 0 [pid 5911] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 5910] <... symlink resumed>) = 0 [pid 5032] newfstatat(4, "", [pid 5911] <... symlink resumed>) = 0 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5912] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5032] getdents64(4, [pid 5911] <... openat resumed>) = 3 [pid 5910] <... openat resumed>) = 3 [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 2 entries */, 32768) = 48 [pid 5912] <... symlink resumed>) = 0 [pid 5032] getdents64(4, [pid 5910] write(3, "1000", 4 [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5911] write(3, "1000", 4 [pid 5910] <... write resumed>) = 4 [pid 5032] <... getdents64 resumed>0x5555565588a0 /* 0 entries */, 32768) = 0 [pid 5912] <... openat resumed>) = 3 [pid 5911] <... write resumed>) = 4 [pid 5910] close(3 [pid 5032] close(4 [pid 5912] write(3, "1000", 4 [pid 5911] close(3 [pid 5910] <... close resumed>) = 0 [pid 5032] <... close resumed>) = 0 [pid 5912] <... write resumed>) = 4 [pid 5911] <... close resumed>) = 0 [pid 5910] symlink("/dev/binderfs", "./binderfs" [pid 5032] rmdir("./33/file0") = 0 [pid 5032] umount2("./33/cgroup", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5032] newfstatat(AT_FDCWD, "./33/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] unlink("./33/cgroup") = 0 [pid 5032] umount2("./33/cgroup.net", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5032] newfstatat(AT_FDCWD, "./33/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5032] unlink("./33/cgroup.net") = 0 [pid 5032] getdents64(3, 0x555556550860 /* 0 entries */, 32768) = 0 [pid 5032] close(3) = 0 [pid 5912] close(3 [pid 5911] symlink("/dev/binderfs", "./binderfs" [pid 5032] rmdir("./33" [pid 5912] <... close resumed>) = 0 [pid 5911] <... symlink resumed>) = 0 [pid 5910] <... symlink resumed>) = 0 [pid 5032] <... rmdir resumed>) = 0 [pid 5032] mkdir("./34", 0777 [pid 5912] symlink("/dev/binderfs", "./binderfs" [pid 5911] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] <... mkdir resumed>) = 0 [pid 5032] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5032] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5032] close(3) = 0 [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5913 attached , child_tidptr=0x55555654e690) = 100 [pid 5912] <... symlink resumed>) = 0 [pid 5911] <... futex resumed>) = 0 [pid 5910] <... futex resumed>) = 0 [pid 5913] set_robust_list(0x55555654e6a0, 24) = 0 [pid 5912] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5913] chdir("./34" [pid 5912] <... futex resumed>) = 0 [pid 5911] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5910] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5912] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5911] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5910] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5913] <... chdir resumed>) = 0 [pid 5911] <... mprotect resumed>) = 0 [pid 5910] <... mprotect resumed>) = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5912] <... mmap resumed>) = 0x7f4f6d4a0000 [pid 5910] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5913] <... prctl resumed>) = 0 [pid 5912] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE [pid 5911] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5910] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5913] setpgid(0, 0 [pid 5912] <... mprotect resumed>) = 0 [pid 5911] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5910] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5913] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5914 attached [pid 5912] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5915 attached [pid 5914] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5913] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 5910] <... clone3 resumed> => {parent_tid=[104]}, 88) = 104 [pid 5915] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5914] <... rseq resumed>) = 0 [pid 5912] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5911] <... clone3 resumed> => {parent_tid=[107]}, 88) = 107 [pid 5910] rt_sigprocmask(SIG_SETMASK, [], [pid 5915] <... rseq resumed>) = 0 [pid 5914] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5913] <... symlink resumed>) = 0 [pid 5912] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0} [pid 5911] rt_sigprocmask(SIG_SETMASK, [], [pid 5915] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5914] <... set_robust_list resumed>) = 0 [pid 5911] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5910] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5916 attached [pid 5915] <... set_robust_list resumed>) = 0 [pid 5913] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 5916] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5915] rt_sigprocmask(SIG_SETMASK, [], [pid 5914] rt_sigprocmask(SIG_SETMASK, [], [pid 5911] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5916] <... rseq resumed>) = 0 [pid 5915] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5916] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5915] memfd_create("syzkaller", 0 [pid 5914] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5913] <... symlink resumed>) = 0 [pid 5912] <... clone3 resumed> => {parent_tid=[102]}, 88) = 102 [pid 5911] <... futex resumed>) = 0 [pid 5910] <... futex resumed>) = 0 [pid 5916] <... set_robust_list resumed>) = 0 [pid 5915] <... memfd_create resumed>) = 3 [pid 5916] rt_sigprocmask(SIG_SETMASK, [], [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5916] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5915] <... mmap resumed>) = 0x7f4f650a0000 [pid 5916] futex(0x7f4f6dda46e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5910] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5914] memfd_create("syzkaller", 0 [pid 5913] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 5912] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5913] <... symlink resumed>) = 0 [pid 5912] futex(0x7f4f6dda46e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... memfd_create resumed>) = 3 [pid 5916] <... futex resumed>) = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5912] <... futex resumed>) = 1 [pid 5916] memfd_create("syzkaller", 0) = 3 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5912] futex(0x7f4f6dda46ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5916] <... mmap resumed>) = 0x7f4f650a0000 [pid 5914] <... mmap resumed>) = 0x7f4f650a0000 [pid 5913] <... openat resumed>) = 3 [pid 5913] write(3, "1000", 4) = 4 [pid 5913] close(3) = 0 [pid 5913] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5913] futex(0x7f4f6dda46ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f4f6d4a0000 [pid 5913] mprotect(0x7f4f6d4a1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5913] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5913] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f4f6d4c0990, parent_tid=0x7f4f6d4c0990, exit_signal=0, stack=0x7f4f6d4a0000, stack_size=0x20300, tls=0x7f4f6d4c06c0}./strace-static-x86_64: Process 5917 attached => {parent_tid=[101]}, 88) = 101 [pid 5917] rseq(0x7f4f6d4c0fe0, 0x20, 0, 0x53053053 [pid 5913] rt_sigprocmask(SIG_SETMASK, [], [pid 5917] <... rseq resumed>) = 0 [pid 5917] set_robust_list(0x7f4f6d4c09a0, 24 [pid 5913] <... rt_sigprocmask resumed>NULL, 8